<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="12386">
<package pkgid="6cdb53a0cf3b2468f5161ecf7e4a6210b277cb5ee781234acfcec4aa7d9ce5b6" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="6.el10"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-2" date="1752148800">- Resolves: RHEL-5117 - ns-slapd crash in
  dbmdb_import_prepare_worker_entry()
- Resolves: RHEL-31959 - [RFE] add plugin origin or source in security's
  log msg info
- Resolves: RHEL-35241 - ns-slapd crashes in referral mode
- Resolves: RHEL-61327 - Incomplete messages about replication in the
  errors log.
- Resolves: RHEL-61353 - dbscan  on replication changelog does not display
  MOD_TYPE
- Resolves: RHEL-62874 - dsidm: issue when renaming users
- Resolves: RHEL-65660 - DSIDM: Re-enabling user accounts that reached
  inactivity limit fails with error
- Resolves: RHEL-67003 - dsconf backend replication monitor fails if
  replica id starts with 0
- Resolves: RHEL-67006 - dsconf  utility  should let you configure the
  "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug-
  in
- Resolves: RHEL-67019 - Crash in __strlen_sse2 when using the nsRole
  filter rewriter.
- Resolves: RHEL-67022 - Password modify extended operation should skip
  password policy checks when executed by root DN
- Resolves: RHEL-70117 - Unify how group description can be added to a new
  group in WebUI and CLU
- Resolves: RHEL-74085 - Increased memory consumption caused by NDN cache
- Resolves: RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in
  Directory Server
- Resolves: RHEL-76832 - Wrong backend database name syntax causes "Red Hat
  Directory Server" =&gt; "Databases" menu blank in Cockpit
- Resolves: RHEL-76837 - dsidm Error: float() argument must be a string or
  a number, not 'NoneType'
- Resolves: RHEL-76840 - Monitoring tab should use dsconf monitor
- Resolves: RHEL-77490 - Complete remove the parameter "nsslapd-subtree-
  rename-switch" from DS-12
- Resolves: RHEL-79080 - Json option does not work with "dsidm account get-
  by-dn" command
- Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
  access and error logs
- Resolves: RHEL-80253 - RHDS hangs when having online backup running
  together with automember_rebuild task executing
- Resolves: RHEL-80497 - Can't rename users member of automember rule
  [rhel-10]
- Resolves: RHEL-81277 - logconv.py fails when specific timestamps are
  provided
- Resolves: RHEL-83850 - mdb database statistics don't work
- Resolves: RHEL-86279 - Cannot create a nested role using "dsidm role
  create-nested"
- Resolves: RHEL-86280 - Cannot create a filtered role using "dsidm role
  create-filtered"
- Resolves: RHEL-86313 - RootDN Access Control Plugin with wildcards for IP
  addresses fails with an error "Invalid IP address"
- Resolves: RHEL-86314 - dsidm failing with error "argument must be a
  string or a number"
- Resolves: RHEL-86315 - Dsidm get_dn option fails for organizational unit,
  service and posixgroup
- Resolves: RHEL-86316 - Dsidm uniquegroup members option does not work
- Resolves: RHEL-86321 - dsidm role rename-by-dn does not rename a role
- Resolves: RHEL-86322 - dsidm role subtree-status doesn't work
- Resolves: RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j
  option
- Resolves: RHEL-86324 - Deleting a role with dsidm results in proper
  deletion message, but role is still present
- Resolves: RHEL-86785 - dscontainer: support loading custom schema
- Resolves: RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp
  00007fed321fe100 error 6 in liblmdb.so.0.0.0
- Resolves: RHEL-89748 - Nested group does not receive memberOf attribute
- Resolves: RHEL-89774 - Improve the "result" field of ipa-healthcheck if
  replicas are busy [rhel-10]
- Resolves: RHEL-89776 - RHDS12.2 NSMMReplicationPlugin - release_replica
  Unable to parse the response
- Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
  00007ff734050cdb sp 00007ff6de9f1430 error 6 in
  libslapd.so.0.1.0[7ff733ec0000+1b3000]
- Resolves: RHEL-95761 - Improve  error message when bulk import connection
  is closed
- Resolves: RHEL-97565 - On RHDS 12.6 The user password policy for a user
  was created, but the pwdpolicysubentry attribute for this user
  incorrectly points to the People OU password policy instead of the
  specific user policy.
- Resolves: RHEL-101926 - ipa-backup failed with error : 'No such file or
  directory: '/usr/sbin/dsctl'</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-3" date="1754049600">- Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
  access and error logs
- Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
  00007ff734050cdb sp 00007ff6de9f1430 error 6 in
  libslapd.so.0.1.0[7ff733ec0000+1b3000]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-4" date="1754395200">- Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
- Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
  cache is disabled.
- Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
- Resolves: RHEL-92054 - Memory leak in
  roles_cache_create_object_from_entry [rhel-10]
- Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
  causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
- Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
  world readable permission
- Resolves: RHEL-107035 - CWE-532 Created user password hash available to
  see in audit log
- Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
  changed by administrator</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
</package>
<package pkgid="66533147903787429b99b719cff142699fb56a96466c8c9897468b708c5bde5f" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="7.el10_2"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-3" date="1754049600">- Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
  access and error logs
- Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
  00007ff734050cdb sp 00007ff6de9f1430 error 6 in
  libslapd.so.0.1.0[7ff733ec0000+1b3000]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-4" date="1754395200">- Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
- Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
  cache is disabled.
- Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
- Resolves: RHEL-92054 - Memory leak in
  roles_cache_create_object_from_entry [rhel-10]
- Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
  causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
- Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
  world readable permission
- Resolves: RHEL-107035 - CWE-532 Created user password hash available to
  see in audit log
- Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
  changed by administrator</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-7" date="1781179200">- Bump version to 3.2.0-7
- Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user
  [rhel-10.2.z]
- Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z]
- Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent
  search operations [rhel-10.2.z]
- Resolves: RHEL-170363 - access log - suspicious wtime  optime negative
  and large values in internal op [rhel-10.2.z]
- Resolves: RHEL-170478 - An online reinitialization with LMDB is
  terminating the receiving server [rhel-10.2.z]
- Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate
  recommendations when there is more than 1 LDAP backend [rhel-10.2.z]
- Resolves: RHEL-170515 - Possible memory leak when using the Retro
  Changelog plugin. [rhel-10.2.z]
- Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server
  threads [rhel-10.2.z]
- Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded
  LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap
  amplification (remote DoS) [rhel-10.2]
- Resolves: RHEL-180718 - Online export is failing when using the option
  "-s" [rhel-10.2.z]
- Resolves: RHEL-183897 - Server shutdown during online reindex may lead to
  data loss [rhel-10.2.z]
- Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected
  keyword argument 'input_file' [rhel-10.2.z]
- Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z]
- Resolves: RHEL-183900 - Substring index produces empty results and can
  crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  [rhel-10.2.z]</changelog>
</package>
<package pkgid="c4a3113ef17535fbf0bbd2eeb56b5dfd996c70ad4118d64a2308c8815034f6b8" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="8.el10_2"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-4" date="1754395200">- Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
- Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
  cache is disabled.
- Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
- Resolves: RHEL-92054 - Memory leak in
  roles_cache_create_object_from_entry [rhel-10]
- Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
  causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
- Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
  world readable permission
- Resolves: RHEL-107035 - CWE-532 Created user password hash available to
  see in audit log
- Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
  changed by administrator</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-7" date="1781179200">- Bump version to 3.2.0-7
- Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user
  [rhel-10.2.z]
- Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z]
- Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent
  search operations [rhel-10.2.z]
- Resolves: RHEL-170363 - access log - suspicious wtime  optime negative
  and large values in internal op [rhel-10.2.z]
- Resolves: RHEL-170478 - An online reinitialization with LMDB is
  terminating the receiving server [rhel-10.2.z]
- Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate
  recommendations when there is more than 1 LDAP backend [rhel-10.2.z]
- Resolves: RHEL-170515 - Possible memory leak when using the Retro
  Changelog plugin. [rhel-10.2.z]
- Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server
  threads [rhel-10.2.z]
- Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded
  LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap
  amplification (remote DoS) [rhel-10.2]
- Resolves: RHEL-180718 - Online export is failing when using the option
  "-s" [rhel-10.2.z]
- Resolves: RHEL-183897 - Server shutdown during online reindex may lead to
  data loss [rhel-10.2.z]
- Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected
  keyword argument 'input_file' [rhel-10.2.z]
- Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z]
- Resolves: RHEL-183900 - Substring index produces empty results and can
  crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  [rhel-10.2.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-8" date="1782475200">- Bump version to 3.2.0-8
- Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap
  buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z]
- Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer
  overflow in SASL packet length bypasses size limit leading to heap buffer
  overflow [rhel-10.2.z]</changelog>
</package>
<package pkgid="b63a6e710784d6f612e148e4d644bdbf8f9f0e56284acb81e7b4a46b1bd5874b" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="9.el10_2"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-7" date="1781179200">- Bump version to 3.2.0-7
- Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user
  [rhel-10.2.z]
- Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z]
- Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent
  search operations [rhel-10.2.z]
- Resolves: RHEL-170363 - access log - suspicious wtime  optime negative
  and large values in internal op [rhel-10.2.z]
- Resolves: RHEL-170478 - An online reinitialization with LMDB is
  terminating the receiving server [rhel-10.2.z]
- Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate
  recommendations when there is more than 1 LDAP backend [rhel-10.2.z]
- Resolves: RHEL-170515 - Possible memory leak when using the Retro
  Changelog plugin. [rhel-10.2.z]
- Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server
  threads [rhel-10.2.z]
- Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded
  LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap
  amplification (remote DoS) [rhel-10.2]
- Resolves: RHEL-180718 - Online export is failing when using the option
  "-s" [rhel-10.2.z]
- Resolves: RHEL-183897 - Server shutdown during online reindex may lead to
  data loss [rhel-10.2.z]
- Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected
  keyword argument 'input_file' [rhel-10.2.z]
- Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z]
- Resolves: RHEL-183900 - Substring index produces empty results and can
  crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  [rhel-10.2.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-8" date="1782475200">- Bump version to 3.2.0-8
- Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap
  buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z]
- Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer
  overflow in SASL packet length bypasses size limit leading to heap buffer
  overflow [rhel-10.2.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-9" date="1785326400">- Bump version to 3.2.0-9
- Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth
  LDAP filter injection in CleanAllRUV status check [rhel-10.2.z]
- Resolves: RHEL-190776 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL
  pointer dereference in deref control plugin BER parser [rhel-10.2.z]
- Resolves: RHEL-210874 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-
  authentication stack buffer overflow in get_ruvelement_from_berval() via
  unbounded replica ID parsing [rhel-10.2.z]</changelog>
</package>
<package pkgid="5875a6bf2321dda08e4013f651f72773e8338b3d4e4e429192f311447f0cb579" name="389-ds-base-bdb" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="6.el10"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-2" date="1752148800">- Resolves: RHEL-5117 - ns-slapd crash in
  dbmdb_import_prepare_worker_entry()
- Resolves: RHEL-31959 - [RFE] add plugin origin or source in security's
  log msg info
- Resolves: RHEL-35241 - ns-slapd crashes in referral mode
- Resolves: RHEL-61327 - Incomplete messages about replication in the
  errors log.
- Resolves: RHEL-61353 - dbscan  on replication changelog does not display
  MOD_TYPE
- Resolves: RHEL-62874 - dsidm: issue when renaming users
- Resolves: RHEL-65660 - DSIDM: Re-enabling user accounts that reached
  inactivity limit fails with error
- Resolves: RHEL-67003 - dsconf backend replication monitor fails if
  replica id starts with 0
- Resolves: RHEL-67006 - dsconf  utility  should let you configure the
  "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug-
  in
- Resolves: RHEL-67019 - Crash in __strlen_sse2 when using the nsRole
  filter rewriter.
- Resolves: RHEL-67022 - Password modify extended operation should skip
  password policy checks when executed by root DN
- Resolves: RHEL-70117 - Unify how group description can be added to a new
  group in WebUI and CLU
- Resolves: RHEL-74085 - Increased memory consumption caused by NDN cache
- Resolves: RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in
  Directory Server
- Resolves: RHEL-76832 - Wrong backend database name syntax causes "Red Hat
  Directory Server" =&gt; "Databases" menu blank in Cockpit
- Resolves: RHEL-76837 - dsidm Error: float() argument must be a string or
  a number, not 'NoneType'
- Resolves: RHEL-76840 - Monitoring tab should use dsconf monitor
- Resolves: RHEL-77490 - Complete remove the parameter "nsslapd-subtree-
  rename-switch" from DS-12
- Resolves: RHEL-79080 - Json option does not work with "dsidm account get-
  by-dn" command
- Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
  access and error logs
- Resolves: RHEL-80253 - RHDS hangs when having online backup running
  together with automember_rebuild task executing
- Resolves: RHEL-80497 - Can't rename users member of automember rule
  [rhel-10]
- Resolves: RHEL-81277 - logconv.py fails when specific timestamps are
  provided
- Resolves: RHEL-83850 - mdb database statistics don't work
- Resolves: RHEL-86279 - Cannot create a nested role using "dsidm role
  create-nested"
- Resolves: RHEL-86280 - Cannot create a filtered role using "dsidm role
  create-filtered"
- Resolves: RHEL-86313 - RootDN Access Control Plugin with wildcards for IP
  addresses fails with an error "Invalid IP address"
- Resolves: RHEL-86314 - dsidm failing with error "argument must be a
  string or a number"
- Resolves: RHEL-86315 - Dsidm get_dn option fails for organizational unit,
  service and posixgroup
- Resolves: RHEL-86316 - Dsidm uniquegroup members option does not work
- Resolves: RHEL-86321 - dsidm role rename-by-dn does not rename a role
- Resolves: RHEL-86322 - dsidm role subtree-status doesn't work
- Resolves: RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j
  option
- Resolves: RHEL-86324 - Deleting a role with dsidm results in proper
  deletion message, but role is still present
- Resolves: RHEL-86785 - dscontainer: support loading custom schema
- Resolves: RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp
  00007fed321fe100 error 6 in liblmdb.so.0.0.0
- Resolves: RHEL-89748 - Nested group does not receive memberOf attribute
- Resolves: RHEL-89774 - Improve the "result" field of ipa-healthcheck if
  replicas are busy [rhel-10]
- Resolves: RHEL-89776 - RHDS12.2 NSMMReplicationPlugin - release_replica
  Unable to parse the response
- Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
  00007ff734050cdb sp 00007ff6de9f1430 error 6 in
  libslapd.so.0.1.0[7ff733ec0000+1b3000]
- Resolves: RHEL-95761 - Improve  error message when bulk import connection
  is closed
- Resolves: RHEL-97565 - On RHDS 12.6 The user password policy for a user
  was created, but the pwdpolicysubentry attribute for this user
  incorrectly points to the People OU password policy instead of the
  specific user policy.
- Resolves: RHEL-101926 - ipa-backup failed with error : 'No such file or
  directory: '/usr/sbin/dsctl'</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-3" date="1754049600">- Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
  access and error logs
- Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
  00007ff734050cdb sp 00007ff6de9f1430 error 6 in
  libslapd.so.0.1.0[7ff733ec0000+1b3000]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-4" date="1754395200">- Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
- Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
  cache is disabled.
- Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
- Resolves: RHEL-92054 - Memory leak in
  roles_cache_create_object_from_entry [rhel-10]
- Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
  causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
- Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
  world readable permission
- Resolves: RHEL-107035 - CWE-532 Created user password hash available to
  see in audit log
- Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
  changed by administrator</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
</package>
<package pkgid="2b9069901c6d8553aceb0e0f794725435c2249bbb58ddb67c868d89c4dc70ebf" name="389-ds-base-bdb" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="7.el10_2"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-3" date="1754049600">- Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
  access and error logs
- Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
  00007ff734050cdb sp 00007ff6de9f1430 error 6 in
  libslapd.so.0.1.0[7ff733ec0000+1b3000]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-4" date="1754395200">- Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
- Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
  cache is disabled.
- Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
- Resolves: RHEL-92054 - Memory leak in
  roles_cache_create_object_from_entry [rhel-10]
- Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
  causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
- Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
  world readable permission
- Resolves: RHEL-107035 - CWE-532 Created user password hash available to
  see in audit log
- Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
  changed by administrator</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-7" date="1781179200">- Bump version to 3.2.0-7
- Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user
  [rhel-10.2.z]
- Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z]
- Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent
  search operations [rhel-10.2.z]
- Resolves: RHEL-170363 - access log - suspicious wtime  optime negative
  and large values in internal op [rhel-10.2.z]
- Resolves: RHEL-170478 - An online reinitialization with LMDB is
  terminating the receiving server [rhel-10.2.z]
- Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate
  recommendations when there is more than 1 LDAP backend [rhel-10.2.z]
- Resolves: RHEL-170515 - Possible memory leak when using the Retro
  Changelog plugin. [rhel-10.2.z]
- Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server
  threads [rhel-10.2.z]
- Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded
  LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap
  amplification (remote DoS) [rhel-10.2]
- Resolves: RHEL-180718 - Online export is failing when using the option
  "-s" [rhel-10.2.z]
- Resolves: RHEL-183897 - Server shutdown during online reindex may lead to
  data loss [rhel-10.2.z]
- Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected
  keyword argument 'input_file' [rhel-10.2.z]
- Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z]
- Resolves: RHEL-183900 - Substring index produces empty results and can
  crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  [rhel-10.2.z]</changelog>
</package>
<package pkgid="a4baef619933ac99da6da471224d0c807e12053f04019c226e8e66febe9849a3" name="389-ds-base-bdb" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="8.el10_2"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-4" date="1754395200">- Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
- Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
  cache is disabled.
- Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
- Resolves: RHEL-92054 - Memory leak in
  roles_cache_create_object_from_entry [rhel-10]
- Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
  causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
- Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
  world readable permission
- Resolves: RHEL-107035 - CWE-532 Created user password hash available to
  see in audit log
- Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
  changed by administrator</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-7" date="1781179200">- Bump version to 3.2.0-7
- Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user
  [rhel-10.2.z]
- Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z]
- Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent
  search operations [rhel-10.2.z]
- Resolves: RHEL-170363 - access log - suspicious wtime  optime negative
  and large values in internal op [rhel-10.2.z]
- Resolves: RHEL-170478 - An online reinitialization with LMDB is
  terminating the receiving server [rhel-10.2.z]
- Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate
  recommendations when there is more than 1 LDAP backend [rhel-10.2.z]
- Resolves: RHEL-170515 - Possible memory leak when using the Retro
  Changelog plugin. [rhel-10.2.z]
- Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server
  threads [rhel-10.2.z]
- Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded
  LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap
  amplification (remote DoS) [rhel-10.2]
- Resolves: RHEL-180718 - Online export is failing when using the option
  "-s" [rhel-10.2.z]
- Resolves: RHEL-183897 - Server shutdown during online reindex may lead to
  data loss [rhel-10.2.z]
- Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected
  keyword argument 'input_file' [rhel-10.2.z]
- Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z]
- Resolves: RHEL-183900 - Substring index produces empty results and can
  crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  [rhel-10.2.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-8" date="1782475200">- Bump version to 3.2.0-8
- Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap
  buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z]
- Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer
  overflow in SASL packet length bypasses size limit leading to heap buffer
  overflow [rhel-10.2.z]</changelog>
</package>
<package pkgid="7a630038fea9db8abb366c0154a80cbaf1ff5421a09dbb431d7c8645253b2d92" name="389-ds-base-bdb" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="9.el10_2"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-7" date="1781179200">- Bump version to 3.2.0-7
- Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user
  [rhel-10.2.z]
- Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z]
- Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent
  search operations [rhel-10.2.z]
- Resolves: RHEL-170363 - access log - suspicious wtime  optime negative
  and large values in internal op [rhel-10.2.z]
- Resolves: RHEL-170478 - An online reinitialization with LMDB is
  terminating the receiving server [rhel-10.2.z]
- Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate
  recommendations when there is more than 1 LDAP backend [rhel-10.2.z]
- Resolves: RHEL-170515 - Possible memory leak when using the Retro
  Changelog plugin. [rhel-10.2.z]
- Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server
  threads [rhel-10.2.z]
- Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded
  LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap
  amplification (remote DoS) [rhel-10.2]
- Resolves: RHEL-180718 - Online export is failing when using the option
  "-s" [rhel-10.2.z]
- Resolves: RHEL-183897 - Server shutdown during online reindex may lead to
  data loss [rhel-10.2.z]
- Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected
  keyword argument 'input_file' [rhel-10.2.z]
- Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z]
- Resolves: RHEL-183900 - Substring index produces empty results and can
  crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  [rhel-10.2.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-8" date="1782475200">- Bump version to 3.2.0-8
- Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap
  buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z]
- Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer
  overflow in SASL packet length bypasses size limit leading to heap buffer
  overflow [rhel-10.2.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-9" date="1785326400">- Bump version to 3.2.0-9
- Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth
  LDAP filter injection in CleanAllRUV status check [rhel-10.2.z]
- Resolves: RHEL-190776 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL
  pointer dereference in deref control plugin BER parser [rhel-10.2.z]
- Resolves: RHEL-210874 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-
  authentication stack buffer overflow in get_ruvelement_from_berval() via
  unbounded replica ID parsing [rhel-10.2.z]</changelog>
</package>
<package pkgid="be114cbcbc8ec39ce8370d8f7150890192864b0416af6953e5c37b9d0d690ac6" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="6.el10"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-2" date="1752148800">- Resolves: RHEL-5117 - ns-slapd crash in
  dbmdb_import_prepare_worker_entry()
- Resolves: RHEL-31959 - [RFE] add plugin origin or source in security's
  log msg info
- Resolves: RHEL-35241 - ns-slapd crashes in referral mode
- Resolves: RHEL-61327 - Incomplete messages about replication in the
  errors log.
- Resolves: RHEL-61353 - dbscan  on replication changelog does not display
  MOD_TYPE
- Resolves: RHEL-62874 - dsidm: issue when renaming users
- Resolves: RHEL-65660 - DSIDM: Re-enabling user accounts that reached
  inactivity limit fails with error
- Resolves: RHEL-67003 - dsconf backend replication monitor fails if
  replica id starts with 0
- Resolves: RHEL-67006 - dsconf  utility  should let you configure the
  "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug-
  in
- Resolves: RHEL-67019 - Crash in __strlen_sse2 when using the nsRole
  filter rewriter.
- Resolves: RHEL-67022 - Password modify extended operation should skip
  password policy checks when executed by root DN
- Resolves: RHEL-70117 - Unify how group description can be added to a new
  group in WebUI and CLU
- Resolves: RHEL-74085 - Increased memory consumption caused by NDN cache
- Resolves: RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in
  Directory Server
- Resolves: RHEL-76832 - Wrong backend database name syntax causes "Red Hat
  Directory Server" =&gt; "Databases" menu blank in Cockpit
- Resolves: RHEL-76837 - dsidm Error: float() argument must be a string or
  a number, not 'NoneType'
- Resolves: RHEL-76840 - Monitoring tab should use dsconf monitor
- Resolves: RHEL-77490 - Complete remove the parameter "nsslapd-subtree-
  rename-switch" from DS-12
- Resolves: RHEL-79080 - Json option does not work with "dsidm account get-
  by-dn" command
- Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
  access and error logs
- Resolves: RHEL-80253 - RHDS hangs when having online backup running
  together with automember_rebuild task executing
- Resolves: RHEL-80497 - Can't rename users member of automember rule
  [rhel-10]
- Resolves: RHEL-81277 - logconv.py fails when specific timestamps are
  provided
- Resolves: RHEL-83850 - mdb database statistics don't work
- Resolves: RHEL-86279 - Cannot create a nested role using "dsidm role
  create-nested"
- Resolves: RHEL-86280 - Cannot create a filtered role using "dsidm role
  create-filtered"
- Resolves: RHEL-86313 - RootDN Access Control Plugin with wildcards for IP
  addresses fails with an error "Invalid IP address"
- Resolves: RHEL-86314 - dsidm failing with error "argument must be a
  string or a number"
- Resolves: RHEL-86315 - Dsidm get_dn option fails for organizational unit,
  service and posixgroup
- Resolves: RHEL-86316 - Dsidm uniquegroup members option does not work
- Resolves: RHEL-86321 - dsidm role rename-by-dn does not rename a role
- Resolves: RHEL-86322 - dsidm role subtree-status doesn't work
- Resolves: RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j
  option
- Resolves: RHEL-86324 - Deleting a role with dsidm results in proper
  deletion message, but role is still present
- Resolves: RHEL-86785 - dscontainer: support loading custom schema
- Resolves: RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp
  00007fed321fe100 error 6 in liblmdb.so.0.0.0
- Resolves: RHEL-89748 - Nested group does not receive memberOf attribute
- Resolves: RHEL-89774 - Improve the "result" field of ipa-healthcheck if
  replicas are busy [rhel-10]
- Resolves: RHEL-89776 - RHDS12.2 NSMMReplicationPlugin - release_replica
  Unable to parse the response
- Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
  00007ff734050cdb sp 00007ff6de9f1430 error 6 in
  libslapd.so.0.1.0[7ff733ec0000+1b3000]
- Resolves: RHEL-95761 - Improve  error message when bulk import connection
  is closed
- Resolves: RHEL-97565 - On RHDS 12.6 The user password policy for a user
  was created, but the pwdpolicysubentry attribute for this user
  incorrectly points to the People OU password policy instead of the
  specific user policy.
- Resolves: RHEL-101926 - ipa-backup failed with error : 'No such file or
  directory: '/usr/sbin/dsctl'</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-3" date="1754049600">- Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
  access and error logs
- Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
  00007ff734050cdb sp 00007ff6de9f1430 error 6 in
  libslapd.so.0.1.0[7ff733ec0000+1b3000]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-4" date="1754395200">- Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
- Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
  cache is disabled.
- Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
- Resolves: RHEL-92054 - Memory leak in
  roles_cache_create_object_from_entry [rhel-10]
- Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
  causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
- Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
  world readable permission
- Resolves: RHEL-107035 - CWE-532 Created user password hash available to
  see in audit log
- Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
  changed by administrator</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
</package>
<package pkgid="b89e1363a0dfcc536ccc48b5794f33e974516753a4295e15bf510f5403e2970e" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="7.el10_2"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-3" date="1754049600">- Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
  access and error logs
- Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
  00007ff734050cdb sp 00007ff6de9f1430 error 6 in
  libslapd.so.0.1.0[7ff733ec0000+1b3000]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-4" date="1754395200">- Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
- Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
  cache is disabled.
- Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
- Resolves: RHEL-92054 - Memory leak in
  roles_cache_create_object_from_entry [rhel-10]
- Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
  causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
- Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
  world readable permission
- Resolves: RHEL-107035 - CWE-532 Created user password hash available to
  see in audit log
- Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
  changed by administrator</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-7" date="1781179200">- Bump version to 3.2.0-7
- Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user
  [rhel-10.2.z]
- Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z]
- Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent
  search operations [rhel-10.2.z]
- Resolves: RHEL-170363 - access log - suspicious wtime  optime negative
  and large values in internal op [rhel-10.2.z]
- Resolves: RHEL-170478 - An online reinitialization with LMDB is
  terminating the receiving server [rhel-10.2.z]
- Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate
  recommendations when there is more than 1 LDAP backend [rhel-10.2.z]
- Resolves: RHEL-170515 - Possible memory leak when using the Retro
  Changelog plugin. [rhel-10.2.z]
- Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server
  threads [rhel-10.2.z]
- Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded
  LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap
  amplification (remote DoS) [rhel-10.2]
- Resolves: RHEL-180718 - Online export is failing when using the option
  "-s" [rhel-10.2.z]
- Resolves: RHEL-183897 - Server shutdown during online reindex may lead to
  data loss [rhel-10.2.z]
- Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected
  keyword argument 'input_file' [rhel-10.2.z]
- Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z]
- Resolves: RHEL-183900 - Substring index produces empty results and can
  crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  [rhel-10.2.z]</changelog>
</package>
<package pkgid="a22f56aafe36a7c11a953ab3c5ae4699cf71871528514b1e15f573c04f5d7133" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="8.el10_2"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-4" date="1754395200">- Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
- Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
  cache is disabled.
- Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
- Resolves: RHEL-92054 - Memory leak in
  roles_cache_create_object_from_entry [rhel-10]
- Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
  causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
- Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
  world readable permission
- Resolves: RHEL-107035 - CWE-532 Created user password hash available to
  see in audit log
- Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
  changed by administrator</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-7" date="1781179200">- Bump version to 3.2.0-7
- Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user
  [rhel-10.2.z]
- Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z]
- Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent
  search operations [rhel-10.2.z]
- Resolves: RHEL-170363 - access log - suspicious wtime  optime negative
  and large values in internal op [rhel-10.2.z]
- Resolves: RHEL-170478 - An online reinitialization with LMDB is
  terminating the receiving server [rhel-10.2.z]
- Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate
  recommendations when there is more than 1 LDAP backend [rhel-10.2.z]
- Resolves: RHEL-170515 - Possible memory leak when using the Retro
  Changelog plugin. [rhel-10.2.z]
- Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server
  threads [rhel-10.2.z]
- Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded
  LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap
  amplification (remote DoS) [rhel-10.2]
- Resolves: RHEL-180718 - Online export is failing when using the option
  "-s" [rhel-10.2.z]
- Resolves: RHEL-183897 - Server shutdown during online reindex may lead to
  data loss [rhel-10.2.z]
- Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected
  keyword argument 'input_file' [rhel-10.2.z]
- Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z]
- Resolves: RHEL-183900 - Substring index produces empty results and can
  crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  [rhel-10.2.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-8" date="1782475200">- Bump version to 3.2.0-8
- Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap
  buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z]
- Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer
  overflow in SASL packet length bypasses size limit leading to heap buffer
  overflow [rhel-10.2.z]</changelog>
</package>
<package pkgid="24922edbe38a750070b852fcd63be07b54baa0b898c5f53f9822cd676c31df3d" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="9.el10_2"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-7" date="1781179200">- Bump version to 3.2.0-7
- Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user
  [rhel-10.2.z]
- Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z]
- Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent
  search operations [rhel-10.2.z]
- Resolves: RHEL-170363 - access log - suspicious wtime  optime negative
  and large values in internal op [rhel-10.2.z]
- Resolves: RHEL-170478 - An online reinitialization with LMDB is
  terminating the receiving server [rhel-10.2.z]
- Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate
  recommendations when there is more than 1 LDAP backend [rhel-10.2.z]
- Resolves: RHEL-170515 - Possible memory leak when using the Retro
  Changelog plugin. [rhel-10.2.z]
- Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server
  threads [rhel-10.2.z]
- Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded
  LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap
  amplification (remote DoS) [rhel-10.2]
- Resolves: RHEL-180718 - Online export is failing when using the option
  "-s" [rhel-10.2.z]
- Resolves: RHEL-183897 - Server shutdown during online reindex may lead to
  data loss [rhel-10.2.z]
- Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected
  keyword argument 'input_file' [rhel-10.2.z]
- Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z]
- Resolves: RHEL-183900 - Substring index produces empty results and can
  crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  [rhel-10.2.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-8" date="1782475200">- Bump version to 3.2.0-8
- Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap
  buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z]
- Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer
  overflow in SASL packet length bypasses size limit leading to heap buffer
  overflow [rhel-10.2.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-9" date="1785326400">- Bump version to 3.2.0-9
- Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth
  LDAP filter injection in CleanAllRUV status check [rhel-10.2.z]
- Resolves: RHEL-190776 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL
  pointer dereference in deref control plugin BER parser [rhel-10.2.z]
- Resolves: RHEL-210874 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-
  authentication stack buffer overflow in get_ruvelement_from_berval() via
  unbounded replica ID parsing [rhel-10.2.z]</changelog>
</package>
<package pkgid="1f8031414b7c0aa1db3525375f64cee75105ff22bbe24ab6e71d634e3b6c3ed8" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="6.el10"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-2" date="1752148800">- Resolves: RHEL-5117 - ns-slapd crash in
  dbmdb_import_prepare_worker_entry()
- Resolves: RHEL-31959 - [RFE] add plugin origin or source in security's
  log msg info
- Resolves: RHEL-35241 - ns-slapd crashes in referral mode
- Resolves: RHEL-61327 - Incomplete messages about replication in the
  errors log.
- Resolves: RHEL-61353 - dbscan  on replication changelog does not display
  MOD_TYPE
- Resolves: RHEL-62874 - dsidm: issue when renaming users
- Resolves: RHEL-65660 - DSIDM: Re-enabling user accounts that reached
  inactivity limit fails with error
- Resolves: RHEL-67003 - dsconf backend replication monitor fails if
  replica id starts with 0
- Resolves: RHEL-67006 - dsconf  utility  should let you configure the
  "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug-
  in
- Resolves: RHEL-67019 - Crash in __strlen_sse2 when using the nsRole
  filter rewriter.
- Resolves: RHEL-67022 - Password modify extended operation should skip
  password policy checks when executed by root DN
- Resolves: RHEL-70117 - Unify how group description can be added to a new
  group in WebUI and CLU
- Resolves: RHEL-74085 - Increased memory consumption caused by NDN cache
- Resolves: RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in
  Directory Server
- Resolves: RHEL-76832 - Wrong backend database name syntax causes "Red Hat
  Directory Server" =&gt; "Databases" menu blank in Cockpit
- Resolves: RHEL-76837 - dsidm Error: float() argument must be a string or
  a number, not 'NoneType'
- Resolves: RHEL-76840 - Monitoring tab should use dsconf monitor
- Resolves: RHEL-77490 - Complete remove the parameter "nsslapd-subtree-
  rename-switch" from DS-12
- Resolves: RHEL-79080 - Json option does not work with "dsidm account get-
  by-dn" command
- Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
  access and error logs
- Resolves: RHEL-80253 - RHDS hangs when having online backup running
  together with automember_rebuild task executing
- Resolves: RHEL-80497 - Can't rename users member of automember rule
  [rhel-10]
- Resolves: RHEL-81277 - logconv.py fails when specific timestamps are
  provided
- Resolves: RHEL-83850 - mdb database statistics don't work
- Resolves: RHEL-86279 - Cannot create a nested role using "dsidm role
  create-nested"
- Resolves: RHEL-86280 - Cannot create a filtered role using "dsidm role
  create-filtered"
- Resolves: RHEL-86313 - RootDN Access Control Plugin with wildcards for IP
  addresses fails with an error "Invalid IP address"
- Resolves: RHEL-86314 - dsidm failing with error "argument must be a
  string or a number"
- Resolves: RHEL-86315 - Dsidm get_dn option fails for organizational unit,
  service and posixgroup
- Resolves: RHEL-86316 - Dsidm uniquegroup members option does not work
- Resolves: RHEL-86321 - dsidm role rename-by-dn does not rename a role
- Resolves: RHEL-86322 - dsidm role subtree-status doesn't work
- Resolves: RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j
  option
- Resolves: RHEL-86324 - Deleting a role with dsidm results in proper
  deletion message, but role is still present
- Resolves: RHEL-86785 - dscontainer: support loading custom schema
- Resolves: RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp
  00007fed321fe100 error 6 in liblmdb.so.0.0.0
- Resolves: RHEL-89748 - Nested group does not receive memberOf attribute
- Resolves: RHEL-89774 - Improve the "result" field of ipa-healthcheck if
  replicas are busy [rhel-10]
- Resolves: RHEL-89776 - RHDS12.2 NSMMReplicationPlugin - release_replica
  Unable to parse the response
- Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
  00007ff734050cdb sp 00007ff6de9f1430 error 6 in
  libslapd.so.0.1.0[7ff733ec0000+1b3000]
- Resolves: RHEL-95761 - Improve  error message when bulk import connection
  is closed
- Resolves: RHEL-97565 - On RHDS 12.6 The user password policy for a user
  was created, but the pwdpolicysubentry attribute for this user
  incorrectly points to the People OU password policy instead of the
  specific user policy.
- Resolves: RHEL-101926 - ipa-backup failed with error : 'No such file or
  directory: '/usr/sbin/dsctl'</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-3" date="1754049600">- Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
  access and error logs
- Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
  00007ff734050cdb sp 00007ff6de9f1430 error 6 in
  libslapd.so.0.1.0[7ff733ec0000+1b3000]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-4" date="1754395200">- Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
- Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
  cache is disabled.
- Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
- Resolves: RHEL-92054 - Memory leak in
  roles_cache_create_object_from_entry [rhel-10]
- Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
  causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
- Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
  world readable permission
- Resolves: RHEL-107035 - CWE-532 Created user password hash available to
  see in audit log
- Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
  changed by administrator</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
</package>
<package pkgid="44d416617f154c57f0118facf706c6e4117db4ed695cff3cbb047d86120049ff" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="7.el10_2"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-3" date="1754049600">- Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
  access and error logs
- Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
  00007ff734050cdb sp 00007ff6de9f1430 error 6 in
  libslapd.so.0.1.0[7ff733ec0000+1b3000]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-4" date="1754395200">- Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
- Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
  cache is disabled.
- Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
- Resolves: RHEL-92054 - Memory leak in
  roles_cache_create_object_from_entry [rhel-10]
- Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
  causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
- Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
  world readable permission
- Resolves: RHEL-107035 - CWE-532 Created user password hash available to
  see in audit log
- Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
  changed by administrator</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-7" date="1781179200">- Bump version to 3.2.0-7
- Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user
  [rhel-10.2.z]
- Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z]
- Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent
  search operations [rhel-10.2.z]
- Resolves: RHEL-170363 - access log - suspicious wtime  optime negative
  and large values in internal op [rhel-10.2.z]
- Resolves: RHEL-170478 - An online reinitialization with LMDB is
  terminating the receiving server [rhel-10.2.z]
- Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate
  recommendations when there is more than 1 LDAP backend [rhel-10.2.z]
- Resolves: RHEL-170515 - Possible memory leak when using the Retro
  Changelog plugin. [rhel-10.2.z]
- Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server
  threads [rhel-10.2.z]
- Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded
  LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap
  amplification (remote DoS) [rhel-10.2]
- Resolves: RHEL-180718 - Online export is failing when using the option
  "-s" [rhel-10.2.z]
- Resolves: RHEL-183897 - Server shutdown during online reindex may lead to
  data loss [rhel-10.2.z]
- Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected
  keyword argument 'input_file' [rhel-10.2.z]
- Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z]
- Resolves: RHEL-183900 - Substring index produces empty results and can
  crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  [rhel-10.2.z]</changelog>
</package>
<package pkgid="ff4e7373b29731f476a66e2730e73eaac2abe3a37f25c34a4c37db7d1bcc28dc" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="8.el10_2"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-4" date="1754395200">- Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
- Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
  cache is disabled.
- Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
- Resolves: RHEL-92054 - Memory leak in
  roles_cache_create_object_from_entry [rhel-10]
- Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
  causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
- Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
  world readable permission
- Resolves: RHEL-107035 - CWE-532 Created user password hash available to
  see in audit log
- Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
  changed by administrator</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-7" date="1781179200">- Bump version to 3.2.0-7
- Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user
  [rhel-10.2.z]
- Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z]
- Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent
  search operations [rhel-10.2.z]
- Resolves: RHEL-170363 - access log - suspicious wtime  optime negative
  and large values in internal op [rhel-10.2.z]
- Resolves: RHEL-170478 - An online reinitialization with LMDB is
  terminating the receiving server [rhel-10.2.z]
- Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate
  recommendations when there is more than 1 LDAP backend [rhel-10.2.z]
- Resolves: RHEL-170515 - Possible memory leak when using the Retro
  Changelog plugin. [rhel-10.2.z]
- Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server
  threads [rhel-10.2.z]
- Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded
  LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap
  amplification (remote DoS) [rhel-10.2]
- Resolves: RHEL-180718 - Online export is failing when using the option
  "-s" [rhel-10.2.z]
- Resolves: RHEL-183897 - Server shutdown during online reindex may lead to
  data loss [rhel-10.2.z]
- Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected
  keyword argument 'input_file' [rhel-10.2.z]
- Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z]
- Resolves: RHEL-183900 - Substring index produces empty results and can
  crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  [rhel-10.2.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-8" date="1782475200">- Bump version to 3.2.0-8
- Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap
  buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z]
- Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer
  overflow in SASL packet length bypasses size limit leading to heap buffer
  overflow [rhel-10.2.z]</changelog>
</package>
<package pkgid="6eb26d3e7fe323868fd666530d409f35e1fb77e9d586520ae702da7c51248afb" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="9.el10_2"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-7" date="1781179200">- Bump version to 3.2.0-7
- Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user
  [rhel-10.2.z]
- Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z]
- Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent
  search operations [rhel-10.2.z]
- Resolves: RHEL-170363 - access log - suspicious wtime  optime negative
  and large values in internal op [rhel-10.2.z]
- Resolves: RHEL-170478 - An online reinitialization with LMDB is
  terminating the receiving server [rhel-10.2.z]
- Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate
  recommendations when there is more than 1 LDAP backend [rhel-10.2.z]
- Resolves: RHEL-170515 - Possible memory leak when using the Retro
  Changelog plugin. [rhel-10.2.z]
- Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server
  threads [rhel-10.2.z]
- Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded
  LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap
  amplification (remote DoS) [rhel-10.2]
- Resolves: RHEL-180718 - Online export is failing when using the option
  "-s" [rhel-10.2.z]
- Resolves: RHEL-183897 - Server shutdown during online reindex may lead to
  data loss [rhel-10.2.z]
- Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected
  keyword argument 'input_file' [rhel-10.2.z]
- Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z]
- Resolves: RHEL-183900 - Substring index produces empty results and can
  crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  [rhel-10.2.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-8" date="1782475200">- Bump version to 3.2.0-8
- Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap
  buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z]
- Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer
  overflow in SASL packet length bypasses size limit leading to heap buffer
  overflow [rhel-10.2.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-9" date="1785326400">- Bump version to 3.2.0-9
- Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth
  LDAP filter injection in CleanAllRUV status check [rhel-10.2.z]
- Resolves: RHEL-190776 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL
  pointer dereference in deref control plugin BER parser [rhel-10.2.z]
- Resolves: RHEL-210874 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-
  authentication stack buffer overflow in get_ruvelement_from_berval() via
  unbounded replica ID parsing [rhel-10.2.z]</changelog>
</package>
<package pkgid="1000345819a0ffc8ffb06f1889f21e297f6a358cb89d272611be5297c18dbf45" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="6.el10"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-2" date="1752148800">- Resolves: RHEL-5117 - ns-slapd crash in
  dbmdb_import_prepare_worker_entry()
- Resolves: RHEL-31959 - [RFE] add plugin origin or source in security's
  log msg info
- Resolves: RHEL-35241 - ns-slapd crashes in referral mode
- Resolves: RHEL-61327 - Incomplete messages about replication in the
  errors log.
- Resolves: RHEL-61353 - dbscan  on replication changelog does not display
  MOD_TYPE
- Resolves: RHEL-62874 - dsidm: issue when renaming users
- Resolves: RHEL-65660 - DSIDM: Re-enabling user accounts that reached
  inactivity limit fails with error
- Resolves: RHEL-67003 - dsconf backend replication monitor fails if
  replica id starts with 0
- Resolves: RHEL-67006 - dsconf  utility  should let you configure the
  "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug-
  in
- Resolves: RHEL-67019 - Crash in __strlen_sse2 when using the nsRole
  filter rewriter.
- Resolves: RHEL-67022 - Password modify extended operation should skip
  password policy checks when executed by root DN
- Resolves: RHEL-70117 - Unify how group description can be added to a new
  group in WebUI and CLU
- Resolves: RHEL-74085 - Increased memory consumption caused by NDN cache
- Resolves: RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in
  Directory Server
- Resolves: RHEL-76832 - Wrong backend database name syntax causes "Red Hat
  Directory Server" =&gt; "Databases" menu blank in Cockpit
- Resolves: RHEL-76837 - dsidm Error: float() argument must be a string or
  a number, not 'NoneType'
- Resolves: RHEL-76840 - Monitoring tab should use dsconf monitor
- Resolves: RHEL-77490 - Complete remove the parameter "nsslapd-subtree-
  rename-switch" from DS-12
- Resolves: RHEL-79080 - Json option does not work with "dsidm account get-
  by-dn" command
- Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
  access and error logs
- Resolves: RHEL-80253 - RHDS hangs when having online backup running
  together with automember_rebuild task executing
- Resolves: RHEL-80497 - Can't rename users member of automember rule
  [rhel-10]
- Resolves: RHEL-81277 - logconv.py fails when specific timestamps are
  provided
- Resolves: RHEL-83850 - mdb database statistics don't work
- Resolves: RHEL-86279 - Cannot create a nested role using "dsidm role
  create-nested"
- Resolves: RHEL-86280 - Cannot create a filtered role using "dsidm role
  create-filtered"
- Resolves: RHEL-86313 - RootDN Access Control Plugin with wildcards for IP
  addresses fails with an error "Invalid IP address"
- Resolves: RHEL-86314 - dsidm failing with error "argument must be a
  string or a number"
- Resolves: RHEL-86315 - Dsidm get_dn option fails for organizational unit,
  service and posixgroup
- Resolves: RHEL-86316 - Dsidm uniquegroup members option does not work
- Resolves: RHEL-86321 - dsidm role rename-by-dn does not rename a role
- Resolves: RHEL-86322 - dsidm role subtree-status doesn't work
- Resolves: RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j
  option
- Resolves: RHEL-86324 - Deleting a role with dsidm results in proper
  deletion message, but role is still present
- Resolves: RHEL-86785 - dscontainer: support loading custom schema
- Resolves: RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp
  00007fed321fe100 error 6 in liblmdb.so.0.0.0
- Resolves: RHEL-89748 - Nested group does not receive memberOf attribute
- Resolves: RHEL-89774 - Improve the "result" field of ipa-healthcheck if
  replicas are busy [rhel-10]
- Resolves: RHEL-89776 - RHDS12.2 NSMMReplicationPlugin - release_replica
  Unable to parse the response
- Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
  00007ff734050cdb sp 00007ff6de9f1430 error 6 in
  libslapd.so.0.1.0[7ff733ec0000+1b3000]
- Resolves: RHEL-95761 - Improve  error message when bulk import connection
  is closed
- Resolves: RHEL-97565 - On RHDS 12.6 The user password policy for a user
  was created, but the pwdpolicysubentry attribute for this user
  incorrectly points to the People OU password policy instead of the
  specific user policy.
- Resolves: RHEL-101926 - ipa-backup failed with error : 'No such file or
  directory: '/usr/sbin/dsctl'</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-3" date="1754049600">- Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
  access and error logs
- Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
  00007ff734050cdb sp 00007ff6de9f1430 error 6 in
  libslapd.so.0.1.0[7ff733ec0000+1b3000]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-4" date="1754395200">- Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
- Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
  cache is disabled.
- Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
- Resolves: RHEL-92054 - Memory leak in
  roles_cache_create_object_from_entry [rhel-10]
- Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
  causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
- Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
  world readable permission
- Resolves: RHEL-107035 - CWE-532 Created user password hash available to
  see in audit log
- Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
  changed by administrator</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
</package>
<package pkgid="a64f29a93900771f5bd5255b1eb88d05b473cd1a224b5112dc80ca1e90591269" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="7.el10_2"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-3" date="1754049600">- Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
  access and error logs
- Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
  00007ff734050cdb sp 00007ff6de9f1430 error 6 in
  libslapd.so.0.1.0[7ff733ec0000+1b3000]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-4" date="1754395200">- Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
- Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
  cache is disabled.
- Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
- Resolves: RHEL-92054 - Memory leak in
  roles_cache_create_object_from_entry [rhel-10]
- Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
  causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
- Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
  world readable permission
- Resolves: RHEL-107035 - CWE-532 Created user password hash available to
  see in audit log
- Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
  changed by administrator</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-7" date="1781179200">- Bump version to 3.2.0-7
- Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user
  [rhel-10.2.z]
- Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z]
- Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent
  search operations [rhel-10.2.z]
- Resolves: RHEL-170363 - access log - suspicious wtime  optime negative
  and large values in internal op [rhel-10.2.z]
- Resolves: RHEL-170478 - An online reinitialization with LMDB is
  terminating the receiving server [rhel-10.2.z]
- Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate
  recommendations when there is more than 1 LDAP backend [rhel-10.2.z]
- Resolves: RHEL-170515 - Possible memory leak when using the Retro
  Changelog plugin. [rhel-10.2.z]
- Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server
  threads [rhel-10.2.z]
- Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded
  LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap
  amplification (remote DoS) [rhel-10.2]
- Resolves: RHEL-180718 - Online export is failing when using the option
  "-s" [rhel-10.2.z]
- Resolves: RHEL-183897 - Server shutdown during online reindex may lead to
  data loss [rhel-10.2.z]
- Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected
  keyword argument 'input_file' [rhel-10.2.z]
- Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z]
- Resolves: RHEL-183900 - Substring index produces empty results and can
  crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  [rhel-10.2.z]</changelog>
</package>
<package pkgid="1db10a02b8fd4b17047dcdc26922f6329bb3f709aac8bb892f0fba2ba1c583a0" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="8.el10_2"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-4" date="1754395200">- Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
- Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
  cache is disabled.
- Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
- Resolves: RHEL-92054 - Memory leak in
  roles_cache_create_object_from_entry [rhel-10]
- Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
  causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
- Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
  world readable permission
- Resolves: RHEL-107035 - CWE-532 Created user password hash available to
  see in audit log
- Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
  changed by administrator</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-7" date="1781179200">- Bump version to 3.2.0-7
- Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user
  [rhel-10.2.z]
- Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z]
- Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent
  search operations [rhel-10.2.z]
- Resolves: RHEL-170363 - access log - suspicious wtime  optime negative
  and large values in internal op [rhel-10.2.z]
- Resolves: RHEL-170478 - An online reinitialization with LMDB is
  terminating the receiving server [rhel-10.2.z]
- Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate
  recommendations when there is more than 1 LDAP backend [rhel-10.2.z]
- Resolves: RHEL-170515 - Possible memory leak when using the Retro
  Changelog plugin. [rhel-10.2.z]
- Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server
  threads [rhel-10.2.z]
- Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded
  LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap
  amplification (remote DoS) [rhel-10.2]
- Resolves: RHEL-180718 - Online export is failing when using the option
  "-s" [rhel-10.2.z]
- Resolves: RHEL-183897 - Server shutdown during online reindex may lead to
  data loss [rhel-10.2.z]
- Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected
  keyword argument 'input_file' [rhel-10.2.z]
- Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z]
- Resolves: RHEL-183900 - Substring index produces empty results and can
  crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  [rhel-10.2.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-8" date="1782475200">- Bump version to 3.2.0-8
- Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap
  buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z]
- Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer
  overflow in SASL packet length bypasses size limit leading to heap buffer
  overflow [rhel-10.2.z]</changelog>
</package>
<package pkgid="c62fbcdbd1bef84455e0112116df569426dad65cde8b358c35b527b02c6b0afb" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="9.el10_2"/>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.1.3-5" date="1758196800">- Resolves: RHEL-101727 - The numSubordinates value is not matching the
  number of direct children.
- Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
- Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
  attributes using custom matching rules
- Resolves: RHEL-111224 - Error showing local password policy on web UI
- Resolves: RHEL-112675 - Statistics about index lookup report a wrong
  duration
- Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
- Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
- Resolves: RHEL-113969 - AddressSanitizer: memory leak in
  memberof_add_memberof_attr</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-1" date="1767873600">- Update to 3.2.0
- Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
  tune should adapt its tuning
- Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
  allow large groups to stay in the cache
- Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
  across different tools
- Resolves: RHEL-83274 - Replication online reinitialization of a large
  database gets stalled.
- Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
  IDL scan limit at INT_MAX
- Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
- Resolves: RHEL-89601 - (&amp;(cn:dn:=groups)) no longer returns results
- Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
  requests for accounts that do not meet the criteria specified in the
  `pamFilter` option.
- Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
  messages after migrating to LMDB.
- Resolves: RHEL-96196 - Duplicate/double local password policy entry
  display from redhat directory server webconsole
- Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
  conflicts at once instead of deleting each conflict one after the other
- Resolves: RHEL-105578 - IPA health check up script shows time skew is
  over 24 hours
- Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
  LMDB is used.
- Resolves: RHEL-106559 - When deferred memberof update is enabled after
  the server crashed it should not launch memberof fixup task by default
- Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
  be added.
- Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
  not exist
- Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
  groups
- Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
  operation
- Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
- Resolves: RHEL-115179 - Several password related attributes are not
  replicating from the Replicas to the Masters
- Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
  corruption
- Resolves: RHEL-116060 - Fix paged result search locking
- Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
- Resolves: RHEL-117140 - Changelog trimming - add number of scanned
  entries to the log
- Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
- Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
  whole subnets
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
  replication as a consumer
- Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
  in the access logs
- Resolves: RHEL-123275 - The new ipahealthcheck test
  ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
- Resolves: RHEL-123663 - Online initialization of consumers fails with
  error -23
- Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
  space char in DN name correctly
- Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
- Resolves: RHEL-124694 - Access logs are not getting deleted as
  configured.
- Resolves: RHEL-126535 - memory corruption in alias entry plugin
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
  replicating after importing data from ldif files
- Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
  sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
  389-ds-base-2.6.1-11
- Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
  base-2.6.1-12
- Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-2" date="1768219200">- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-3" date="1771588800">- Bump version to 3.2.0-3
- Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
  ou=foo,ou=people,dc=example,dc=com.
- Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
  without restarting slapd
- Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
- Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
  indexes instead of selected ones
- Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
- Resolves: RHEL-121981 - Setting password history count to 0 does not
  flush history
- Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
  incorrectly configured system indexes.
- Resolves: RHEL-128906 - Scalability issue of replication online
  initialization with large database
- Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
  ipa-server breaks replication
- Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
  plugin</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-4" date="1772193600">- Bump version to 3.2.0-4
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.
- Resolves: RHEL-133085 - Replica installation is failing with message
  MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
- Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
  Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
- Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
  atomic_compare_exchange()</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-5" date="1772280000">- Bump version to 3.2.0-5</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-6" date="1772712000">- Bump version to 3.2.0-6
- Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
  Changelog trimming.</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-7" date="1781179200">- Bump version to 3.2.0-7
- Resolves: RHEL-170271 - DS 12 does not handle escape char in bind user
  [rhel-10.2.z]
- Resolves: RHEL-170276 - dnaSharedConfig: "dnaPortNum: 0" [rhel-10.2.z]
- Resolves: RHEL-170281 - Memory leaks in syncrepl plugin during persistent
  search operations [rhel-10.2.z]
- Resolves: RHEL-170363 - access log - suspicious wtime  optime negative
  and large values in internal op [rhel-10.2.z]
- Resolves: RHEL-170478 - An online reinitialization with LMDB is
  terminating the receiving server [rhel-10.2.z]
- Resolves: RHEL-170481 - dsctl healthcheck DSMOLE0001 inaccurate
  recommendations when there is more than 1 LDAP backend [rhel-10.2.z]
- Resolves: RHEL-170515 - Possible memory leak when using the Retro
  Changelog plugin. [rhel-10.2.z]
- Resolves: RHEL-174526 - [RFE] Add OS-level thread names to all server
  threads [rhel-10.2.z]
- Resolves: RHEL-178074 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded
  LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap
  amplification (remote DoS) [rhel-10.2]
- Resolves: RHEL-180718 - Online export is failing when using the option
  "-s" [rhel-10.2.z]
- Resolves: RHEL-183897 - Server shutdown during online reindex may lead to
  data loss [rhel-10.2.z]
- Resolves: RHEL-183898 - Error: NssSsl.add_cert() got an unexpected
  keyword argument 'input_file' [rhel-10.2.z]
- Resolves: RHEL-183899 - Replication errors in logs [rhel-10.2.z]
- Resolves: RHEL-183900 - Substring index produces empty results and can
  crash when non-default nsSubStrBegin/nsSubStrEnd lengths are configured
  [rhel-10.2.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-8" date="1782475200">- Bump version to 3.2.0-8
- Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap
  buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z]
- Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer
  overflow in SASL packet length bypasses size limit leading to heap buffer
  overflow [rhel-10.2.z]</changelog>
  <changelog author="Viktor Ashirov &lt;vashirov@redhat.com&gt; - 3.2.0-9" date="1785326400">- Bump version to 3.2.0-9
- Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth
  LDAP filter injection in CleanAllRUV status check [rhel-10.2.z]
- Resolves: RHEL-190776 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL
  pointer dereference in deref control plugin BER parser [rhel-10.2.z]
- Resolves: RHEL-210874 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-
  authentication stack buffer overflow in get_ruvelement_from_berval() via
  unbounded replica ID parsing [rhel-10.2.z]</changelog>
</package>
<package pkgid="ed476af4620acecc767a787d164ce6a6ed8ce2f6424a4922f02ed4784a664143" name="7zip" arch="x86_64">
  <version epoch="0" ver="25.01" rel="2.el10_2"/>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 24.09-1" date="1746619200">- Initial package; Resolves: RHBZ#</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 24.09-2" date="1746619201">- Install symlink for p7zip-plugins compatibility</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 24.09-3" date="1746705600">- Put 7z executable in plugins directory</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 24.09-4" date="1746705601">- Revert unreviewed changes
- Also close the review; Fixes: RHBZ#2361484</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 24.09-5" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Sandro &lt;devel@penguinpee.nl&gt; - 24.09-6" date="1755259200">- Amend patch so library will always be found</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 25.01-1" date="1764158400">- Update to 25.01
- 25.00+ fixes CVE-2025-11001; Resolves: rhbz#2416011
- Backport Debian patch to disable echo-ing password; Resolves:
  rhbz#2412315</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 25.01-2" date="1766059200">- Build for Rocky Linux 10 Plus</changelog>
</package>
<package pkgid="fc221e1d9fce20cb148e04f49ffbbeb84947c7019956dc0edae331809e49e033" name="7zip-reduced" arch="x86_64">
  <version epoch="0" ver="25.01" rel="2.el10_2"/>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 24.09-1" date="1746619200">- Initial package; Resolves: RHBZ#</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 24.09-2" date="1746619201">- Install symlink for p7zip-plugins compatibility</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 24.09-3" date="1746705600">- Put 7z executable in plugins directory</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 24.09-4" date="1746705601">- Revert unreviewed changes
- Also close the review; Fixes: RHBZ#2361484</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 24.09-5" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Sandro &lt;devel@penguinpee.nl&gt; - 24.09-6" date="1755259200">- Amend patch so library will always be found</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 25.01-1" date="1764158400">- Update to 25.01
- 25.00+ fixes CVE-2025-11001; Resolves: rhbz#2416011
- Backport Debian patch to disable echo-ing password; Resolves:
  rhbz#2412315</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 25.01-2" date="1766059200">- Build for Rocky Linux 10 Plus</changelog>
</package>
<package pkgid="f4d57508c3096ea971405777b98da214d42214c7c1af19ac9de5bb036907d843" name="7zip-standalone" arch="x86_64">
  <version epoch="0" ver="25.01" rel="2.el10_2"/>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 24.09-1" date="1746619200">- Initial package; Resolves: RHBZ#</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 24.09-2" date="1746619201">- Install symlink for p7zip-plugins compatibility</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 24.09-3" date="1746705600">- Put 7z executable in plugins directory</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 24.09-4" date="1746705601">- Revert unreviewed changes
- Also close the review; Fixes: RHBZ#2361484</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 24.09-5" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Sandro &lt;devel@penguinpee.nl&gt; - 24.09-6" date="1755259200">- Amend patch so library will always be found</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 25.01-1" date="1764158400">- Update to 25.01
- 25.00+ fixes CVE-2025-11001; Resolves: rhbz#2416011
- Backport Debian patch to disable echo-ing password; Resolves:
  rhbz#2412315</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 25.01-2" date="1766059200">- Build for Rocky Linux 10 Plus</changelog>
</package>
<package pkgid="7b17e0d516b860db6de7798dc1608c0f80cbafcc7c5800346310f7f22ae7fb5e" name="7zip-standalone-all" arch="x86_64">
  <version epoch="0" ver="25.01" rel="2.el10_2"/>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 24.09-1" date="1746619200">- Initial package; Resolves: RHBZ#</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 24.09-2" date="1746619201">- Install symlink for p7zip-plugins compatibility</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 24.09-3" date="1746705600">- Put 7z executable in plugins directory</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 24.09-4" date="1746705601">- Revert unreviewed changes
- Also close the review; Fixes: RHBZ#2361484</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 24.09-5" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Sandro &lt;devel@penguinpee.nl&gt; - 24.09-6" date="1755259200">- Amend patch so library will always be found</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 25.01-1" date="1764158400">- Update to 25.01
- 25.00+ fixes CVE-2025-11001; Resolves: rhbz#2416011
- Backport Debian patch to disable echo-ing password; Resolves:
  rhbz#2412315</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 25.01-2" date="1766059200">- Build for Rocky Linux 10 Plus</changelog>
</package>
<package pkgid="7b4a143fa4bab5620ef9c8ff78c6fc323effaa44cd4921bb62309783e793eba0" name="CUnit" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="34.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.3-27" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 2.1.3-28" date="1677672000">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.3-29" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.3-30" date="1705579200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.3-31" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.3-32" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.3-33" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.3-34" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="63792c690e594572edb96c08583ad42417eed6e4f60ab024e7d789abff3a68e5" name="CUnit-devel" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="34.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.3-27" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 2.1.3-28" date="1677672000">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.3-29" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.3-30" date="1705579200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.3-31" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.3-32" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.3-33" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.3-34" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="795a1e0759086f834990604b1c8a2d0e3d83b5c018f20f5ce84f4cbed938a0f6" name="HdrHistogram_c" arch="x86_64">
  <version epoch="0" ver="0.11.8" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.0-8" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 0.11.8-1" date="1689163200">- Update to latest upstream version.
- Update spec file and resolve a build issue (BZ 2113091).
- Switch to SPDX licensing.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.8-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.8-3" date="1705579200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.8-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.8-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.11.8-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.11.8-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8eef08e8262d81599853add07bcb06b692d5ff2d569a336ee2c6f41a217a647d" name="HdrHistogram_c-devel" arch="x86_64">
  <version epoch="0" ver="0.11.8" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.0-8" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 0.11.8-1" date="1689163200">- Update to latest upstream version.
- Update spec file and resolve a build issue (BZ 2113091).
- Switch to SPDX licensing.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.8-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.8-3" date="1705579200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.8-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.8-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.11.8-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.11.8-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="eae2289d83d0ac74d2e3ac3c6e497d4c6bc175de4f800c42fc82f6fdbb8d6b75" name="Judy" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="38.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-30" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-31" date="1674129600">- Use SPDX-format license tag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-32" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-33" date="1705579200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-34" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-35" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-36" date="1706011200">- Hard link manpages to avoid duplication</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-37" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-38" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c72893fc1f70461115a420fae66962a33eae4c26a1ea4ec4ae79d54abb01ca73" name="Judy-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="38.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-30" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-31" date="1674129600">- Use SPDX-format license tag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-32" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-33" date="1705579200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-34" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-35" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-36" date="1706011200">- Hard link manpages to avoid duplication</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-37" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-38" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b49496a47c4df242e12b30ff8c602cc927cb923c49919eafa98daf48534b2660" name="ModemManager" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="7.el10"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.20.6-1" date="1679659200">- Update to 1.20.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20.6-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tao Jin &lt;tao-j@outlook.com&gt; - 1.20.6-3" date="1690718400">- Rebuilt for RHBZ#2226577</changelog>
  <changelog author="Dennis Gilmore &lt;dennis@ausil.us&gt; - 1.22.0-1" date="1704801600">- update to 1.22.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.22.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.22.0-5" date="1719316800">- Add patches for a couple of bugs that make static analysis unhappy (RHEL-38991)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.22.0-6" date="1720612800">- Some more static analysis fixes (RHEL-38991)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.22.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="58e17ceb99ad196074b5d7862c6b327f6e5a3c594dda0fe828b8af86b0b2d995" name="ModemManager-devel" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="7.el10"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.20.6-1" date="1679659200">- Update to 1.20.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20.6-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tao Jin &lt;tao-j@outlook.com&gt; - 1.20.6-3" date="1690718400">- Rebuilt for RHBZ#2226577</changelog>
  <changelog author="Dennis Gilmore &lt;dennis@ausil.us&gt; - 1.22.0-1" date="1704801600">- update to 1.22.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.22.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.22.0-5" date="1719316800">- Add patches for a couple of bugs that make static analysis unhappy (RHEL-38991)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.22.0-6" date="1720612800">- Some more static analysis fixes (RHEL-38991)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.22.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="44a86466a8c54725752db492b8e85a68a7c82d73b8c9aa33fa3b0881ef14ccab" name="ModemManager-glib" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="7.el10"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.20.6-1" date="1679659200">- Update to 1.20.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20.6-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tao Jin &lt;tao-j@outlook.com&gt; - 1.20.6-3" date="1690718400">- Rebuilt for RHBZ#2226577</changelog>
  <changelog author="Dennis Gilmore &lt;dennis@ausil.us&gt; - 1.22.0-1" date="1704801600">- update to 1.22.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.22.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.22.0-5" date="1719316800">- Add patches for a couple of bugs that make static analysis unhappy (RHEL-38991)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.22.0-6" date="1720612800">- Some more static analysis fixes (RHEL-38991)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.22.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="79e6866ace023567f8952971daff45ffc65a39f5590a50736dd936dfc14f2bea" name="ModemManager-glib-devel" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="7.el10"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.20.6-1" date="1679659200">- Update to 1.20.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20.6-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tao Jin &lt;tao-j@outlook.com&gt; - 1.20.6-3" date="1690718400">- Rebuilt for RHBZ#2226577</changelog>
  <changelog author="Dennis Gilmore &lt;dennis@ausil.us&gt; - 1.22.0-1" date="1704801600">- update to 1.22.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.22.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.22.0-5" date="1719316800">- Add patches for a couple of bugs that make static analysis unhappy (RHEL-38991)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.22.0-6" date="1720612800">- Some more static analysis fixes (RHEL-38991)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.22.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="35d7440f2ca8a5596f9a5a6e203c4b50093d51d9d063765684030c758d8d988d" name="ModemManager-vala" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="7.el10"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.20.6-1" date="1679659200">- Update to 1.20.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20.6-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tao Jin &lt;tao-j@outlook.com&gt; - 1.20.6-3" date="1690718400">- Rebuilt for RHBZ#2226577</changelog>
  <changelog author="Dennis Gilmore &lt;dennis@ausil.us&gt; - 1.22.0-1" date="1704801600">- update to 1.22.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.22.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.22.0-5" date="1719316800">- Add patches for a couple of bugs that make static analysis unhappy (RHEL-38991)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.22.0-6" date="1720612800">- Some more static analysis fixes (RHEL-38991)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.22.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dd984cf6e580d8c9ae91301bd761cd61949750460476928b0327b807417542ec" name="NetworkManager" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="1.el10"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-81948)
- Fix order of parsing port/controller properies in nmcli (RHEL-80273)
- Improve interface activation logic (RHEL-80157)
- Fix WireGuard IPv6 firewall rules (RHEL-79975)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
</package>
<package pkgid="86f0a96255a729a3ebecbd3850a746c505c40b0228d679e8046a96683f24a7a2" name="NetworkManager" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="2.el10_2"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.56.0-2" date="1784203200">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105)</changelog>
</package>
<package pkgid="d1c8139533b5f36586ef79e78d4b1af5d3d3e2d49a93a18b12c42f9365974904" name="NetworkManager-adsl" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="1.el10"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-81948)
- Fix order of parsing port/controller properies in nmcli (RHEL-80273)
- Improve interface activation logic (RHEL-80157)
- Fix WireGuard IPv6 firewall rules (RHEL-79975)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
</package>
<package pkgid="8f1774bd59e177680b66aa024b337004d23754d4c2bfd1d365cf611536923d58" name="NetworkManager-adsl" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="2.el10_2"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.56.0-2" date="1784203200">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105)</changelog>
</package>
<package pkgid="387a192f5c5430d3766e68379baee8c315ca37e867f63892eebc3388cb2c24ee" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="1.el10"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-81948)
- Fix order of parsing port/controller properies in nmcli (RHEL-80273)
- Improve interface activation logic (RHEL-80157)
- Fix WireGuard IPv6 firewall rules (RHEL-79975)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
</package>
<package pkgid="abe99071e4a704aec748013ba4cf804c8e88c49118b1aa7c568e0589b5e88f9a" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="2.el10_2"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.56.0-2" date="1784203200">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105)</changelog>
</package>
<package pkgid="3d74cc7cab0c8bc2e17f5fc14049fa70fc3c2ae06dd774043961fcc3426b03fb" name="NetworkManager-cloud-setup" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="1.el10"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-81948)
- Fix order of parsing port/controller properies in nmcli (RHEL-80273)
- Improve interface activation logic (RHEL-80157)
- Fix WireGuard IPv6 firewall rules (RHEL-79975)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
</package>
<package pkgid="c8b6c76a3ce6faad6ba1cbe634963fa030b4455eb6b12f85313342b5a488f27c" name="NetworkManager-cloud-setup" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="2.el10_2"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.56.0-2" date="1784203200">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105)</changelog>
</package>
<package pkgid="8bc820839916134e72c02fb232b2ddebc9bdfff3a1de71c0236c6c20ff524295" name="NetworkManager-config-connectivity-redhat" arch="noarch">
  <version epoch="1" ver="1.56.0" rel="1.el10"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-81948)
- Fix order of parsing port/controller properies in nmcli (RHEL-80273)
- Improve interface activation logic (RHEL-80157)
- Fix WireGuard IPv6 firewall rules (RHEL-79975)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
</package>
<package pkgid="248667268477471845a24844e1ed7a77a27a2e87047876de772cf748d5f1bd57" name="NetworkManager-config-connectivity-redhat" arch="noarch">
  <version epoch="1" ver="1.56.0" rel="2.el10_2"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.56.0-2" date="1784203200">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105)</changelog>
</package>
<package pkgid="b9397e6a54a80356676bbc6e4ab242fd8c5f1960457016fea3a2c13e3fb9d88c" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.56.0" rel="1.el10"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-81948)
- Fix order of parsing port/controller properies in nmcli (RHEL-80273)
- Improve interface activation logic (RHEL-80157)
- Fix WireGuard IPv6 firewall rules (RHEL-79975)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
</package>
<package pkgid="298f86a0747fedc9e945f4717d88d5761b8a0948b0b04a48612c6a0a241f6858" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.56.0" rel="2.el10_2"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.56.0-2" date="1784203200">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105)</changelog>
</package>
<package pkgid="f58942716d9a759ca63fdaeed6fef9a26ab038a473890eed50cd76e55c91a184" name="NetworkManager-libnm" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="1.el10"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-81948)
- Fix order of parsing port/controller properies in nmcli (RHEL-80273)
- Improve interface activation logic (RHEL-80157)
- Fix WireGuard IPv6 firewall rules (RHEL-79975)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
</package>
<package pkgid="5389000e9b9362eb40aa286323141861f804caff450ded4f0ea25e9dd3fa0f38" name="NetworkManager-libnm" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="2.el10_2"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.56.0-2" date="1784203200">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105)</changelog>
</package>
<package pkgid="4b791433ad6855a7df567615a80befdd48ef7ac67352b9899eedfbcb2ead0d0d" name="NetworkManager-libnm-devel" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="1.el10"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-81948)
- Fix order of parsing port/controller properies in nmcli (RHEL-80273)
- Improve interface activation logic (RHEL-80157)
- Fix WireGuard IPv6 firewall rules (RHEL-79975)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
</package>
<package pkgid="8d1aa4a2142d0afc1f331e69e3d27ecb7d9ffc24e7fb8db5687880d50f23ce15" name="NetworkManager-libnm-devel" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="2.el10_2"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.56.0-2" date="1784203200">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105)</changelog>
</package>
<package pkgid="bf39d1a7abdd67e72bf1b1105cddb81e0e3e4d15dbf8be6d7ade7ca768e6b9e5" name="NetworkManager-libreswan" arch="x86_64">
  <version epoch="0" ver="1.2.30" rel="1.el10"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.2.24-1" date="1729598400">- Update to 1.2.24 release
- Fix improper escaping of Libreswan configuration (CVE-2024-9050)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.24-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.2.26-1" date="1738065600">- Update to 1.2.26 release
- Add support for leftsubnets/rightsubnets (RHEL-56553)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.2.26-2" date="1747051200">- Add support for nm-auto-defaults (RHEL-85768)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.2.27-1" date="1759320000">- Update to later upstream release to address regressions (RHEL-56551)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1.2.27-2" date="1760961600">- Symetric import/export with nm-auto-default (RHEL-119641)
- Esp param properly exported (RHEL-119653)
- Correct leftid export when it contains @</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1.2.27-3" date="1761048000">- Fix a regression in nm-auto-defaults=yes</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1.2.27-4" date="1761220800">- Fix potentional crash in malformed items import</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.2.29-1" date="1765281600">- Upgrade to 1.2.29
- Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-67307)
- Support leftprotoport and rightprotoport options. (RHEL-130888)
- Fix error on duplicate key 'phase2alg'. (RHEL-128213)
- Fix import connection with RSA key. (RHEL-125174)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1.2.30-1" date="1768219200">- Upgrade to 1.2.30
- Declare supports-safe-private-file-access (RHEL-140608)</changelog>
</package>
<package pkgid="7f8b0143fda1249041a8ac6531eaf17cdb76258ea0a025788281fd65f310a689" name="NetworkManager-libreswan-gnome" arch="x86_64">
  <version epoch="0" ver="1.2.30" rel="1.el10"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.2.24-1" date="1729598400">- Update to 1.2.24 release
- Fix improper escaping of Libreswan configuration (CVE-2024-9050)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.24-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.2.26-1" date="1738065600">- Update to 1.2.26 release
- Add support for leftsubnets/rightsubnets (RHEL-56553)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.2.26-2" date="1747051200">- Add support for nm-auto-defaults (RHEL-85768)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.2.27-1" date="1759320000">- Update to later upstream release to address regressions (RHEL-56551)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1.2.27-2" date="1760961600">- Symetric import/export with nm-auto-default (RHEL-119641)
- Esp param properly exported (RHEL-119653)
- Correct leftid export when it contains @</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1.2.27-3" date="1761048000">- Fix a regression in nm-auto-defaults=yes</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1.2.27-4" date="1761220800">- Fix potentional crash in malformed items import</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.2.29-1" date="1765281600">- Upgrade to 1.2.29
- Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-67307)
- Support leftprotoport and rightprotoport options. (RHEL-130888)
- Fix error on duplicate key 'phase2alg'. (RHEL-128213)
- Fix import connection with RSA key. (RHEL-125174)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1.2.30-1" date="1768219200">- Upgrade to 1.2.30
- Declare supports-safe-private-file-access (RHEL-140608)</changelog>
</package>
<package pkgid="136c8ae97188a54a1f6a5f37ed944ed7d6cbac2c489d6f6608dac2332978c268" name="NetworkManager-ovs" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="1.el10"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-81948)
- Fix order of parsing port/controller properies in nmcli (RHEL-80273)
- Improve interface activation logic (RHEL-80157)
- Fix WireGuard IPv6 firewall rules (RHEL-79975)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
</package>
<package pkgid="22bf8a01f5c6914c09941ae8f5c9f83358c138976d83764dafcc1a78f0f2b582" name="NetworkManager-ovs" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="2.el10_2"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.56.0-2" date="1784203200">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105)</changelog>
</package>
<package pkgid="f0ea15286a48ce92ca89ec37b6d806489ddfbe9c0bb67cfcfd8b4fd1d9bd08fd" name="NetworkManager-ppp" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="1.el10"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-81948)
- Fix order of parsing port/controller properies in nmcli (RHEL-80273)
- Improve interface activation logic (RHEL-80157)
- Fix WireGuard IPv6 firewall rules (RHEL-79975)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
</package>
<package pkgid="578398480a5dfd0c932e0d7a53e3840d56435ca157fc89d8f88f3e6d4dbe3951" name="NetworkManager-ppp" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="2.el10_2"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.56.0-2" date="1784203200">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105)</changelog>
</package>
<package pkgid="c04ac53ae880b574b15bb45859d0e4ece9271ff0e3a350f67948626b33aa4bde" name="NetworkManager-tui" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="1.el10"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-81948)
- Fix order of parsing port/controller properies in nmcli (RHEL-80273)
- Improve interface activation logic (RHEL-80157)
- Fix WireGuard IPv6 firewall rules (RHEL-79975)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
</package>
<package pkgid="d535384fd34a242f225681705ef41875598373905030c103c3a9093a6b75d8d3" name="NetworkManager-tui" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="2.el10_2"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.56.0-2" date="1784203200">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105)</changelog>
</package>
<package pkgid="8e591f0a3346713bf3439f8652796464a145974a1988fe42dc95f12b92c36ab8" name="NetworkManager-wifi" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="1.el10"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-81948)
- Fix order of parsing port/controller properies in nmcli (RHEL-80273)
- Improve interface activation logic (RHEL-80157)
- Fix WireGuard IPv6 firewall rules (RHEL-79975)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
</package>
<package pkgid="079bd899724e3f2138f0d31cc845d9c2cb393d97d4d4bc340c0f809452a77fdb" name="NetworkManager-wifi" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="2.el10_2"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.56.0-2" date="1784203200">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105)</changelog>
</package>
<package pkgid="b64cc6038502e2e8104b0a0acc3a00d061eb0f431bc0315fb3138135e10b97d2" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="1.el10"/>
  <changelog author="Filip Pokr&#xFD;vka &lt;fpokryvk@redhat.com&gt; - 1:1.53.3-1" date="1744632000">- Update to 1.53.3 (dev)
- Add more IPv6 prefix delegation options (RHEL-81948)
- Fix order of parsing port/controller properies in nmcli (RHEL-80273)
- Improve interface activation logic (RHEL-80157)
- Fix WireGuard IPv6 firewall rules (RHEL-79975)
- Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
</package>
<package pkgid="f04a4bca62e08053a80006201f71698375c6d59a285a8c7a202d6ef1108df2e3" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="1" ver="1.56.0" rel="2.el10_2"/>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.4-1" date="1746446400">- Update to 1.53.4 (dev)
- initrd: add new NBFT parser (RHEL-83058)
- Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
- Support reapply on OVS settings (RHEL-86877)
- Add support for configuring the loopback interface in nmtui (RHEL-70484)
- Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
- NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
- Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.53.90-1" date="1748606400">- Update to 1.54.0 (rc1)
- Devices not becoming managed sometimes (RHEL-89914)
- Crash on _l3cfg_notify_cb (RHEL-92020)
- Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.91-1" date="1750420800">- Update to 1.54.0 (rc2)
- Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
- Fix a race condition in ovs tun interface (RHEL-17358)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.53.92-1" date="1752235200">- Update to 1.54.0 (rc3)
- Fix ipv6 static route deleted with dualstack (RHEL-102774)
- Allow setting IP method to disabled in port connections (RHEL-90756)</changelog>
  <changelog author="Filip Pokryvka &lt;fpokryvk@redhat.com&gt; - 1:1.54.0-1" date="1754308800">- Update to 1.54.0
- Fix reaply on bridge port VLAN (RHEL-102318)
- Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.55.4-1" date="1758024000">- Update to 1.55.4 (dev)
- Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
- Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
- Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
- Add support for a DHCP client-id kernelarg (RHEL-108454)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.90-1" date="1763467200">- Update to 1.56.0 (rc1)
- Support setting protocol version of HSR/PRP (RHEL-100764)
- Support interlink for HSR/PRP (RHEL-100768)
- Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
- Improve logging of networking off (RHEL-103925)
- Don't delete unrelated OVS ports (RHEL-120176)</changelog>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1:1.55.91-1" date="1765800000">- Update to 1.56.0 (rc2)
- Fix CVE-2025-9615 (RHEL-111772)</changelog>
  <changelog author="Vladim&#xED;r Bene&#x161; &lt;vbenes@redhat.com&gt; - 1:1.56.0-1" date="1770984000">- Update to 1.56.0</changelog>
  <changelog author="Rahul Rajesh &lt;rrajesh@redhat.com&gt; - 1:1.56.0-2" date="1784203200">- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105)</changelog>
</package>
<package pkgid="768f5dd919b99042ecfe93ac4bf91d0d8294153bfb5799441a8438b4818d9f2b" name="OpenIPMI" arch="x86_64">
  <version epoch="0" ver="2.0.36" rel="3.el10"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2.0.32-9" date="1689681600">- Migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.32-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.0.32-11" date="1704715200">- Fix C compatibility issues</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.32-12" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.32-13" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.0.34-1" date="1707652800">- Update to 2.0.34 (rhbz#2105023)
- Resolve issues found by rpmdiff
  - add a patch to fix getaddrinfo detection to avoid using gethostbyname
  - add explicit Requires: on subpackages to avoid the need to test
    interoperability between the various combinations of old and new
    subpackages
- Conditional Perl &amp; Python module build, by default disabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.34-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.0.36-1" date="1724673600">- Update to 2.0.36</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.0.36-2" date="1724673601">- Correct SPDX expression syntax - operators must be uppercase</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.36-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="253246bbda7801d7b0ddc7bdd82016e03f5ed050b5811f4b5fe064d7abe81f55" name="OpenIPMI-devel" arch="x86_64">
  <version epoch="0" ver="2.0.36" rel="3.el10"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2.0.32-9" date="1689681600">- Migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.32-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.0.32-11" date="1704715200">- Fix C compatibility issues</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.32-12" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.32-13" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.0.34-1" date="1707652800">- Update to 2.0.34 (rhbz#2105023)
- Resolve issues found by rpmdiff
  - add a patch to fix getaddrinfo detection to avoid using gethostbyname
  - add explicit Requires: on subpackages to avoid the need to test
    interoperability between the various combinations of old and new
    subpackages
- Conditional Perl &amp; Python module build, by default disabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.34-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.0.36-1" date="1724673600">- Update to 2.0.36</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.0.36-2" date="1724673601">- Correct SPDX expression syntax - operators must be uppercase</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.36-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b1145b1d9424c589e875c731b2342ce86eb3dca569c86f2e28387265726dcec6" name="OpenIPMI-lanserv" arch="x86_64">
  <version epoch="0" ver="2.0.36" rel="3.el10"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2.0.32-9" date="1689681600">- Migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.32-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.0.32-11" date="1704715200">- Fix C compatibility issues</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.32-12" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.32-13" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.0.34-1" date="1707652800">- Update to 2.0.34 (rhbz#2105023)
- Resolve issues found by rpmdiff
  - add a patch to fix getaddrinfo detection to avoid using gethostbyname
  - add explicit Requires: on subpackages to avoid the need to test
    interoperability between the various combinations of old and new
    subpackages
- Conditional Perl &amp; Python module build, by default disabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.34-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.0.36-1" date="1724673600">- Update to 2.0.36</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.0.36-2" date="1724673601">- Correct SPDX expression syntax - operators must be uppercase</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.36-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="be12003db2addb0e9d8f566fb80e8424dc2f8f43b61a6ea4fe1d46fee5c46797" name="OpenIPMI-libs" arch="x86_64">
  <version epoch="0" ver="2.0.36" rel="3.el10"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2.0.32-9" date="1689681600">- Migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.32-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.0.32-11" date="1704715200">- Fix C compatibility issues</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.32-12" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.32-13" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.0.34-1" date="1707652800">- Update to 2.0.34 (rhbz#2105023)
- Resolve issues found by rpmdiff
  - add a patch to fix getaddrinfo detection to avoid using gethostbyname
  - add explicit Requires: on subpackages to avoid the need to test
    interoperability between the various combinations of old and new
    subpackages
- Conditional Perl &amp; Python module build, by default disabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.34-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.0.36-1" date="1724673600">- Update to 2.0.36</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.0.36-2" date="1724673601">- Correct SPDX expression syntax - operators must be uppercase</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.36-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="86261b51421f5b0001c63cfe126bb77cab13ef1531846b9eaa16d37d7a10f8df" name="PEGTL-devel" arch="x86_64">
  <version epoch="0" ver="2.8.3" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.3-6" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.3-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.3-8" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.3-9" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.3-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.8.3-11" date="1723723200">- Rebuild
  Resolves: RHEL-54349</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.3-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9257d5f8b6dea2d00f7b168b8ba4d82bc4c618d72a6488d20506ebd36f0f61fb" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="8.el10"/>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.2.6-11" date="1690286400">- Backport PR #643 to fix symbol errors on Rawhide</changelog>
  <changelog author="Alessandro Astone &lt;ales.astone@gmail.com&gt; - 1.2.8-1" date="1703937600">- Update to 1.2.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.8-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.8-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.8-4" date="1718280000">- Resolves: RHEL-39682 (Mark PackageKit as compulsory in AppStream
  metadata)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.8-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.8-6" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.8-7" date="1721908800">- Related: RHEL-39682 (Backport upstream patches to fix recent regressions)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.8-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.2.8-8" date="1730203201">- Change PackageKit URLs to Rocky pages</changelog>
</package>
<package pkgid="e06c410ea229db1620a0e3d7e2058c519024c8971c900118def917315d2c4e44" name="PackageKit-command-not-found" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="8.el10"/>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.2.6-11" date="1690286400">- Backport PR #643 to fix symbol errors on Rawhide</changelog>
  <changelog author="Alessandro Astone &lt;ales.astone@gmail.com&gt; - 1.2.8-1" date="1703937600">- Update to 1.2.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.8-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.8-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.8-4" date="1718280000">- Resolves: RHEL-39682 (Mark PackageKit as compulsory in AppStream
  metadata)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.8-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.8-6" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.8-7" date="1721908800">- Related: RHEL-39682 (Backport upstream patches to fix recent regressions)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.8-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.2.8-8" date="1730203201">- Change PackageKit URLs to Rocky pages</changelog>
</package>
<package pkgid="c669ccf60817f2ca5ce5a10869276e2de227bbed45ef75050ba0f1266b0ba172" name="PackageKit-cron" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="8.el10"/>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.2.6-11" date="1690286400">- Backport PR #643 to fix symbol errors on Rawhide</changelog>
  <changelog author="Alessandro Astone &lt;ales.astone@gmail.com&gt; - 1.2.8-1" date="1703937600">- Update to 1.2.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.8-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.8-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.8-4" date="1718280000">- Resolves: RHEL-39682 (Mark PackageKit as compulsory in AppStream
  metadata)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.8-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.8-6" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.8-7" date="1721908800">- Related: RHEL-39682 (Backport upstream patches to fix recent regressions)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.8-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.2.8-8" date="1730203201">- Change PackageKit URLs to Rocky pages</changelog>
</package>
<package pkgid="b3731bfcfd51daf33b671edae26010c9a78554e6fe00f463ee473b8ac967cd09" name="PackageKit-glib" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="8.el10"/>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.2.6-11" date="1690286400">- Backport PR #643 to fix symbol errors on Rawhide</changelog>
  <changelog author="Alessandro Astone &lt;ales.astone@gmail.com&gt; - 1.2.8-1" date="1703937600">- Update to 1.2.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.8-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.8-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.8-4" date="1718280000">- Resolves: RHEL-39682 (Mark PackageKit as compulsory in AppStream
  metadata)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.8-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.8-6" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.8-7" date="1721908800">- Related: RHEL-39682 (Backport upstream patches to fix recent regressions)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.8-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.2.8-8" date="1730203201">- Change PackageKit URLs to Rocky pages</changelog>
</package>
<package pkgid="26ed3e3558f31df3f1ceab48a5ae20b2115ac9c6dd3500fe11c2a6c60332badd" name="PackageKit-glib-devel" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="8.el10"/>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.2.6-11" date="1690286400">- Backport PR #643 to fix symbol errors on Rawhide</changelog>
  <changelog author="Alessandro Astone &lt;ales.astone@gmail.com&gt; - 1.2.8-1" date="1703937600">- Update to 1.2.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.8-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.8-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.8-4" date="1718280000">- Resolves: RHEL-39682 (Mark PackageKit as compulsory in AppStream
  metadata)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.8-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.8-6" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.8-7" date="1721908800">- Related: RHEL-39682 (Backport upstream patches to fix recent regressions)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.8-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.2.8-8" date="1730203201">- Change PackageKit URLs to Rocky pages</changelog>
</package>
<package pkgid="a3fa0d864f0575f2143ba9dfc0c48faa2b53a1b36ee2c594e5bd0ddbb00f0d16" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="8.el10"/>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.2.6-11" date="1690286400">- Backport PR #643 to fix symbol errors on Rawhide</changelog>
  <changelog author="Alessandro Astone &lt;ales.astone@gmail.com&gt; - 1.2.8-1" date="1703937600">- Update to 1.2.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.8-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.8-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.8-4" date="1718280000">- Resolves: RHEL-39682 (Mark PackageKit as compulsory in AppStream
  metadata)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.8-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.8-6" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.8-7" date="1721908800">- Related: RHEL-39682 (Backport upstream patches to fix recent regressions)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.8-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.2.8-8" date="1730203201">- Change PackageKit URLs to Rocky pages</changelog>
</package>
<package pkgid="925f47072301c302fa507c627cdc504dbcae2cdc734b0e357e2286b20cb0a8d6" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="8.el10"/>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.2.6-11" date="1690286400">- Backport PR #643 to fix symbol errors on Rawhide</changelog>
  <changelog author="Alessandro Astone &lt;ales.astone@gmail.com&gt; - 1.2.8-1" date="1703937600">- Update to 1.2.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.8-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.8-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.8-4" date="1718280000">- Resolves: RHEL-39682 (Mark PackageKit as compulsory in AppStream
  metadata)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.8-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.8-6" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.8-7" date="1721908800">- Related: RHEL-39682 (Backport upstream patches to fix recent regressions)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.8-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.2.8-8" date="1730203201">- Change PackageKit URLs to Rocky pages</changelog>
</package>
<package pkgid="c3b03ba9237bf3668075b2f619988e0fa72b8a95253b7930916cb00977722dd8" name="PyQt-builder" arch="noarch">
  <version epoch="0" ver="1.19.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.3-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.3-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Scott Talbert &lt;swt@techie.net&gt; - 1.15.4-1" date="1707048000">- Update to new upstream release 1.15.4 (#2252258)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.15.4-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.15.4-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.17.0-1" date="1733745600">- 1.17.0
  Resolves: RHEL-70412</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.19.0-1" date="1764676800">- 1.19.0
  Resolves: RHEL-109197</changelog>
</package>
<package pkgid="58e5190a04fe19e9cd2aef01caf478839a16bbeb4238fa9643fefe22fb6d4f50" name="SDL2" arch="x86_64">
  <version epoch="0" ver="2.28.5" rel="6.el10"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2.26.4-1" date="1678795200">- update to 2.26.4</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2.26.5-1" date="1682942400">- update to 2.26.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.26.5-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2.28.4-1" date="1696248000">- update to 2.28.4</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2.28.5-1" date="1699185600">- update to 2.28.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.28.5-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.28.5-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 2.28.5-4" date="1717502400">- Bump version after removing BR: libXScrnSaver-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.28.5-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.28.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7478126e28eb8b5c3fc3e5ed9b08b4fe9b6a78cfcb0786a5b06719ea31d4d2fb" name="SDL2-devel" arch="x86_64">
  <version epoch="0" ver="2.28.5" rel="6.el10"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2.26.4-1" date="1678795200">- update to 2.26.4</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2.26.5-1" date="1682942400">- update to 2.26.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.26.5-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2.28.4-1" date="1696248000">- update to 2.28.4</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2.28.5-1" date="1699185600">- update to 2.28.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.28.5-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.28.5-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 2.28.5-4" date="1717502400">- Bump version after removing BR: libXScrnSaver-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.28.5-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.28.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="61eff29edd6d06ea47bd155518c804249501091d484e500f804ff8d356d67a1d" name="SDL2-static" arch="x86_64">
  <version epoch="0" ver="2.28.5" rel="6.el10"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2.26.4-1" date="1678795200">- update to 2.26.4</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2.26.5-1" date="1682942400">- update to 2.26.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.26.5-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2.28.4-1" date="1696248000">- update to 2.28.4</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2.28.5-1" date="1699185600">- update to 2.28.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.28.5-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.28.5-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 2.28.5-4" date="1717502400">- Bump version after removing BR: libXScrnSaver-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.28.5-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.28.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2ee6e411daa8c7870f3156f27a54a664368be0e7dbdc9a75b0de58dc6b569b59" name="SDL2_ttf" arch="x86_64">
  <version epoch="0" ver="2.22.0" rel="2.el10"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2.20.0-1" date="1657281600">- update to 2.20.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-2" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 2.20.1-1" date="1670068800">- Update to 2.20.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.1-2" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2.20.2-1" date="1675857600">- update to 2.20.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.2-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.2-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2.22.0-1" date="1705924800">- update to 2.22.0
- fix license tag to be SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22.0-2" date="1705924801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="38ac194dbf73cd17ff5215b0932b3de1c6f46df1f1b6a18f14ef94cbf7765d9b" name="SDL2_ttf-devel" arch="x86_64">
  <version epoch="0" ver="2.22.0" rel="2.el10"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2.20.0-1" date="1657281600">- update to 2.20.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-2" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 2.20.1-1" date="1670068800">- Update to 2.20.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.1-2" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2.20.2-1" date="1675857600">- update to 2.20.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.2-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.2-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2.22.0-1" date="1705924800">- update to 2.22.0
- fix license tag to be SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22.0-2" date="1705924801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="d34e8a18de66e09a51ed8b43bc0d11aa0af96b5b7c2faa41a06f819ebd31e849" name="SDL3" arch="x86_64">
  <version epoch="0" ver="3.2.4" rel="1.el10"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 3.2.0-1" date="1738929600">Initial commit on c10s
  Resolves: RHEL-77078</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 3.2.4-1" date="1739188800">- Update to 3.2.4
- Add fix for building against PipeWire 1.3.x
  Resolves: RHEL-77078</changelog>
</package>
<package pkgid="df99b727654659a338b2a585fff19f7c4a1bfac94e932a2958575cc83fd9c7c0" name="SDL3-devel" arch="x86_64">
  <version epoch="0" ver="3.2.4" rel="1.el10"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 3.2.0-1" date="1738929600">Initial commit on c10s
  Resolves: RHEL-77078</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 3.2.4-1" date="1739188800">- Update to 3.2.4
- Add fix for building against PipeWire 1.3.x
  Resolves: RHEL-77078</changelog>
</package>
<package pkgid="998405fc03bcafec18cc0fce8aa0f87c5b581b3c0ef44a47d3fe03bb5dc94dd2" name="SDL3-test" arch="x86_64">
  <version epoch="0" ver="3.2.4" rel="1.el10"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 3.2.0-1" date="1738929600">Initial commit on c10s
  Resolves: RHEL-77078</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 3.2.4-1" date="1739188800">- Update to 3.2.4
- Add fix for building against PipeWire 1.3.x
  Resolves: RHEL-77078</changelog>
</package>
<package pkgid="73687dd1be5c2111fc6ce4f854ca66be1c108cce72543fe8374038fc6577e03f" name="WALinuxAgent" arch="noarch">
  <version epoch="0" ver="2.14.0.1" rel="3.el10"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.9.1.1-6" date="1720699200">- wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [RHEL-40966]
- wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [RHEL-40966]
- wla-redhat-Mark-directories-properly-in-the-files-list.patch [RHEL-40966]
- wla-redhat-Remove-files-inside-WALA-services-directory.patch [RHEL-40966]
- Resolves: RHEL-40966
  ([Azure][WALA][RHEL-10] Provisioning failed if no ifcfg-eth0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.9.1.1-7" date="1722859200">- wla-skip-cgorup-monitor-2939.patch [RHEL-46713]
- Resolves: RHEL-46713
  ([Azure][RHEL-10][WALA] waagent -collect-logs doesn't work and the log is confusing)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.9.1.1-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.9.1.1-9" date="1736769600">- wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-68796]
- Resolves: RHEL-68796
  (Please add `mana` to 99-azure-unmanaged-devices.conf of Azure image)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.9.1.1-10" date="1742904000">- wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [RHEL-84073]
- wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-84073]
- Resolves: RHEL-84073
  ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs [rhel-10])</changelog>
  <changelog author="Vitaly Kuznetsov &lt;vkuznets@redhat.com&gt; - 2.13.1.1-1" date="1747915200">- Rebase to 2.13.1.1 [RHEL-86509]
- Resolves: RHEL-86509
  (Rebase to v2.13.1.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.13.1.1-2" date="1755777600">- wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-109465]
- wla-docs-add-waagent-manpage-3401.patch [RHEL-96792]
- Resolves: RHEL-109465
  ([Azure][RHEL-10][WALA][Image mode] Cannot find 'service' command)
- Resolves: RHEL-96792
  ([Azure][WALA][RHEL-10] Missing man page)</changelog>
  <changelog author="Yuxin Sun &lt;yuxisun@redhat.com&gt; - 2.14.0.1-1" date="1761825600">- Rebase to 2.14.0.1 [RHEL-116438]
- Resolves: RHEL-116438
  (Rebase to v2.14.0.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.14.0.1-2" date="1762171200">- wla-Remove-the-10-azure-unmanaged-sriov.rules-to-avoid-c.patch [RHEL-114155]
- Resolves: RHEL-114155
  ([Azure][WALA][RHEL-10] Remove 10-azure-unmanaged-sriov.rules)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.14.0.1-3" date="1768824000">- wla-Change-redhat-waagent-network-setup.service-path-to-.patch [RHEL-82243]
- Resolves: RHEL-82243
  ([Azure][image mode][WALA][RHEL-10] Unable to setup the persistent firewall rules)</changelog>
</package>
<package pkgid="09736ea8f38e306bf41c8942668cf164266dc5f69fc4cf5dda527bdd8066ce49" name="WALinuxAgent-udev" arch="noarch">
  <version epoch="0" ver="2.14.0.1" rel="3.el10"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.9.1.1-6" date="1720699200">- wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [RHEL-40966]
- wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [RHEL-40966]
- wla-redhat-Mark-directories-properly-in-the-files-list.patch [RHEL-40966]
- wla-redhat-Remove-files-inside-WALA-services-directory.patch [RHEL-40966]
- Resolves: RHEL-40966
  ([Azure][WALA][RHEL-10] Provisioning failed if no ifcfg-eth0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.9.1.1-7" date="1722859200">- wla-skip-cgorup-monitor-2939.patch [RHEL-46713]
- Resolves: RHEL-46713
  ([Azure][RHEL-10][WALA] waagent -collect-logs doesn't work and the log is confusing)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.9.1.1-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.9.1.1-9" date="1736769600">- wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-68796]
- Resolves: RHEL-68796
  (Please add `mana` to 99-azure-unmanaged-devices.conf of Azure image)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.9.1.1-10" date="1742904000">- wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [RHEL-84073]
- wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-84073]
- Resolves: RHEL-84073
  ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs [rhel-10])</changelog>
  <changelog author="Vitaly Kuznetsov &lt;vkuznets@redhat.com&gt; - 2.13.1.1-1" date="1747915200">- Rebase to 2.13.1.1 [RHEL-86509]
- Resolves: RHEL-86509
  (Rebase to v2.13.1.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.13.1.1-2" date="1755777600">- wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-109465]
- wla-docs-add-waagent-manpage-3401.patch [RHEL-96792]
- Resolves: RHEL-109465
  ([Azure][RHEL-10][WALA][Image mode] Cannot find 'service' command)
- Resolves: RHEL-96792
  ([Azure][WALA][RHEL-10] Missing man page)</changelog>
  <changelog author="Yuxin Sun &lt;yuxisun@redhat.com&gt; - 2.14.0.1-1" date="1761825600">- Rebase to 2.14.0.1 [RHEL-116438]
- Resolves: RHEL-116438
  (Rebase to v2.14.0.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.14.0.1-2" date="1762171200">- wla-Remove-the-10-azure-unmanaged-sriov.rules-to-avoid-c.patch [RHEL-114155]
- Resolves: RHEL-114155
  ([Azure][WALA][RHEL-10] Remove 10-azure-unmanaged-sriov.rules)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.14.0.1-3" date="1768824000">- wla-Change-redhat-waagent-network-setup.service-path-to-.patch [RHEL-82243]
- Resolves: RHEL-82243
  ([Azure][image mode][WALA][RHEL-10] Unable to setup the persistent firewall rules)</changelog>
</package>
<package pkgid="5f6a41c3d2d12009fdfd8f7578ad44f4daa67ee0765f22e5062611de712e6e27" name="Xaw3d" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.6.4-4" date="1704801600">- Backport upstream patches to fix C type errors</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-7" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.6.5-1" date="1706788800">- 1.6.5</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.6.5-2" date="1706875200">- SPDX license tags.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.5-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1.6.5-4" date="1729252800">- Gating enablement rebuild (RHEL-52092)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.5-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="083904486cfecd744f47f86c17dbbee54c2a5eddf0d17d43b6cfbdcc3690de6d" name="Xaw3d-devel" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.6.4-4" date="1704801600">- Backport upstream patches to fix C type errors</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-7" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.6.5-1" date="1706788800">- 1.6.5</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.6.5-2" date="1706875200">- SPDX license tags.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.5-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1.6.5-4" date="1729252800">- Gating enablement rebuild (RHEL-52092)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.5-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f5e938d93a1477a4ae50505fb9ec9e0bb3bc3c154ae167d7d125d50d58e3db9c" name="a52dec" arch="x86_64">
  <version epoch="0" ver="0.7.4" rel="50.el10"/>
  <changelog author="Peter Fordham &lt;peter.fordham@gmail.com&gt; - 0.7.4-44" date="1669809600">- Port configure script to C99</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.4-45" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.4-46" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.4-47" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.4-48" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.4-49" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.4-50" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bf6c41e9a7b472c2634f295f7d61577f18b3020fba7290766f7d52a16e3eac4b" name="aajohan-comfortaa-fonts" arch="noarch">
  <version epoch="0" ver="3.105" rel="0.1.20210729git2a87ac6.el10"/>
  <changelog author="Rocky Linux Build System (Peridot) &lt;releng@rockylinux.org&gt; - 3.105-0.1.20210729git2a87ac6.el10" date="1709121600">- local build</changelog>
</package>
<package pkgid="025cd5c5918c52b8156b02821728f3d96432ae68320de1dcf264c83e75097ec4" name="aardvark-dns" arch="x86_64">
  <version epoch="2" ver="1.17.0" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.12.2-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.0-1" date="1730289600">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.0
- Resolves: RHEL-65320</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-1" date="1731499200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1
- Related: RHEL-58990</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.14.0-1" date="1739188800">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.14.0
- Related: RHEL-58990</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:1.14.0-2" date="1740657600">- rebuilt to try TMT tests in osci
- Resolves: RHEL-80817</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:1.14.0-3" date="1741953600">- fix dep issues in tests subpackage
- Resolves: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.15.0-1" date="1747224000">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.15.0
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.16.0-1" date="1755259200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.16.0
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.16.0-2" date="1755259201">- install BATS if it's not available
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.17.0-1" date="1770120000">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.0
- Related: RHEL-122178</changelog>
</package>
<package pkgid="ee39182f2a83a7421116d24c45455bac1622fb74db3e3b65fdec1cf1dec78261" name="aardvark-dns" arch="x86_64">
  <version epoch="2" ver="1.17.1" rel="1.el10_2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.0-1" date="1730289600">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.0
- Resolves: RHEL-65320</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-1" date="1731499200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1
- Related: RHEL-58990</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.14.0-1" date="1739188800">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.14.0
- Related: RHEL-58990</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:1.14.0-2" date="1740657600">- rebuilt to try TMT tests in osci
- Resolves: RHEL-80817</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:1.14.0-3" date="1741953600">- fix dep issues in tests subpackage
- Resolves: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.15.0-1" date="1747224000">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.15.0
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.16.0-1" date="1755259200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.16.0
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.16.0-2" date="1755259201">- install BATS if it's not available
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.17.0-1" date="1770120000">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.0
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.17.1-1" date="1777982400">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.1
- Resolves: RHEL-170143</changelog>
</package>
<package pkgid="3624c4619a0eb531515d091587da01fb6a8f7199f95b5c5b9bad39df118417ae" name="aardvark-dns-tests" arch="x86_64">
  <version epoch="2" ver="1.17.0" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.12.2-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.0-1" date="1730289600">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.0
- Resolves: RHEL-65320</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-1" date="1731499200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1
- Related: RHEL-58990</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.14.0-1" date="1739188800">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.14.0
- Related: RHEL-58990</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:1.14.0-2" date="1740657600">- rebuilt to try TMT tests in osci
- Resolves: RHEL-80817</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:1.14.0-3" date="1741953600">- fix dep issues in tests subpackage
- Resolves: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.15.0-1" date="1747224000">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.15.0
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.16.0-1" date="1755259200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.16.0
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.16.0-2" date="1755259201">- install BATS if it's not available
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.17.0-1" date="1770120000">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.0
- Related: RHEL-122178</changelog>
</package>
<package pkgid="aee475d22008dad5db1c12833f1cec73a040fcd2bf338ff0f92a310c25bf1cd1" name="aardvark-dns-tests" arch="x86_64">
  <version epoch="2" ver="1.17.1" rel="1.el10_2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.0-1" date="1730289600">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.0
- Resolves: RHEL-65320</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-1" date="1731499200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1
- Related: RHEL-58990</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.14.0-1" date="1739188800">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.14.0
- Related: RHEL-58990</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:1.14.0-2" date="1740657600">- rebuilt to try TMT tests in osci
- Resolves: RHEL-80817</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:1.14.0-3" date="1741953600">- fix dep issues in tests subpackage
- Resolves: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.15.0-1" date="1747224000">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.15.0
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.16.0-1" date="1755259200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.16.0
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.16.0-2" date="1755259201">- install BATS if it's not available
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.17.0-1" date="1770120000">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.0
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.17.1-1" date="1777982400">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.1
- Resolves: RHEL-170143</changelog>
</package>
<package pkgid="38ff00d4f421baec15135edd327a091e09dec1a44b4e5fc0ffe9a0a2cb3ad36e" name="abattis-cantarell-fonts" arch="noarch">
  <version epoch="0" ver="0.301" rel="12.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 0.301-7" date="1643198400">- Add a sub-package for variable font, abattis-cantarell-vf-fonts.
  Resolves: rhbz#2045012
- Convert the spec file to the latest font packaging guidelines.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.301-8" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.301-9" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.301-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.301-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.301-12" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="cc00caaa2ed29747a2b0b7d8d189085c1f4a3c3b3e390b113f175f234543123d" name="abattis-cantarell-vf-fonts" arch="noarch">
  <version epoch="0" ver="0.301" rel="12.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 0.301-7" date="1643198400">- Add a sub-package for variable font, abattis-cantarell-vf-fonts.
  Resolves: rhbz#2045012
- Convert the spec file to the latest font packaging guidelines.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.301-8" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.301-9" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.301-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.301-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.301-12" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="aa2f2d9cf427b666a81a14c6bf70cf257d29685f13ec15ada352090dbb7f93b5" name="accel-config" arch="x86_64">
  <version epoch="0" ver="4.1.8" rel="3.el10"/>
  <changelog author="Jun Miao &lt;jun.miao@intel.com&gt; - 4.1-1" date="1695729600">- Update to v4.1 release</changelog>
  <changelog author="Jun Miao &lt;jun.miao@intel.com&gt; - 4.1.1-2" date="1696939200">- Update to v4.1.1 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.1-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.1-4" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-1" date="1711281600">- Rebase to 4.1.6 release
Resolves: RHEL-29909</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-2" date="1712750400">- Fix issue with dsa_user_test_runner device clean up.
Resolves: RHEL-32469</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.6-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-1" date="1722254400">- Rebase to 4.1.8 release.
Resolves: RHEL-40014</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.8-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-3" date="1742212800">- Update to current stable.
  Resolves: RHEL-38576</changelog>
</package>
<package pkgid="7add3671e15a9193d2c8bd40571fb8ae6d32ed510426a61b3b1e92d50256330c" name="accel-config-devel" arch="x86_64">
  <version epoch="0" ver="4.1.8" rel="3.el10"/>
  <changelog author="Jun Miao &lt;jun.miao@intel.com&gt; - 4.1-1" date="1695729600">- Update to v4.1 release</changelog>
  <changelog author="Jun Miao &lt;jun.miao@intel.com&gt; - 4.1.1-2" date="1696939200">- Update to v4.1.1 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.1-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.1-4" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-1" date="1711281600">- Rebase to 4.1.6 release
Resolves: RHEL-29909</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-2" date="1712750400">- Fix issue with dsa_user_test_runner device clean up.
Resolves: RHEL-32469</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.6-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-1" date="1722254400">- Rebase to 4.1.8 release.
Resolves: RHEL-40014</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.8-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-3" date="1742212800">- Update to current stable.
  Resolves: RHEL-38576</changelog>
</package>
<package pkgid="63b6867739eec44806366b45149c9d4495d3390ebc9f47df3d3f1621d78dcf90" name="accel-config-libs" arch="x86_64">
  <version epoch="0" ver="4.1.8" rel="3.el10"/>
  <changelog author="Jun Miao &lt;jun.miao@intel.com&gt; - 4.1-1" date="1695729600">- Update to v4.1 release</changelog>
  <changelog author="Jun Miao &lt;jun.miao@intel.com&gt; - 4.1.1-2" date="1696939200">- Update to v4.1.1 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.1-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.1-4" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-1" date="1711281600">- Rebase to 4.1.6 release
Resolves: RHEL-29909</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-2" date="1712750400">- Fix issue with dsa_user_test_runner device clean up.
Resolves: RHEL-32469</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.6-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-1" date="1722254400">- Rebase to 4.1.8 release.
Resolves: RHEL-40014</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.8-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-3" date="1742212800">- Update to current stable.
  Resolves: RHEL-38576</changelog>
</package>
<package pkgid="99ca5d5e9c2df21a6396729adbf28c2345257bab151fdce55128057f5c58634a" name="accel-config-test" arch="x86_64">
  <version epoch="0" ver="4.1.8" rel="3.el10"/>
  <changelog author="Jun Miao &lt;jun.miao@intel.com&gt; - 4.1-1" date="1695729600">- Update to v4.1 release</changelog>
  <changelog author="Jun Miao &lt;jun.miao@intel.com&gt; - 4.1.1-2" date="1696939200">- Update to v4.1.1 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.1-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.1-4" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-1" date="1711281600">- Rebase to 4.1.6 release
Resolves: RHEL-29909</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.6-2" date="1712750400">- Fix issue with dsa_user_test_runner device clean up.
Resolves: RHEL-32469</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.6-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-1" date="1722254400">- Rebase to 4.1.8 release.
Resolves: RHEL-40014</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.8-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jerry Snitselaar &lt;jsnitsel@redhat.com&gt; - 4.1.8-3" date="1742212800">- Update to current stable.
  Resolves: RHEL-38576</changelog>
</package>
<package pkgid="90f631d06750df068e64ead7b7f377453935cd3abc81b08eb226568a3d60aa29" name="accountsservice" arch="x86_64">
  <version epoch="0" ver="23.13.9" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.13.9-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.13.9-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.13.9-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 23.13.9-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 23.13.9-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Adrian Vovk &lt;avovk@redhat.com&gt; - 23.13.9-7" date="1744977600">- Backport changes from Fedora 40
  Resolves: RHEL-78526</changelog>
  <changelog author="Adrian Vovk &lt;avovk@redhat.com&gt; - 23.13.9-8" date="1745582400">- Allow "Lastname, Firstname" in /etc/passwd
  Resolves: RHEL-12265</changelog>
</package>
<package pkgid="6495a54ceec5ef61ac4ff608681a8604820e947467ae974c2455de7aa7a5b5b6" name="accountsservice-devel" arch="x86_64">
  <version epoch="0" ver="23.13.9" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.13.9-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.13.9-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.13.9-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 23.13.9-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 23.13.9-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Adrian Vovk &lt;avovk@redhat.com&gt; - 23.13.9-7" date="1744977600">- Backport changes from Fedora 40
  Resolves: RHEL-78526</changelog>
  <changelog author="Adrian Vovk &lt;avovk@redhat.com&gt; - 23.13.9-8" date="1745582400">- Allow "Lastname, Firstname" in /etc/passwd
  Resolves: RHEL-12265</changelog>
</package>
<package pkgid="0be20ce2b088c93d65593e2c610abd5bc596cfc8ea8c2be572d44b6b9a14cfd5" name="accountsservice-libs" arch="x86_64">
  <version epoch="0" ver="23.13.9" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.13.9-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.13.9-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.13.9-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 23.13.9-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 23.13.9-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Adrian Vovk &lt;avovk@redhat.com&gt; - 23.13.9-7" date="1744977600">- Backport changes from Fedora 40
  Resolves: RHEL-78526</changelog>
  <changelog author="Adrian Vovk &lt;avovk@redhat.com&gt; - 23.13.9-8" date="1745582400">- Allow "Lastname, Firstname" in /etc/passwd
  Resolves: RHEL-12265</changelog>
</package>
<package pkgid="de5855e78d3177427f69cebb07eb8ca8f85176bfaa339d938477517d461a9f5e" name="acl" arch="x86_64">
  <version epoch="0" ver="2.3.2" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Temuri Doghonadze &lt;temuri.doghonadze@gmail.com&gt; - 2.3.1-9" date="1694433600">- Backport Georgian locale from git
- Note, it will not be needed after release of new version of acl</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.1-10" date="1696593600">- preserve failed setfacl return code (RHEL-3909)
- make the license tag more precise</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.1-11" date="1701432000">- make acl compatible with -D_FORTIFY_SOURCE=3 (rhbz#2249839)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-12" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-13" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.2-1" date="1706097600">- rebase to latest version (rhbz#2260000)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.2-3" date="1721390400">- fix regressions caused by the get{gr,pw}nam_r patch (RHEL-40603)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="572aa84ae27c8c5b49dc4f05dfe247533a6974ce135dfbf2a541c2ca58cc84f7" name="acl" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="1.el10_2"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.2-3" date="1721390400">- fix regressions caused by the get{gr,pw}nam_r patch (RHEL-40603)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.4.0-1" date="1782388800">- rebase to 2.4.0 to fix the following CVEs:
  - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186106)
  - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186207)</changelog>
</package>
<package pkgid="2d816ae2927cb044a9bd697e6f3d6e5879f83983b20c7e06af5bc2349f3e73dd" name="acpica-tools" arch="x86_64">
  <version epoch="0" ver="20240322" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220331-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220331-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220331-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220331-8" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20220331-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20220331-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Al Stone &lt;ahs3@fedoraproject.org&gt; - 20240322-1" date="1730894400">- Update source tree to 20240322 version from upstream.  NB: this update
  is done in conjunction with removing s390x support due to the large
  number of patches that are now rendered obsolete.  Closes BZ#2138250.
- Note, too, that the upstream version of the tarball is missing two
  commits and has the wrong name; discussed this with upstream and
  included a patch with the two commits to correct this, and renamed
  the tarballs to try to maintain consistency. So, upstream is actually
  named version 20240321, but it should be 20240322 according to their
  own git tree (see tag G20240322 on github).
- Removed executable bit from all the upstream source files
- Remove big-endian support, aka s390x.  Closes BZ#2298855.
- Remove several 32-bit only patches that are also obsolete since they
  are for unsupported architectures (thanks to pbonzini and PR#5).
- Remove PIE patches since that is currently the default (again, thanks
  to pbonzini and PR#5)
- Resolves: RHEL-66144</changelog>
</package>
<package pkgid="d895ccaadf1cf3a53434bdf4a31e198bcdcf26b2504dcfde4fa6fcd62cfca466" name="acpid" arch="x86_64">
  <version epoch="0" ver="2.0.34" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.34-2" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.34-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.0.34-4" date="1691582400">- Converted license to SPDX</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.0.34-5" date="1691582401">- SPDX license fix</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.34-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.34-7" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Songsong Zhang &lt;U2FsdGVkX1@gmail.com&gt; - 2.0.34-8" date="1708689600">- Add riscv64 support</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.34-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.34-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="518316403a26cc868989cc2858a6969f6d28f7e08f1789621608f7a3db5a738d" name="adcli" arch="x86_64">
  <version epoch="0" ver="0.9.3.1" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.2-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.2-6" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.2-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.2-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.2-9" date="1739448000">- Fixes for RHEL SAST Automation
  Resolves: RHEL-45146</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-1" date="1765281600">- Rebase to latest upstream version
  Resolves: RHEL-2518
  Resolves: RHEL-5044
  Resolves: RHEL-5050
  Resolves: RHEL-16141
  Resolves: RHEL-44580
  Resolves: RHEL-56353
  Resolves: RHEL-78631
  Resolves: RHEL-73686</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-2" date="1765972800">- Use selinux_requires_min to avoid policycoreutils-python-utils dependency
  Resolves: RHEL-78631</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-3" date="1766404800">- Fix issue with restoring SELinux file label</changelog>
</package>
<package pkgid="21558386c980fcd2c5ed1af54528076f8f726da9ec6ad93c4f6c482e3c3f0b0c" name="adcli-doc" arch="noarch">
  <version epoch="0" ver="0.9.3.1" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.2-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.2-6" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.2-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.2-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.2-9" date="1739448000">- Fixes for RHEL SAST Automation
  Resolves: RHEL-45146</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-1" date="1765281600">- Rebase to latest upstream version
  Resolves: RHEL-2518
  Resolves: RHEL-5044
  Resolves: RHEL-5050
  Resolves: RHEL-16141
  Resolves: RHEL-44580
  Resolves: RHEL-56353
  Resolves: RHEL-78631
  Resolves: RHEL-73686</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-2" date="1765972800">- Use selinux_requires_min to avoid policycoreutils-python-utils dependency
  Resolves: RHEL-78631</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-3" date="1766404800">- Fix issue with restoring SELinux file label</changelog>
</package>
<package pkgid="6142db24675e9cc39a23c111bb6b470a13c37d3a89301e06f5297f718333e23e" name="adcli-selinux" arch="noarch">
  <version epoch="0" ver="0.9.3.1" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.2-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.2-6" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.2-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.2-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.2-9" date="1739448000">- Fixes for RHEL SAST Automation
  Resolves: RHEL-45146</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-1" date="1765281600">- Rebase to latest upstream version
  Resolves: RHEL-2518
  Resolves: RHEL-5044
  Resolves: RHEL-5050
  Resolves: RHEL-16141
  Resolves: RHEL-44580
  Resolves: RHEL-56353
  Resolves: RHEL-78631
  Resolves: RHEL-73686</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-2" date="1765972800">- Use selinux_requires_min to avoid policycoreutils-python-utils dependency
  Resolves: RHEL-78631</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-3" date="1766404800">- Fix issue with restoring SELinux file label</changelog>
</package>
<package pkgid="dd72ca15d7be3152402638c957a96eb7ec12b4ed2306c24a7138e89c789b85f5" name="adobe-afdko" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.1-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.1-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 3.6.1-7" date="1704456000">- Fix C compatibility issues</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.1-8" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.1-9" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.6.1-10" date="1706184000">- Fix a typo in the License expression
- Fix build not respecting distribution compiler flags; this means executables
  are now PIE, and the debuginfo package is now useful</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.6.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.6.1-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="189c8dab503cbc919dac100d65934932766445bf47b8e07ced3086a4e7fa7a01" name="adobe-mappings-cmap" arch="noarch">
  <version epoch="0" ver="20230622" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190730-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Lescak &lt;rlescak@redhat.com&gt; - 20230118-1" date="1674129600">- Rebase to version 20230118 (#2162105)</changelog>
  <changelog author="Richard Lescak &lt;rlescak@redhat.com&gt; - 20230118-2" date="1676980800">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20230118-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Richard Lescak &lt;rlescak@redhat.com&gt; - 20230622-1" date="1691064000">- rebase to version 20230622 (#2216272)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20230622-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20230622-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20230622-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20230622-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f95a1f6934ca62cdb6c53e55a3568c1a39f8565728921046e019128744194bcf" name="adobe-mappings-cmap-deprecated" arch="noarch">
  <version epoch="0" ver="20230622" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190730-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Lescak &lt;rlescak@redhat.com&gt; - 20230118-1" date="1674129600">- Rebase to version 20230118 (#2162105)</changelog>
  <changelog author="Richard Lescak &lt;rlescak@redhat.com&gt; - 20230118-2" date="1676980800">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20230118-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Richard Lescak &lt;rlescak@redhat.com&gt; - 20230622-1" date="1691064000">- rebase to version 20230622 (#2216272)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20230622-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20230622-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20230622-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20230622-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0a980fdaa71d9f153212bdf900b94c4506385db5ab4d59babd4b277547a0fc64" name="adobe-mappings-cmap-devel" arch="noarch">
  <version epoch="0" ver="20230622" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190730-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Lescak &lt;rlescak@redhat.com&gt; - 20230118-1" date="1674129600">- Rebase to version 20230118 (#2162105)</changelog>
  <changelog author="Richard Lescak &lt;rlescak@redhat.com&gt; - 20230118-2" date="1676980800">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20230118-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Richard Lescak &lt;rlescak@redhat.com&gt; - 20230622-1" date="1691064000">- rebase to version 20230622 (#2216272)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20230622-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20230622-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20230622-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20230622-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fc03c257d0bbd2a404b6bb742b523dd63b7d33feff7b9ff8259e0f40125aab84" name="adobe-mappings-pdf" arch="noarch">
  <version epoch="0" ver="20190401" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190401-3" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Lescak &lt;rlescak@redhat.com&gt; - 20190401-4" date="1676980800">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190401-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190401-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190401-7" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20190401-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20190401-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="07af841f42d4dcaaf699970da803fbb4b403e51453c1861baa8f80b7906d73ae" name="adobe-mappings-pdf-devel" arch="noarch">
  <version epoch="0" ver="20190401" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190401-3" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Lescak &lt;rlescak@redhat.com&gt; - 20190401-4" date="1676980800">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190401-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190401-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190401-7" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20190401-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20190401-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="33bfb56afd8b8be2b5058394d69a969d5f24227b955bbd183bb6dcc3c8ead8aa" name="adobe-source-code-pro-fonts" arch="noarch">
  <version epoch="0" ver="2.042.1.062.1.026" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.030.1.050-13" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.030.1.050-14" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.030.1.050-15" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;akira@tagoh.org&gt; - 2.030.1.050-21" date="1692446400">- Convert License tag to SPDX.</changelog>
  <changelog author="bbhtt &lt;bbhtt.zn0i8@slmail.me&gt; - 2.042.1.062.1.026-1" date="1692446401">- Update to 2.042.1.062.1.026</changelog>
  <changelog author="Robert-Andr&#xE9; Mauchin &lt;zebob.m@gmail.com&gt; - 2.042.1.062.1.026-2" date="1693224000">- Fix fontconfig files and file names</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.042.1.062.1.026-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.042.1.062.1.026-4" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="20e5f38c0cacb57b0b38d752862fb6283f948c4457bf477cb819c38dc7de051f" name="adobe-source-code-vf-fonts" arch="noarch">
  <version epoch="0" ver="2.042.1.062.1.026" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.030.1.050-13" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.030.1.050-14" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.030.1.050-15" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;akira@tagoh.org&gt; - 2.030.1.050-21" date="1692446400">- Convert License tag to SPDX.</changelog>
  <changelog author="bbhtt &lt;bbhtt.zn0i8@slmail.me&gt; - 2.042.1.062.1.026-1" date="1692446401">- Update to 2.042.1.062.1.026</changelog>
  <changelog author="Robert-Andr&#xE9; Mauchin &lt;zebob.m@gmail.com&gt; - 2.042.1.062.1.026-2" date="1693224000">- Fix fontconfig files and file names</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.042.1.062.1.026-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.042.1.062.1.026-4" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="290402351168b31e3d71d7cb8778f9f632030e5a7d601746dd7c059373e427f8" name="adwaita-cursor-theme" arch="noarch">
  <version epoch="0" ver="46.0" rel="3.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 45~beta-1" date="1689508800">- Update to 45.beta</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45~beta-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45~rc-1" date="1693915200">- Update to 45.rc</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0-1" date="1695211200">- Update to 45.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 46~alpha-1" date="1705924800">- Update to 46.alpha</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 46~alpha-2" date="1705924801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 46.0-1" date="1713528000">- Update to 46.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c4419020522ddb2c585e3368e065cd6fd1ede48529577ba56fc0279511d870de" name="adwaita-icon-theme" arch="noarch">
  <version epoch="0" ver="46.0" rel="3.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 45~beta-1" date="1689508800">- Update to 45.beta</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45~beta-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45~rc-1" date="1693915200">- Update to 45.rc</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0-1" date="1695211200">- Update to 45.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 46~alpha-1" date="1705924800">- Update to 46.alpha</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 46~alpha-2" date="1705924801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 46.0-1" date="1713528000">- Update to 46.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4c4f4dd127d0214dc11656b1b8626662a338b53a11edaa44e2d5e370c0ec4ea9" name="adwaita-icon-theme-devel" arch="noarch">
  <version epoch="0" ver="46.0" rel="3.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 45~beta-1" date="1689508800">- Update to 45.beta</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45~beta-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45~rc-1" date="1693915200">- Update to 45.rc</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0-1" date="1695211200">- Update to 45.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 46~alpha-1" date="1705924800">- Update to 46.alpha</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 46~alpha-2" date="1705924801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 46.0-1" date="1713528000">- Update to 46.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="acf5c2454d4dd40afd0f2c380e4b8e6296823a0caac22649688c755de5de1d75" name="afterburn" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="1.el10"/>
  <changelog author="Michael Nguyen &lt;mnguyen@redhat.com&gt; 5.5.0-1" date="1704801600">- Update to 5.5.0</changelog>
  <changelog author="Michael Nguyen &lt;mnguyen@redhat.com&gt; 5.5.1-1" date="1705406400">- Update to 5.5.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.5.1-2" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.5.1-3" date="1706875200">- Update Rust macro usage</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.5.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Yasmin Valim &lt;ydesouza@redhat.com&gt; - 5.7.0-1" date="1727697600">- New release</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.7.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Yasmin Valim &lt;ydesouza@redhat.com&gt; - 5.8.2-1" date="1747396800">- new version</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 5.9.0-1" date="1752235200">- new version</changelog>
  <changelog author="Michael Armijo &lt;marmijo@redhat.com&gt; - 5.10.0-1" date="1760616000">- new version</changelog>
</package>
<package pkgid="4a3b01017535a45b29ccf56cfabdc3d4a01c3ff403f717644773854df0357933" name="afterburn-dracut" arch="x86_64">
  <version epoch="0" ver="5.10.0" rel="1.el10"/>
  <changelog author="Michael Nguyen &lt;mnguyen@redhat.com&gt; 5.5.0-1" date="1704801600">- Update to 5.5.0</changelog>
  <changelog author="Michael Nguyen &lt;mnguyen@redhat.com&gt; 5.5.1-1" date="1705406400">- Update to 5.5.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.5.1-2" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.5.1-3" date="1706875200">- Update Rust macro usage</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.5.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Yasmin Valim &lt;ydesouza@redhat.com&gt; - 5.7.0-1" date="1727697600">- New release</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.7.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Yasmin Valim &lt;ydesouza@redhat.com&gt; - 5.8.2-1" date="1747396800">- new version</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 5.9.0-1" date="1752235200">- new version</changelog>
  <changelog author="Michael Armijo &lt;marmijo@redhat.com&gt; - 5.10.0-1" date="1760616000">- new version</changelog>
</package>
<package pkgid="a4f0db4478e69ca0dc79fe792964a03c8be778469a93588258fb6c79ad01f032" name="aide" arch="x86_64">
  <version epoch="0" ver="0.19.2" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.6-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.18.6-4" date="1707739200">- rebase to 0.18.6</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.18.6-5" date="1715947200">REDHAT 10.0 ERRATUM
- fix verbose patch
- get rid of libgcrypt
Resolves: RHEL-36780</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.18.6-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.18.6-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.18.6-8" date="1738152000">RHEL 10.0 ERRATUM
Resolves: RHEL-4320</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-1" date="1754395200">- rebase to 0.19.2
Resolves: RHEL-110572
- exclude directory but include subitems
Resolves: RHEL-1382
- prevent aide from exiting if a file is truncated during check
Resolves: RHEL-1383
- Switch to libnettle for hashing
Resolves: RHEL-59170</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-2" date="1758801600">- Modernize aide config file
Resolves: RHEL-39970
- No path reference ends with '/'
Resolves: RHEL-39959</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-3" date="1760011200">- /boot/grub2/grubenv is excluded from check due to boot_success implementation
- Do not monitor link count in /var/log/journal
Resolves: RHEL-39970</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-4" date="1760529600">- Adjust default config to avoid false positives in /etc
Resolves: RHEL-39970</changelog>
</package>
<package pkgid="b160db545ad0a5bbf31d049e668b8c1f195f02b93d7b9623703aaadd53e527c8" name="aide" arch="x86_64">
  <version epoch="0" ver="0.19.2" rel="4.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.18.6-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.18.6-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.18.6-8" date="1738152000">RHEL 10.0 ERRATUM
Resolves: RHEL-4320</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-1" date="1754395200">- rebase to 0.19.2
Resolves: RHEL-110572
- exclude directory but include subitems
Resolves: RHEL-1382
- prevent aide from exiting if a file is truncated during check
Resolves: RHEL-1383
- Switch to libnettle for hashing
Resolves: RHEL-59170</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-2" date="1758801600">- Modernize aide config file
Resolves: RHEL-39970
- No path reference ends with '/'
Resolves: RHEL-39959</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-3" date="1760011200">- /boot/grub2/grubenv is excluded from check due to boot_success implementation
- Do not monitor link count in /var/log/journal
Resolves: RHEL-39970</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-4" date="1760529600">- Adjust default config to avoid false positives in /etc
Resolves: RHEL-39970</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.19.2-4.1" date="1779796800">- Re-add syslog_format config option dropped during rebase to 0.19.2
Resolves: RHEL-178845
- Add aide-migrate-config to automate config migration from pre-0.19 syntax</changelog>
</package>
<package pkgid="9f8bf53686deee1319f5a1c774771b2971d7002b377c366dcded47a6c96aa6ba" name="alsa-firmware" arch="noarch">
  <version epoch="0" ver="1.2.4" rel="17.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.4-8" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.4-9" date="1686052800">- update SPDX licenses</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.4-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.4-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.4-12" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.4-13" date="1714651200">- Add rpminspect.yaml file to skip annobin check</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.4-15" date="1718625600">- Add gating.yaml, fix SPDX license</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.4-16" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.4-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="59a84b28a047bec2a2dd8f66df22792057249930d4826652435ec3fd9ebb0ce2" name="alsa-lib" arch="x86_64">
  <version epoch="0" ver="1.2.15.3" rel="2.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.12-1" date="1718625600">- update to alsa-lib 1.2.12 and alsa-ucm-conf 1.2.12</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.12-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.12-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.13-2" date="1734350400">- update to alsa-lib 1.2.13 and alsa-ucm-conf 1.2.13</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.14-1" date="1750939200">- update to alsa-lib 1.2.14 and alsa-ucm-conf 1.2.14</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.15.3-1" date="1767873600">- update to alsa-lib 1.2.15.3 and alsa-ucm-conf 1.2.15.3</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.15.3-2" date="1770724800">- fix control API remap issue</changelog>
</package>
<package pkgid="30c3a31d17ae7fac9c90c2d984fabca6778b1aa3142388dbfd318f96748a801d" name="alsa-lib-devel" arch="x86_64">
  <version epoch="0" ver="1.2.15.3" rel="2.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.12-1" date="1718625600">- update to alsa-lib 1.2.12 and alsa-ucm-conf 1.2.12</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.12-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.12-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.13-2" date="1734350400">- update to alsa-lib 1.2.13 and alsa-ucm-conf 1.2.13</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.14-1" date="1750939200">- update to alsa-lib 1.2.14 and alsa-ucm-conf 1.2.14</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.15.3-1" date="1767873600">- update to alsa-lib 1.2.15.3 and alsa-ucm-conf 1.2.15.3</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.15.3-2" date="1770724800">- fix control API remap issue</changelog>
</package>
<package pkgid="179a02c94da219259b6df3d6bbe4648852127d924579fe16d39839c5e0a380d1" name="alsa-plugins-arcamav" arch="x86_64">
  <version epoch="0" ver="1.2.7.1" rel="13.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.7.1-4" date="1678104000">- Enable avtp plugin - Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;
- Enable a52 and lavrate plugins - Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
- Remove or soften excess dependendencies - Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
- CI test &amp; RHEL cleanups</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.2.7.1-5" date="1678622400">- Rebuild for ffmpeg 6.0</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.7.1-6" date="1686052800">- change to SPDX licenses</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.2.7.1-8" date="1692964800">- Disable avtp plugin in RHEL builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7.1-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;jkysela@redhat.com&gt; - 1.2.7.1-13" date="1734523200">- fix SPDX licenses</changelog>
</package>
<package pkgid="82825e783c4b3e0df7a6ef30b09eb644643ee53a0c5659c2899d1d6d24644c45" name="alsa-plugins-maemo" arch="x86_64">
  <version epoch="0" ver="1.2.7.1" rel="13.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.7.1-4" date="1678104000">- Enable avtp plugin - Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;
- Enable a52 and lavrate plugins - Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
- Remove or soften excess dependendencies - Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
- CI test &amp; RHEL cleanups</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.2.7.1-5" date="1678622400">- Rebuild for ffmpeg 6.0</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.7.1-6" date="1686052800">- change to SPDX licenses</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.2.7.1-8" date="1692964800">- Disable avtp plugin in RHEL builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7.1-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;jkysela@redhat.com&gt; - 1.2.7.1-13" date="1734523200">- fix SPDX licenses</changelog>
</package>
<package pkgid="7cc1cc537594f25787a54c698b111d2ec204723cbbb81b557672c6bd0f749ed4" name="alsa-plugins-oss" arch="x86_64">
  <version epoch="0" ver="1.2.7.1" rel="13.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.7.1-4" date="1678104000">- Enable avtp plugin - Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;
- Enable a52 and lavrate plugins - Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
- Remove or soften excess dependendencies - Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
- CI test &amp; RHEL cleanups</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.2.7.1-5" date="1678622400">- Rebuild for ffmpeg 6.0</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.7.1-6" date="1686052800">- change to SPDX licenses</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.2.7.1-8" date="1692964800">- Disable avtp plugin in RHEL builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7.1-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;jkysela@redhat.com&gt; - 1.2.7.1-13" date="1734523200">- fix SPDX licenses</changelog>
</package>
<package pkgid="129f542b4da805fce0f0b6a2f34e09a822141638aebf0bde559564f6ffb6c974" name="alsa-plugins-pulseaudio" arch="x86_64">
  <version epoch="0" ver="1.2.7.1" rel="13.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.7.1-4" date="1678104000">- Enable avtp plugin - Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;
- Enable a52 and lavrate plugins - Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
- Remove or soften excess dependendencies - Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
- CI test &amp; RHEL cleanups</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.2.7.1-5" date="1678622400">- Rebuild for ffmpeg 6.0</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.7.1-6" date="1686052800">- change to SPDX licenses</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.2.7.1-8" date="1692964800">- Disable avtp plugin in RHEL builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7.1-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;jkysela@redhat.com&gt; - 1.2.7.1-13" date="1734523200">- fix SPDX licenses</changelog>
</package>
<package pkgid="381d451d255f4ec2134098197cad1f43087651cde7b96a81f0123f6729e6aef8" name="alsa-plugins-samplerate" arch="x86_64">
  <version epoch="0" ver="1.2.7.1" rel="13.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.7.1-4" date="1678104000">- Enable avtp plugin - Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;
- Enable a52 and lavrate plugins - Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
- Remove or soften excess dependendencies - Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
- CI test &amp; RHEL cleanups</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.2.7.1-5" date="1678622400">- Rebuild for ffmpeg 6.0</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.7.1-6" date="1686052800">- change to SPDX licenses</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.2.7.1-8" date="1692964800">- Disable avtp plugin in RHEL builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7.1-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;jkysela@redhat.com&gt; - 1.2.7.1-13" date="1734523200">- fix SPDX licenses</changelog>
</package>
<package pkgid="b20d51686215e9debefa6e56619ba5e4f997393d0582a96615796e4321da602f" name="alsa-plugins-speex" arch="x86_64">
  <version epoch="0" ver="1.2.7.1" rel="13.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.7.1-4" date="1678104000">- Enable avtp plugin - Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;
- Enable a52 and lavrate plugins - Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
- Remove or soften excess dependendencies - Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
- CI test &amp; RHEL cleanups</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.2.7.1-5" date="1678622400">- Rebuild for ffmpeg 6.0</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.7.1-6" date="1686052800">- change to SPDX licenses</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.2.7.1-8" date="1692964800">- Disable avtp plugin in RHEL builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7.1-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;jkysela@redhat.com&gt; - 1.2.7.1-13" date="1734523200">- fix SPDX licenses</changelog>
</package>
<package pkgid="c777227ec172c286c1bad80adbdcf0067b428cacfdae18b252f9a397d2a98933" name="alsa-plugins-upmix" arch="x86_64">
  <version epoch="0" ver="1.2.7.1" rel="13.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.7.1-4" date="1678104000">- Enable avtp plugin - Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;
- Enable a52 and lavrate plugins - Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
- Remove or soften excess dependendencies - Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
- CI test &amp; RHEL cleanups</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.2.7.1-5" date="1678622400">- Rebuild for ffmpeg 6.0</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.7.1-6" date="1686052800">- change to SPDX licenses</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.2.7.1-8" date="1692964800">- Disable avtp plugin in RHEL builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7.1-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;jkysela@redhat.com&gt; - 1.2.7.1-13" date="1734523200">- fix SPDX licenses</changelog>
</package>
<package pkgid="91581ac485604b83f545a587af477dc86e2282287b6363cc235b00cccae453ea" name="alsa-plugins-usbstream" arch="x86_64">
  <version epoch="0" ver="1.2.7.1" rel="13.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.7.1-4" date="1678104000">- Enable avtp plugin - Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;
- Enable a52 and lavrate plugins - Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
- Remove or soften excess dependendencies - Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
- CI test &amp; RHEL cleanups</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.2.7.1-5" date="1678622400">- Rebuild for ffmpeg 6.0</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.7.1-6" date="1686052800">- change to SPDX licenses</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.2.7.1-8" date="1692964800">- Disable avtp plugin in RHEL builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7.1-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;jkysela@redhat.com&gt; - 1.2.7.1-13" date="1734523200">- fix SPDX licenses</changelog>
</package>
<package pkgid="f1d5f8656fef206f81503ea183274f4cac46e4e9ae95b2a249cbf5b0bd123572" name="alsa-plugins-vdownmix" arch="x86_64">
  <version epoch="0" ver="1.2.7.1" rel="13.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.7.1-4" date="1678104000">- Enable avtp plugin - Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;
- Enable a52 and lavrate plugins - Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
- Remove or soften excess dependendencies - Yaakov Selkowitz &lt;yselkowi@redhat.com&gt;
- CI test &amp; RHEL cleanups</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.2.7.1-5" date="1678622400">- Rebuild for ffmpeg 6.0</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.7.1-6" date="1686052800">- change to SPDX licenses</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.2.7.1-8" date="1692964800">- Disable avtp plugin in RHEL builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.7.1-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7.1-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;jkysela@redhat.com&gt; - 1.2.7.1-13" date="1734523200">- fix SPDX licenses</changelog>
</package>
<package pkgid="98efb2a082ee02213c412dd34b9d83b90ce8339b15ac7178680443e98b2ca50b" name="alsa-sof-firmware" arch="noarch">
  <version epoch="0" ver="2025.12.2" rel="1.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2024.03-9" date="1722340800">- Remove AVS topology files (moved to linux-firmware)</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2024.09-1" date="1728907200">- Update to v2024.09</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2024.09-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2024.09.1-1" date="1731326400">- Update to v2024.09.1</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2024.09.2-1" date="1733486400">- Update to v2024.09.2</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2024.09.2-2" date="1734523200">- Add sof-ipc4-lib directory</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2024.09.2-3" date="1744632000">- fix the pretrans script for symlink swap (sof-ace-tplg &lt;-&gt; sof-ipc4-tplg)</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2025.05-1" date="1750939200">- Update to v2025.05</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2025.05.1-1" date="1765281600">- Update to v2025.05.1</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2025.12.2-1" date="1769515200">- Update to v2025.12.2</changelog>
</package>
<package pkgid="b92be239a537b87ecea0c3de025e2d66e057c010ab9b27961943a7ecc12b38df" name="alsa-sof-firmware-debug" arch="noarch">
  <version epoch="0" ver="2025.12.2" rel="1.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2024.03-9" date="1722340800">- Remove AVS topology files (moved to linux-firmware)</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2024.09-1" date="1728907200">- Update to v2024.09</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2024.09-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2024.09.1-1" date="1731326400">- Update to v2024.09.1</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2024.09.2-1" date="1733486400">- Update to v2024.09.2</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2024.09.2-2" date="1734523200">- Add sof-ipc4-lib directory</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2024.09.2-3" date="1744632000">- fix the pretrans script for symlink swap (sof-ace-tplg &lt;-&gt; sof-ipc4-tplg)</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2025.05-1" date="1750939200">- Update to v2025.05</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2025.05.1-1" date="1765281600">- Update to v2025.05.1</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2025.12.2-1" date="1769515200">- Update to v2025.12.2</changelog>
</package>
<package pkgid="e0496006d449abe2173f8bcdb6403f69d474515f1812f6bcfcf0ca183579babe" name="alsa-tools-firmware" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.5-6" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.5-8" date="1686052800">- SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.5-9" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.2.5-10" date="1704801600">- Fix C type errors using G_CALLBACK</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.5-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.5-12" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.11-2" date="1706529600">- Updated to 1.2.11</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.11-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.11-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.11-5" date="1734523200">- Move remaining files to /usr tree</changelog>
</package>
<package pkgid="6e483caa329a6cd5e7b6826ab409200218522f8327e36a48815a6114e7635706" name="alsa-topology" arch="noarch">
  <version epoch="0" ver="1.2.15.3" rel="2.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.12-1" date="1718625600">- update to alsa-lib 1.2.12 and alsa-ucm-conf 1.2.12</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.12-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.12-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.13-2" date="1734350400">- update to alsa-lib 1.2.13 and alsa-ucm-conf 1.2.13</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.14-1" date="1750939200">- update to alsa-lib 1.2.14 and alsa-ucm-conf 1.2.14</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.15.3-1" date="1767873600">- update to alsa-lib 1.2.15.3 and alsa-ucm-conf 1.2.15.3</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.15.3-2" date="1770724800">- fix control API remap issue</changelog>
</package>
<package pkgid="f702ecb06e24e31697d906759214531a77e87ce16175e82360e12e0c18e6c858" name="alsa-topology-utils" arch="x86_64">
  <version epoch="0" ver="1.2.15.2" rel="1.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.11-1" date="1706529600">* Updated to 1.2.11</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.11-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.12-1" date="1720094400">* Updated to 1.2.12</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.12-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.13-1" date="1733659200">* Updated to 1.2.13</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.14-2" date="1751371200">* Updated to 1.2.14</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.15.2-1" date="1769083200">* Updated to 1.2.15.2</changelog>
</package>
<package pkgid="f827e00644e6b075b554ea881859d12205bcd0eaa2ebb632058cc266da3be0ae" name="alsa-ucm" arch="noarch">
  <version epoch="0" ver="1.2.15.3" rel="2.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.12-1" date="1718625600">- update to alsa-lib 1.2.12 and alsa-ucm-conf 1.2.12</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.12-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.12-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.13-2" date="1734350400">- update to alsa-lib 1.2.13 and alsa-ucm-conf 1.2.13</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.14-1" date="1750939200">- update to alsa-lib 1.2.14 and alsa-ucm-conf 1.2.14</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.15.3-1" date="1767873600">- update to alsa-lib 1.2.15.3 and alsa-ucm-conf 1.2.15.3</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.15.3-2" date="1770724800">- fix control API remap issue</changelog>
</package>
<package pkgid="b1432cf6df965f1363d978f3e5d75abe4287fb6cbd6891fe673cc7059008775b" name="alsa-ucm-utils" arch="x86_64">
  <version epoch="0" ver="1.2.15.2" rel="1.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.11-1" date="1706529600">* Updated to 1.2.11</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.11-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.12-1" date="1720094400">* Updated to 1.2.12</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.12-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.13-1" date="1733659200">* Updated to 1.2.13</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.14-2" date="1751371200">* Updated to 1.2.14</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.15.2-1" date="1769083200">* Updated to 1.2.15.2</changelog>
</package>
<package pkgid="c193ab941eb5496c17c6165389fb6647d6a6a20bced19c9018e2fde526b09d8d" name="alsa-utils" arch="x86_64">
  <version epoch="0" ver="1.2.15.2" rel="1.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.11-1" date="1706529600">* Updated to 1.2.11</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.11-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.12-1" date="1720094400">* Updated to 1.2.12</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.12-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.13-1" date="1733659200">* Updated to 1.2.13</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.14-2" date="1751371200">* Updated to 1.2.14</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.15.2-1" date="1769083200">* Updated to 1.2.15.2</changelog>
</package>
<package pkgid="2b076f40ff26a0c8d7704f2ce82c061137d2a4b2643c2604f49c42888233df05" name="alsa-utils-alsabat" arch="x86_64">
  <version epoch="0" ver="1.2.15.2" rel="1.el10"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.11-1" date="1706529600">* Updated to 1.2.11</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.11-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.12-1" date="1720094400">* Updated to 1.2.12</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.12-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.13-1" date="1733659200">* Updated to 1.2.13</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.14-2" date="1751371200">* Updated to 1.2.14</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.15.2-1" date="1769083200">* Updated to 1.2.15.2</changelog>
</package>
<package pkgid="3f3710935dd048e91b153a04b068d53a151f328bfc04464676fb384a4379a9eb" name="alternatives" arch="x86_64">
  <version epoch="0" ver="1.30" rel="2.el10"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.22-1" date="1679572800">- migrate to SPDX license
- Translated using Weblate (English (United Kingdom))
- Translated using Weblate (Japanese)
- ci: Add locale linter
- ci: update workflows
- test: fix ShellCheck error[SC2070]
- Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
- releng: Packit remove extra job trigger
- releng: Enable Packit to handle Fedora updates
- releng: Convert to rpmautospec</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.23-1" date="1683201600">- Translated using Weblate (Korean)
- Translated using Weblate (English (United Kingdom))
- alternatives: --keep-foreign incorrectly handles non-existent files
- alternatives: isLink should return 0 in case of lstat error
- Translated using Weblate (Swedish)
- Translated using Weblate (Korean)
- Translated using Weblate (Georgian)
- Translated using Weblate (Finnish)
- Translated using Weblate (Ukrainian)
- Translated using Weblate (Polish)
- Update translation files
- Translated using Weblate (German)
- doc: update translations
- spec: remote changelog</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.24-1" date="1683201601">- ci: fix `NEXT_VERSION` in Makefile
- revert: releng: Enable Packit to handle Fedora updates
- revert: releng: Convert to rpmautospec</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.25-1" date="1690977600">- alternatives: fix possible buffer overrun
- Translated using Weblate (Korean)
- Translated using Weblate (Chinese (Simplified) (zh_CN))</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.26-1" date="1705492800">- fix(test): dot't call `basename` with empty string
- spec: sort BuildRequires alphabetically
- fix(test): remove dangling `rlPhase` fn call
- ci: run tests using Packit and Testing Farm
- build: update `.pot` file
- ci: fix typo in test workflow
- test: add support for running using tmt
- Translated using Weblate (Czech)
- Translated using Weblate (Punjabi)
- build(deps): bump actions/upload-artifact from 3 to 4
- build(deps): bump github/codeql-action from 2 to 3
- leveldb: fix systemdActive()
- build(deps): bump redhat-plumbers-in-action/differential-shellcheck
- Translated using Weblate (Hungarian)
- build(deps): bump actions/checkout from 3 to 4</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.27-1" date="1715688000">- alternatives: properly handle chars with const in normalize_path
- alternatives: use exit in main instead of return for critical failures
- alternatives: fix leak
- alternatives: fix leak
- alternatives: fix possible overrun
- alternatives: fix all the leaks of groups in readConfig
- alternatives: fix all the leaks of read line in readConfig
- alternatives: fix leak
- alternatives: fix memory leak
- alternatives: fix memory leak
- alternatives: initialize parameters in main to NULL
- alternatives: fix memory leak
- Translated using Weblate (Korean)
- Translated using Weblate (English (United Kingdom))
- Translated using Weblate (Finnish)
- Translated using Weblate (Finnish)
- Translated using Weblate (Japanese)
- Translated using Weblate (Swedish)
- Translated using Weblate (Japanese)
- Translated using Weblate (Polish)
- Translated using Weblate (Korean)
- Translated using Weblate (Georgian)
- Update translation files
- Translated using Weblate (Japanese)
- Fix systemd dependency</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.28-1" date="1718971200">- Prepare for bin-sbin merge
- tests: fix integration with github actions</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.29-1" date="1722340800">- add basic mkosi config
- remove not used directory from makefile
- ntsysv: fix leaks
- leveldb: security_context_t is deprecated
- leveldb: fix leak
- leveldb: fix leak
- leveldb: fix leak
- leveldb: fix leak
- leveldb: fix leak
- chkconfig: fix leak
- chkconfig: fix leak
- chkconfig: fix memory leak when deleting a service
- leveldb: add destructors for service
- leveldb: fix memory leak
- leveldb.c: fix memory leak
- chkconfig: fix leak
- leveldb: fix memory leak
- alternatives: ensure the current alt. is freed if parsing fails
- alternatives: ensure the current group is freed
- Translated using Weblate (English (United Kingdom))
- Translated using Weblate (Turkish)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.30-1" date="1723032000">- ostree: move admindir to /etc/alternatives.admindir
- update po/chkconfig.pot</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.30-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="997cd926a957e672661d99d21d546743251c84c26b2725e0cf0bd630927ef92c" name="amd-gpu-firmware" arch="noarch">
  <version epoch="0" ver="20260411" rel="19.5.el10_1"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-19.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128447)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128447</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-19.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-140094)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-140094</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-19.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145532)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145532</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260311-19.4" date="1773230400">- Update linux-firmware to latest upstream (RHEL-154362)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-154362</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260411-19.5" date="1775908800">- Update linux-firmware to latest upstream (RHEL-164389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
Resolves: RHEL-164389</changelog>
</package>
<package pkgid="31d82467ab02af856fc5604a24bf320e7ec280a2fbae8bb8ddd25650670ead5c" name="amd-gpu-firmware" arch="noarch">
  <version epoch="0" ver="20260609" rel="23.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250212-14" date="1740484800">- accel: ivpu: Update firmware for NPU (RHEL-38586)
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
</package>
<package pkgid="5ecd2d393f983cf706fea7dcd56db015228a4b563532549184e1f3e0218aa202" name="amd-gpu-firmware" arch="noarch">
  <version epoch="0" ver="20260707" rel="23.1.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream ()
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
</package>
<package pkgid="91a245b01c5f9fc45e5b916294ddac9545e25cc7bce2e79651bb3fb5848b8be5" name="amd-gpu-firmware" arch="noarch">
  <version epoch="0" ver="20260804" rel="23.2.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream (RHEL-188389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260804-23.2" date="1785844800">- Update linux-firmware to latest upstream (RHEL-214057)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- linux-firmware: Add firmware binary files for new HP project (Messi)
- qcom: Add gpu firmwares for Eliza chipset
- cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
- rtw89: 8922d: add fw 0.35.113.2
- qcom: venus-5.4: fix vp9 decoder assertion failure
- qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
- qcom: Update qdsp6sw firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- intel_vpu: Update NPU firmware
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: Add firmware for new soundwire projects
- rtw88: add firmware v41.0.0 for RTL8723B
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add ADSP firmware for hawi platform
- powervr: add firmware for Imagination Technologies BXM-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform
Resolves: RHEL-214057</changelog>
</package>
<package pkgid="98e36337b8e8498f735c8afa51f69307df9b463b118bb84071123547aaf6fc9b" name="amd-ucode-firmware" arch="noarch">
  <version epoch="0" ver="20260411" rel="19.5.el10_1"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-19.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128447)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128447</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-19.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-140094)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-140094</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-19.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145532)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145532</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260311-19.4" date="1773230400">- Update linux-firmware to latest upstream (RHEL-154362)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-154362</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260411-19.5" date="1775908800">- Update linux-firmware to latest upstream (RHEL-164389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
Resolves: RHEL-164389</changelog>
</package>
<package pkgid="aed774f2625226c199b7016844919e6330ed5987286413f1270eb689330f6d1a" name="amd-ucode-firmware" arch="noarch">
  <version epoch="0" ver="20260609" rel="23.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250212-14" date="1740484800">- accel: ivpu: Update firmware for NPU (RHEL-38586)
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
</package>
<package pkgid="1a3c12f1691af2a14054b34663a56fbdb9ce6972a1e00ae7025de87da92c3ec2" name="amd-ucode-firmware" arch="noarch">
  <version epoch="0" ver="20260707" rel="23.1.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream ()
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
</package>
<package pkgid="529a923866c46d7811d61473942ab65dcbcbf336bf9f1664dd8b23cb6d2ff30d" name="amd-ucode-firmware" arch="noarch">
  <version epoch="0" ver="20260804" rel="23.2.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream (RHEL-188389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260804-23.2" date="1785844800">- Update linux-firmware to latest upstream (RHEL-214057)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- linux-firmware: Add firmware binary files for new HP project (Messi)
- qcom: Add gpu firmwares for Eliza chipset
- cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
- rtw89: 8922d: add fw 0.35.113.2
- qcom: venus-5.4: fix vp9 decoder assertion failure
- qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
- qcom: Update qdsp6sw firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- intel_vpu: Update NPU firmware
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: Add firmware for new soundwire projects
- rtw88: add firmware v41.0.0 for RTL8723B
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add ADSP firmware for hawi platform
- powervr: add firmware for Imagination Technologies BXM-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform
Resolves: RHEL-214057</changelog>
</package>
<package pkgid="f2c32531e1a14a1090ebf5e8b18c00b236b004e215897ce6bf92619bc94ddd92" name="anaconda" arch="x86_64">
  <version epoch="0" ver="40.22.3.46" rel="1.el10.rocky.0.6"/>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.38-1" date="1764590400">- bootloader: efi: utilize grub2-common script for handling config file
  generation (k.koukiou)
  Resolves: RHEL-58830</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.39-1" date="1764936000">- Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection
  (k.koukiou)
  Related: RHEL-58215
- bootc: Collect kernel arguments before installation to pass to bootc
  (k.koukiou)
  Related: RHEL-58215
- bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou)
  Related: RHEL-58215
- pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou)
  Related: RHEL-58215
- Add bootc installation method (ppolawsk)
  Resolves: RHEL-58215
- Include bootc command in expected pykickstart commands (ppolawsk)
  Related: RHEL-58215</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.40-1" date="1768305600">- rhsm: add --flatpak-registry-url support (bciconel)
  Resolves: RHEL-132652
- flatpak: handle self-signed certificate errors in registry sources (bciconel)
  Resolves: RHEL-132652
- flatpak: add utility to check for self-signed certificate errors (bciconel)
  Resolves: RHEL-132652
- Fix permissions of the ssh config created by Anaconda (ppolawsk)
  Resolves: RHEL-99673
- Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman)
  Resolves: RHEL-112702
  Related: RHEL-132666</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.41-1" date="1768996800">- ostree needs to have /boot be bindmounted into sysroot (k.koukiou)
  Resolves: RHEL-66155
- modules: rpm_ostree: allow /boot/efi mount point in bootc installation
  (k.koukiou)
  Resolves: RHEL-141155</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.42-1" date="1768996801">- payloads: flatpak: fix SSL error detection on older Python versions
  (bciconel)
  Related: RHEL-141069
  Resolves: RHEL-142694</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.43-1" date="1769601600">- installation: run subscription tasks after network configuration (bciconel)
  Resolves: RHEL-135111
- subscription: ensure /var/lib/insights exists before running insights-client
  (bciconel)
  Resolves: RHEL-135111
- spec: Require zram-generator-defaults for RHEL-10 (k.koukiou)
  Resolves: RHEL-117685
- Only show compatible translations in text mode (mkolman)
  Resolves: RHEL-16168</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.44-1" date="1770724800">- storage: stop creating /etc/mtab symlink during installation (k.koukiou)
  Related: RHEL-135116
- rescue: Add warning for immutable systems (k.koukiou)
  Related: RHEL-135116
- rescue: detect OSTree deployments in rescue mode and show deployment path
  (k.koukiou)
  Resolves: RHEL-135116
- pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
  (k.koukiou)
  Related: RHEL-135116
- network: List all network interfaces IP for RDP session (ppolawsk)
  Resolves: RHEL-74268</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.45-1" date="1771243200">- Fix user input in driver disk menu is not displayed (adamkankovsky)
  Resolves: RHEL-58828
- flatpak: tests: fix unreachable code (fsouza.bruno)
  Related: RHEL-143566
- flatpak: Only override remote URLs when subscription module is available
  (bciconel)
  Related: RHEL-143566
- flatpak: Make installation failures non-blocking (bciconel)
  Resolves: RHEL-143566
- Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou)
  Resolves: RHEL-144456</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.46-1" date="1772452800">- pyanaconda: storage: platform: Raise /boot to 2 GiB (neal)
  Resolves: RHEL-151547</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 40.22.3.46-1.rocky.0.6" date="1772539200">- Add Rocky Linux specific changes</changelog>
</package>
<package pkgid="3f6316b90bc3eaee2e876ff5901e93d38a94feadc3e979fe0134d5c28d8fc0e4" name="anaconda-core" arch="x86_64">
  <version epoch="0" ver="40.22.3.46" rel="1.el10.rocky.0.6"/>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.38-1" date="1764590400">- bootloader: efi: utilize grub2-common script for handling config file
  generation (k.koukiou)
  Resolves: RHEL-58830</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.39-1" date="1764936000">- Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection
  (k.koukiou)
  Related: RHEL-58215
- bootc: Collect kernel arguments before installation to pass to bootc
  (k.koukiou)
  Related: RHEL-58215
- bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou)
  Related: RHEL-58215
- pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou)
  Related: RHEL-58215
- Add bootc installation method (ppolawsk)
  Resolves: RHEL-58215
- Include bootc command in expected pykickstart commands (ppolawsk)
  Related: RHEL-58215</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.40-1" date="1768305600">- rhsm: add --flatpak-registry-url support (bciconel)
  Resolves: RHEL-132652
- flatpak: handle self-signed certificate errors in registry sources (bciconel)
  Resolves: RHEL-132652
- flatpak: add utility to check for self-signed certificate errors (bciconel)
  Resolves: RHEL-132652
- Fix permissions of the ssh config created by Anaconda (ppolawsk)
  Resolves: RHEL-99673
- Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman)
  Resolves: RHEL-112702
  Related: RHEL-132666</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.41-1" date="1768996800">- ostree needs to have /boot be bindmounted into sysroot (k.koukiou)
  Resolves: RHEL-66155
- modules: rpm_ostree: allow /boot/efi mount point in bootc installation
  (k.koukiou)
  Resolves: RHEL-141155</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.42-1" date="1768996801">- payloads: flatpak: fix SSL error detection on older Python versions
  (bciconel)
  Related: RHEL-141069
  Resolves: RHEL-142694</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.43-1" date="1769601600">- installation: run subscription tasks after network configuration (bciconel)
  Resolves: RHEL-135111
- subscription: ensure /var/lib/insights exists before running insights-client
  (bciconel)
  Resolves: RHEL-135111
- spec: Require zram-generator-defaults for RHEL-10 (k.koukiou)
  Resolves: RHEL-117685
- Only show compatible translations in text mode (mkolman)
  Resolves: RHEL-16168</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.44-1" date="1770724800">- storage: stop creating /etc/mtab symlink during installation (k.koukiou)
  Related: RHEL-135116
- rescue: Add warning for immutable systems (k.koukiou)
  Related: RHEL-135116
- rescue: detect OSTree deployments in rescue mode and show deployment path
  (k.koukiou)
  Resolves: RHEL-135116
- pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
  (k.koukiou)
  Related: RHEL-135116
- network: List all network interfaces IP for RDP session (ppolawsk)
  Resolves: RHEL-74268</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.45-1" date="1771243200">- Fix user input in driver disk menu is not displayed (adamkankovsky)
  Resolves: RHEL-58828
- flatpak: tests: fix unreachable code (fsouza.bruno)
  Related: RHEL-143566
- flatpak: Only override remote URLs when subscription module is available
  (bciconel)
  Related: RHEL-143566
- flatpak: Make installation failures non-blocking (bciconel)
  Resolves: RHEL-143566
- Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou)
  Resolves: RHEL-144456</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.46-1" date="1772452800">- pyanaconda: storage: platform: Raise /boot to 2 GiB (neal)
  Resolves: RHEL-151547</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 40.22.3.46-1.rocky.0.6" date="1772539200">- Add Rocky Linux specific changes</changelog>
</package>
<package pkgid="3e73fd3cbb81d517f075d2fdf3db8c3018a49451d8d08c969b008c02b78f9c9d" name="anaconda-dracut" arch="x86_64">
  <version epoch="0" ver="40.22.3.46" rel="1.el10.rocky.0.6"/>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.38-1" date="1764590400">- bootloader: efi: utilize grub2-common script for handling config file
  generation (k.koukiou)
  Resolves: RHEL-58830</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.39-1" date="1764936000">- Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection
  (k.koukiou)
  Related: RHEL-58215
- bootc: Collect kernel arguments before installation to pass to bootc
  (k.koukiou)
  Related: RHEL-58215
- bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou)
  Related: RHEL-58215
- pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou)
  Related: RHEL-58215
- Add bootc installation method (ppolawsk)
  Resolves: RHEL-58215
- Include bootc command in expected pykickstart commands (ppolawsk)
  Related: RHEL-58215</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.40-1" date="1768305600">- rhsm: add --flatpak-registry-url support (bciconel)
  Resolves: RHEL-132652
- flatpak: handle self-signed certificate errors in registry sources (bciconel)
  Resolves: RHEL-132652
- flatpak: add utility to check for self-signed certificate errors (bciconel)
  Resolves: RHEL-132652
- Fix permissions of the ssh config created by Anaconda (ppolawsk)
  Resolves: RHEL-99673
- Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman)
  Resolves: RHEL-112702
  Related: RHEL-132666</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.41-1" date="1768996800">- ostree needs to have /boot be bindmounted into sysroot (k.koukiou)
  Resolves: RHEL-66155
- modules: rpm_ostree: allow /boot/efi mount point in bootc installation
  (k.koukiou)
  Resolves: RHEL-141155</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.42-1" date="1768996801">- payloads: flatpak: fix SSL error detection on older Python versions
  (bciconel)
  Related: RHEL-141069
  Resolves: RHEL-142694</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.43-1" date="1769601600">- installation: run subscription tasks after network configuration (bciconel)
  Resolves: RHEL-135111
- subscription: ensure /var/lib/insights exists before running insights-client
  (bciconel)
  Resolves: RHEL-135111
- spec: Require zram-generator-defaults for RHEL-10 (k.koukiou)
  Resolves: RHEL-117685
- Only show compatible translations in text mode (mkolman)
  Resolves: RHEL-16168</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.44-1" date="1770724800">- storage: stop creating /etc/mtab symlink during installation (k.koukiou)
  Related: RHEL-135116
- rescue: Add warning for immutable systems (k.koukiou)
  Related: RHEL-135116
- rescue: detect OSTree deployments in rescue mode and show deployment path
  (k.koukiou)
  Resolves: RHEL-135116
- pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
  (k.koukiou)
  Related: RHEL-135116
- network: List all network interfaces IP for RDP session (ppolawsk)
  Resolves: RHEL-74268</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.45-1" date="1771243200">- Fix user input in driver disk menu is not displayed (adamkankovsky)
  Resolves: RHEL-58828
- flatpak: tests: fix unreachable code (fsouza.bruno)
  Related: RHEL-143566
- flatpak: Only override remote URLs when subscription module is available
  (bciconel)
  Related: RHEL-143566
- flatpak: Make installation failures non-blocking (bciconel)
  Resolves: RHEL-143566
- Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou)
  Resolves: RHEL-144456</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.46-1" date="1772452800">- pyanaconda: storage: platform: Raise /boot to 2 GiB (neal)
  Resolves: RHEL-151547</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 40.22.3.46-1.rocky.0.6" date="1772539200">- Add Rocky Linux specific changes</changelog>
</package>
<package pkgid="60eb7b50d967a6677536e9b1e8f82e6c02b21333f8684cc2c0a460eb32b47b4b" name="anaconda-gui" arch="x86_64">
  <version epoch="0" ver="40.22.3.46" rel="1.el10.rocky.0.6"/>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.38-1" date="1764590400">- bootloader: efi: utilize grub2-common script for handling config file
  generation (k.koukiou)
  Resolves: RHEL-58830</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.39-1" date="1764936000">- Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection
  (k.koukiou)
  Related: RHEL-58215
- bootc: Collect kernel arguments before installation to pass to bootc
  (k.koukiou)
  Related: RHEL-58215
- bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou)
  Related: RHEL-58215
- pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou)
  Related: RHEL-58215
- Add bootc installation method (ppolawsk)
  Resolves: RHEL-58215
- Include bootc command in expected pykickstart commands (ppolawsk)
  Related: RHEL-58215</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.40-1" date="1768305600">- rhsm: add --flatpak-registry-url support (bciconel)
  Resolves: RHEL-132652
- flatpak: handle self-signed certificate errors in registry sources (bciconel)
  Resolves: RHEL-132652
- flatpak: add utility to check for self-signed certificate errors (bciconel)
  Resolves: RHEL-132652
- Fix permissions of the ssh config created by Anaconda (ppolawsk)
  Resolves: RHEL-99673
- Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman)
  Resolves: RHEL-112702
  Related: RHEL-132666</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.41-1" date="1768996800">- ostree needs to have /boot be bindmounted into sysroot (k.koukiou)
  Resolves: RHEL-66155
- modules: rpm_ostree: allow /boot/efi mount point in bootc installation
  (k.koukiou)
  Resolves: RHEL-141155</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.42-1" date="1768996801">- payloads: flatpak: fix SSL error detection on older Python versions
  (bciconel)
  Related: RHEL-141069
  Resolves: RHEL-142694</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.43-1" date="1769601600">- installation: run subscription tasks after network configuration (bciconel)
  Resolves: RHEL-135111
- subscription: ensure /var/lib/insights exists before running insights-client
  (bciconel)
  Resolves: RHEL-135111
- spec: Require zram-generator-defaults for RHEL-10 (k.koukiou)
  Resolves: RHEL-117685
- Only show compatible translations in text mode (mkolman)
  Resolves: RHEL-16168</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.44-1" date="1770724800">- storage: stop creating /etc/mtab symlink during installation (k.koukiou)
  Related: RHEL-135116
- rescue: Add warning for immutable systems (k.koukiou)
  Related: RHEL-135116
- rescue: detect OSTree deployments in rescue mode and show deployment path
  (k.koukiou)
  Resolves: RHEL-135116
- pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
  (k.koukiou)
  Related: RHEL-135116
- network: List all network interfaces IP for RDP session (ppolawsk)
  Resolves: RHEL-74268</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.45-1" date="1771243200">- Fix user input in driver disk menu is not displayed (adamkankovsky)
  Resolves: RHEL-58828
- flatpak: tests: fix unreachable code (fsouza.bruno)
  Related: RHEL-143566
- flatpak: Only override remote URLs when subscription module is available
  (bciconel)
  Related: RHEL-143566
- flatpak: Make installation failures non-blocking (bciconel)
  Resolves: RHEL-143566
- Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou)
  Resolves: RHEL-144456</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.46-1" date="1772452800">- pyanaconda: storage: platform: Raise /boot to 2 GiB (neal)
  Resolves: RHEL-151547</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 40.22.3.46-1.rocky.0.6" date="1772539200">- Add Rocky Linux specific changes</changelog>
</package>
<package pkgid="d34313f8751767844f23b6c66322c3dfe4f3b6e9349f24ae88fea4d15dee1688" name="anaconda-install-env-deps" arch="x86_64">
  <version epoch="0" ver="40.22.3.46" rel="1.el10.rocky.0.6"/>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.38-1" date="1764590400">- bootloader: efi: utilize grub2-common script for handling config file
  generation (k.koukiou)
  Resolves: RHEL-58830</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.39-1" date="1764936000">- Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection
  (k.koukiou)
  Related: RHEL-58215
- bootc: Collect kernel arguments before installation to pass to bootc
  (k.koukiou)
  Related: RHEL-58215
- bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou)
  Related: RHEL-58215
- pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou)
  Related: RHEL-58215
- Add bootc installation method (ppolawsk)
  Resolves: RHEL-58215
- Include bootc command in expected pykickstart commands (ppolawsk)
  Related: RHEL-58215</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.40-1" date="1768305600">- rhsm: add --flatpak-registry-url support (bciconel)
  Resolves: RHEL-132652
- flatpak: handle self-signed certificate errors in registry sources (bciconel)
  Resolves: RHEL-132652
- flatpak: add utility to check for self-signed certificate errors (bciconel)
  Resolves: RHEL-132652
- Fix permissions of the ssh config created by Anaconda (ppolawsk)
  Resolves: RHEL-99673
- Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman)
  Resolves: RHEL-112702
  Related: RHEL-132666</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.41-1" date="1768996800">- ostree needs to have /boot be bindmounted into sysroot (k.koukiou)
  Resolves: RHEL-66155
- modules: rpm_ostree: allow /boot/efi mount point in bootc installation
  (k.koukiou)
  Resolves: RHEL-141155</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.42-1" date="1768996801">- payloads: flatpak: fix SSL error detection on older Python versions
  (bciconel)
  Related: RHEL-141069
  Resolves: RHEL-142694</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.43-1" date="1769601600">- installation: run subscription tasks after network configuration (bciconel)
  Resolves: RHEL-135111
- subscription: ensure /var/lib/insights exists before running insights-client
  (bciconel)
  Resolves: RHEL-135111
- spec: Require zram-generator-defaults for RHEL-10 (k.koukiou)
  Resolves: RHEL-117685
- Only show compatible translations in text mode (mkolman)
  Resolves: RHEL-16168</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.44-1" date="1770724800">- storage: stop creating /etc/mtab symlink during installation (k.koukiou)
  Related: RHEL-135116
- rescue: Add warning for immutable systems (k.koukiou)
  Related: RHEL-135116
- rescue: detect OSTree deployments in rescue mode and show deployment path
  (k.koukiou)
  Resolves: RHEL-135116
- pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
  (k.koukiou)
  Related: RHEL-135116
- network: List all network interfaces IP for RDP session (ppolawsk)
  Resolves: RHEL-74268</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.45-1" date="1771243200">- Fix user input in driver disk menu is not displayed (adamkankovsky)
  Resolves: RHEL-58828
- flatpak: tests: fix unreachable code (fsouza.bruno)
  Related: RHEL-143566
- flatpak: Only override remote URLs when subscription module is available
  (bciconel)
  Related: RHEL-143566
- flatpak: Make installation failures non-blocking (bciconel)
  Resolves: RHEL-143566
- Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou)
  Resolves: RHEL-144456</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.46-1" date="1772452800">- pyanaconda: storage: platform: Raise /boot to 2 GiB (neal)
  Resolves: RHEL-151547</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 40.22.3.46-1.rocky.0.6" date="1772539200">- Add Rocky Linux specific changes</changelog>
</package>
<package pkgid="547b8bbe775acf8733861d663bdcc15dc8f9510d4732c08c89e41b36cd6672ac" name="anaconda-install-img-deps" arch="x86_64">
  <version epoch="0" ver="40.22.3.46" rel="1.el10.rocky.0.6"/>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.38-1" date="1764590400">- bootloader: efi: utilize grub2-common script for handling config file
  generation (k.koukiou)
  Resolves: RHEL-58830</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.39-1" date="1764936000">- Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection
  (k.koukiou)
  Related: RHEL-58215
- bootc: Collect kernel arguments before installation to pass to bootc
  (k.koukiou)
  Related: RHEL-58215
- bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou)
  Related: RHEL-58215
- pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou)
  Related: RHEL-58215
- Add bootc installation method (ppolawsk)
  Resolves: RHEL-58215
- Include bootc command in expected pykickstart commands (ppolawsk)
  Related: RHEL-58215</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.40-1" date="1768305600">- rhsm: add --flatpak-registry-url support (bciconel)
  Resolves: RHEL-132652
- flatpak: handle self-signed certificate errors in registry sources (bciconel)
  Resolves: RHEL-132652
- flatpak: add utility to check for self-signed certificate errors (bciconel)
  Resolves: RHEL-132652
- Fix permissions of the ssh config created by Anaconda (ppolawsk)
  Resolves: RHEL-99673
- Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman)
  Resolves: RHEL-112702
  Related: RHEL-132666</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.41-1" date="1768996800">- ostree needs to have /boot be bindmounted into sysroot (k.koukiou)
  Resolves: RHEL-66155
- modules: rpm_ostree: allow /boot/efi mount point in bootc installation
  (k.koukiou)
  Resolves: RHEL-141155</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.42-1" date="1768996801">- payloads: flatpak: fix SSL error detection on older Python versions
  (bciconel)
  Related: RHEL-141069
  Resolves: RHEL-142694</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.43-1" date="1769601600">- installation: run subscription tasks after network configuration (bciconel)
  Resolves: RHEL-135111
- subscription: ensure /var/lib/insights exists before running insights-client
  (bciconel)
  Resolves: RHEL-135111
- spec: Require zram-generator-defaults for RHEL-10 (k.koukiou)
  Resolves: RHEL-117685
- Only show compatible translations in text mode (mkolman)
  Resolves: RHEL-16168</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.44-1" date="1770724800">- storage: stop creating /etc/mtab symlink during installation (k.koukiou)
  Related: RHEL-135116
- rescue: Add warning for immutable systems (k.koukiou)
  Related: RHEL-135116
- rescue: detect OSTree deployments in rescue mode and show deployment path
  (k.koukiou)
  Resolves: RHEL-135116
- pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
  (k.koukiou)
  Related: RHEL-135116
- network: List all network interfaces IP for RDP session (ppolawsk)
  Resolves: RHEL-74268</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.45-1" date="1771243200">- Fix user input in driver disk menu is not displayed (adamkankovsky)
  Resolves: RHEL-58828
- flatpak: tests: fix unreachable code (fsouza.bruno)
  Related: RHEL-143566
- flatpak: Only override remote URLs when subscription module is available
  (bciconel)
  Related: RHEL-143566
- flatpak: Make installation failures non-blocking (bciconel)
  Resolves: RHEL-143566
- Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou)
  Resolves: RHEL-144456</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.46-1" date="1772452800">- pyanaconda: storage: platform: Raise /boot to 2 GiB (neal)
  Resolves: RHEL-151547</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 40.22.3.46-1.rocky.0.6" date="1772539200">- Add Rocky Linux specific changes</changelog>
</package>
<package pkgid="8ea145bea09dfea6a08b3b3d2970b7d393b0f6c4307992c4250e522dc31997b4" name="anaconda-live" arch="noarch">
  <version epoch="0" ver="40.22.3.46" rel="1.el10.rocky.0.6"/>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.38-1" date="1764590400">- bootloader: efi: utilize grub2-common script for handling config file
  generation (k.koukiou)
  Resolves: RHEL-58830</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.39-1" date="1764936000">- Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection
  (k.koukiou)
  Related: RHEL-58215
- bootc: Collect kernel arguments before installation to pass to bootc
  (k.koukiou)
  Related: RHEL-58215
- bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou)
  Related: RHEL-58215
- pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou)
  Related: RHEL-58215
- Add bootc installation method (ppolawsk)
  Resolves: RHEL-58215
- Include bootc command in expected pykickstart commands (ppolawsk)
  Related: RHEL-58215</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.40-1" date="1768305600">- rhsm: add --flatpak-registry-url support (bciconel)
  Resolves: RHEL-132652
- flatpak: handle self-signed certificate errors in registry sources (bciconel)
  Resolves: RHEL-132652
- flatpak: add utility to check for self-signed certificate errors (bciconel)
  Resolves: RHEL-132652
- Fix permissions of the ssh config created by Anaconda (ppolawsk)
  Resolves: RHEL-99673
- Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman)
  Resolves: RHEL-112702
  Related: RHEL-132666</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.41-1" date="1768996800">- ostree needs to have /boot be bindmounted into sysroot (k.koukiou)
  Resolves: RHEL-66155
- modules: rpm_ostree: allow /boot/efi mount point in bootc installation
  (k.koukiou)
  Resolves: RHEL-141155</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.42-1" date="1768996801">- payloads: flatpak: fix SSL error detection on older Python versions
  (bciconel)
  Related: RHEL-141069
  Resolves: RHEL-142694</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.43-1" date="1769601600">- installation: run subscription tasks after network configuration (bciconel)
  Resolves: RHEL-135111
- subscription: ensure /var/lib/insights exists before running insights-client
  (bciconel)
  Resolves: RHEL-135111
- spec: Require zram-generator-defaults for RHEL-10 (k.koukiou)
  Resolves: RHEL-117685
- Only show compatible translations in text mode (mkolman)
  Resolves: RHEL-16168</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.44-1" date="1770724800">- storage: stop creating /etc/mtab symlink during installation (k.koukiou)
  Related: RHEL-135116
- rescue: Add warning for immutable systems (k.koukiou)
  Related: RHEL-135116
- rescue: detect OSTree deployments in rescue mode and show deployment path
  (k.koukiou)
  Resolves: RHEL-135116
- pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
  (k.koukiou)
  Related: RHEL-135116
- network: List all network interfaces IP for RDP session (ppolawsk)
  Resolves: RHEL-74268</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.45-1" date="1771243200">- Fix user input in driver disk menu is not displayed (adamkankovsky)
  Resolves: RHEL-58828
- flatpak: tests: fix unreachable code (fsouza.bruno)
  Related: RHEL-143566
- flatpak: Only override remote URLs when subscription module is available
  (bciconel)
  Related: RHEL-143566
- flatpak: Make installation failures non-blocking (bciconel)
  Resolves: RHEL-143566
- Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou)
  Resolves: RHEL-144456</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.46-1" date="1772452800">- pyanaconda: storage: platform: Raise /boot to 2 GiB (neal)
  Resolves: RHEL-151547</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 40.22.3.46-1.rocky.0.6" date="1772539200">- Add Rocky Linux specific changes</changelog>
</package>
<package pkgid="4a0ed17e5344e7112deb3b6c220aa5c766c443978e06eedc6c798d62dd81d58c" name="anaconda-tui" arch="x86_64">
  <version epoch="0" ver="40.22.3.46" rel="1.el10.rocky.0.6"/>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.38-1" date="1764590400">- bootloader: efi: utilize grub2-common script for handling config file
  generation (k.koukiou)
  Resolves: RHEL-58830</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.39-1" date="1764936000">- Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection
  (k.koukiou)
  Related: RHEL-58215
- bootc: Collect kernel arguments before installation to pass to bootc
  (k.koukiou)
  Related: RHEL-58215
- bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou)
  Related: RHEL-58215
- pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou)
  Related: RHEL-58215
- Add bootc installation method (ppolawsk)
  Resolves: RHEL-58215
- Include bootc command in expected pykickstart commands (ppolawsk)
  Related: RHEL-58215</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.40-1" date="1768305600">- rhsm: add --flatpak-registry-url support (bciconel)
  Resolves: RHEL-132652
- flatpak: handle self-signed certificate errors in registry sources (bciconel)
  Resolves: RHEL-132652
- flatpak: add utility to check for self-signed certificate errors (bciconel)
  Resolves: RHEL-132652
- Fix permissions of the ssh config created by Anaconda (ppolawsk)
  Resolves: RHEL-99673
- Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman)
  Resolves: RHEL-112702
  Related: RHEL-132666</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.41-1" date="1768996800">- ostree needs to have /boot be bindmounted into sysroot (k.koukiou)
  Resolves: RHEL-66155
- modules: rpm_ostree: allow /boot/efi mount point in bootc installation
  (k.koukiou)
  Resolves: RHEL-141155</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.42-1" date="1768996801">- payloads: flatpak: fix SSL error detection on older Python versions
  (bciconel)
  Related: RHEL-141069
  Resolves: RHEL-142694</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.43-1" date="1769601600">- installation: run subscription tasks after network configuration (bciconel)
  Resolves: RHEL-135111
- subscription: ensure /var/lib/insights exists before running insights-client
  (bciconel)
  Resolves: RHEL-135111
- spec: Require zram-generator-defaults for RHEL-10 (k.koukiou)
  Resolves: RHEL-117685
- Only show compatible translations in text mode (mkolman)
  Resolves: RHEL-16168</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.44-1" date="1770724800">- storage: stop creating /etc/mtab symlink during installation (k.koukiou)
  Related: RHEL-135116
- rescue: Add warning for immutable systems (k.koukiou)
  Related: RHEL-135116
- rescue: detect OSTree deployments in rescue mode and show deployment path
  (k.koukiou)
  Resolves: RHEL-135116
- pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
  (k.koukiou)
  Related: RHEL-135116
- network: List all network interfaces IP for RDP session (ppolawsk)
  Resolves: RHEL-74268</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.45-1" date="1771243200">- Fix user input in driver disk menu is not displayed (adamkankovsky)
  Resolves: RHEL-58828
- flatpak: tests: fix unreachable code (fsouza.bruno)
  Related: RHEL-143566
- flatpak: Only override remote URLs when subscription module is available
  (bciconel)
  Related: RHEL-143566
- flatpak: Make installation failures non-blocking (bciconel)
  Resolves: RHEL-143566
- Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou)
  Resolves: RHEL-144456</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.46-1" date="1772452800">- pyanaconda: storage: platform: Raise /boot to 2 GiB (neal)
  Resolves: RHEL-151547</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 40.22.3.46-1.rocky.0.6" date="1772539200">- Add Rocky Linux specific changes</changelog>
</package>
<package pkgid="3699f3ed1da4daaef3e2c5eb6e295c96898c6c2aea4dd4aaa998667330502786" name="anaconda-widgets" arch="x86_64">
  <version epoch="0" ver="40.22.3.46" rel="1.el10.rocky.0.6"/>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.38-1" date="1764590400">- bootloader: efi: utilize grub2-common script for handling config file
  generation (k.koukiou)
  Resolves: RHEL-58830</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.39-1" date="1764936000">- Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection
  (k.koukiou)
  Related: RHEL-58215
- bootc: Collect kernel arguments before installation to pass to bootc
  (k.koukiou)
  Related: RHEL-58215
- bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou)
  Related: RHEL-58215
- pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou)
  Related: RHEL-58215
- Add bootc installation method (ppolawsk)
  Resolves: RHEL-58215
- Include bootc command in expected pykickstart commands (ppolawsk)
  Related: RHEL-58215</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.40-1" date="1768305600">- rhsm: add --flatpak-registry-url support (bciconel)
  Resolves: RHEL-132652
- flatpak: handle self-signed certificate errors in registry sources (bciconel)
  Resolves: RHEL-132652
- flatpak: add utility to check for self-signed certificate errors (bciconel)
  Resolves: RHEL-132652
- Fix permissions of the ssh config created by Anaconda (ppolawsk)
  Resolves: RHEL-99673
- Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman)
  Resolves: RHEL-112702
  Related: RHEL-132666</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.41-1" date="1768996800">- ostree needs to have /boot be bindmounted into sysroot (k.koukiou)
  Resolves: RHEL-66155
- modules: rpm_ostree: allow /boot/efi mount point in bootc installation
  (k.koukiou)
  Resolves: RHEL-141155</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.42-1" date="1768996801">- payloads: flatpak: fix SSL error detection on older Python versions
  (bciconel)
  Related: RHEL-141069
  Resolves: RHEL-142694</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.43-1" date="1769601600">- installation: run subscription tasks after network configuration (bciconel)
  Resolves: RHEL-135111
- subscription: ensure /var/lib/insights exists before running insights-client
  (bciconel)
  Resolves: RHEL-135111
- spec: Require zram-generator-defaults for RHEL-10 (k.koukiou)
  Resolves: RHEL-117685
- Only show compatible translations in text mode (mkolman)
  Resolves: RHEL-16168</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.44-1" date="1770724800">- storage: stop creating /etc/mtab symlink during installation (k.koukiou)
  Related: RHEL-135116
- rescue: Add warning for immutable systems (k.koukiou)
  Related: RHEL-135116
- rescue: detect OSTree deployments in rescue mode and show deployment path
  (k.koukiou)
  Resolves: RHEL-135116
- pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
  (k.koukiou)
  Related: RHEL-135116
- network: List all network interfaces IP for RDP session (ppolawsk)
  Resolves: RHEL-74268</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.45-1" date="1771243200">- Fix user input in driver disk menu is not displayed (adamkankovsky)
  Resolves: RHEL-58828
- flatpak: tests: fix unreachable code (fsouza.bruno)
  Related: RHEL-143566
- flatpak: Only override remote URLs when subscription module is available
  (bciconel)
  Related: RHEL-143566
- flatpak: Make installation failures non-blocking (bciconel)
  Resolves: RHEL-143566
- Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou)
  Resolves: RHEL-144456</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.46-1" date="1772452800">- pyanaconda: storage: platform: Raise /boot to 2 GiB (neal)
  Resolves: RHEL-151547</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 40.22.3.46-1.rocky.0.6" date="1772539200">- Add Rocky Linux specific changes</changelog>
</package>
<package pkgid="a070b0e900c9a93ec2d55f9ea2293dc7287af1e637cd4242ca73bd9c075b8f9b" name="anaconda-widgets-devel" arch="x86_64">
  <version epoch="0" ver="40.22.3.46" rel="1.el10.rocky.0.6"/>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.38-1" date="1764590400">- bootloader: efi: utilize grub2-common script for handling config file
  generation (k.koukiou)
  Resolves: RHEL-58830</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.39-1" date="1764936000">- Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection
  (k.koukiou)
  Related: RHEL-58215
- bootc: Collect kernel arguments before installation to pass to bootc
  (k.koukiou)
  Related: RHEL-58215
- bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou)
  Related: RHEL-58215
- pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou)
  Related: RHEL-58215
- Add bootc installation method (ppolawsk)
  Resolves: RHEL-58215
- Include bootc command in expected pykickstart commands (ppolawsk)
  Related: RHEL-58215</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.40-1" date="1768305600">- rhsm: add --flatpak-registry-url support (bciconel)
  Resolves: RHEL-132652
- flatpak: handle self-signed certificate errors in registry sources (bciconel)
  Resolves: RHEL-132652
- flatpak: add utility to check for self-signed certificate errors (bciconel)
  Resolves: RHEL-132652
- Fix permissions of the ssh config created by Anaconda (ppolawsk)
  Resolves: RHEL-99673
- Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman)
  Resolves: RHEL-112702
  Related: RHEL-132666</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.41-1" date="1768996800">- ostree needs to have /boot be bindmounted into sysroot (k.koukiou)
  Resolves: RHEL-66155
- modules: rpm_ostree: allow /boot/efi mount point in bootc installation
  (k.koukiou)
  Resolves: RHEL-141155</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.42-1" date="1768996801">- payloads: flatpak: fix SSL error detection on older Python versions
  (bciconel)
  Related: RHEL-141069
  Resolves: RHEL-142694</changelog>
  <changelog author="Bruno &lt;bciconel@redhat.com&gt; - 40.22.3.43-1" date="1769601600">- installation: run subscription tasks after network configuration (bciconel)
  Resolves: RHEL-135111
- subscription: ensure /var/lib/insights exists before running insights-client
  (bciconel)
  Resolves: RHEL-135111
- spec: Require zram-generator-defaults for RHEL-10 (k.koukiou)
  Resolves: RHEL-117685
- Only show compatible translations in text mode (mkolman)
  Resolves: RHEL-16168</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.44-1" date="1770724800">- storage: stop creating /etc/mtab symlink during installation (k.koukiou)
  Related: RHEL-135116
- rescue: Add warning for immutable systems (k.koukiou)
  Related: RHEL-135116
- rescue: detect OSTree deployments in rescue mode and show deployment path
  (k.koukiou)
  Resolves: RHEL-135116
- pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
  (k.koukiou)
  Related: RHEL-135116
- network: List all network interfaces IP for RDP session (ppolawsk)
  Resolves: RHEL-74268</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.45-1" date="1771243200">- Fix user input in driver disk menu is not displayed (adamkankovsky)
  Resolves: RHEL-58828
- flatpak: tests: fix unreachable code (fsouza.bruno)
  Related: RHEL-143566
- flatpak: Only override remote URLs when subscription module is available
  (bciconel)
  Related: RHEL-143566
- flatpak: Make installation failures non-blocking (bciconel)
  Resolves: RHEL-143566
- Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou)
  Resolves: RHEL-144456</changelog>
  <changelog author="Katerina Koukiou &lt;k.koukiou@gmail.com&gt; - 40.22.3.46-1" date="1772452800">- pyanaconda: storage: platform: Raise /boot to 2 GiB (neal)
  Resolves: RHEL-151547</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 40.22.3.46-1.rocky.0.6" date="1772539200">- Add Rocky Linux specific changes</changelog>
</package>
<package pkgid="53385d42740c16320ebee4eef91b8ddb863c4162494857b8f4e98d4b71f9fa50" name="annobin-annocheck" arch="x86_64">
  <version epoch="0" ver="13.02" rel="2.el10"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.92-1" date="1739534400">- Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79473)</changelog>
  <changelog author="Tulio Magno Quites Machado Filho &lt;tuliom@redhat.com&gt; - 12.92-2" date="1741694400">- Spec file: Generate latest-annobin.tar.xz at prep phase (RHEL-83034)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.93-1" date="1742385600">- Annocheck: Fix test for GO revision.  (RHEL-56031)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.93-2" date="1746532800">- NVR bump in order to rebuild with LLVM 20.  (RHEL-82000)</changelog>
  <changelog author="Tulio Magno Quites Machado Filho &lt;tuliom@redhat.com&gt; - 12.93-3" date="1750680000">- Annocheck: Fix requirement for annobin notes from LLVM/Clang (RHEL-93213)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.98-1" date="1753444800">- Rebase to 12.98.  (RHEL-105572)
- Improve configure and meson files for consistent builds.
- Annocheck: Delete the temporary debug info directory after the tests have finished.
- Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
- Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
- Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.99-1" date="1754481600">- Annocheck: Improve detection of glibc static maths libraries.  (RHEL-107470)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 13.01-1" date="1761566400">- Annocheck: Change FAIL for binaries built by a cross compiler to a MAYBE.  (RHEL-123671)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 13.02-1" date="1762257600">- Annocheck: Update heuristic to detect gcc libraries.  (RHEL-124816)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 13.02-2" date="1768305600">- Rebuild against LLVM 21.  (RHEL-108331)</changelog>
</package>
<package pkgid="f52769a377b037899cc4878f2a85942aab2b650e85888a793d437e9b9574b16f" name="annobin-docs" arch="noarch">
  <version epoch="0" ver="13.02" rel="2.el10"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.92-1" date="1739534400">- Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79473)</changelog>
  <changelog author="Tulio Magno Quites Machado Filho &lt;tuliom@redhat.com&gt; - 12.92-2" date="1741694400">- Spec file: Generate latest-annobin.tar.xz at prep phase (RHEL-83034)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.93-1" date="1742385600">- Annocheck: Fix test for GO revision.  (RHEL-56031)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.93-2" date="1746532800">- NVR bump in order to rebuild with LLVM 20.  (RHEL-82000)</changelog>
  <changelog author="Tulio Magno Quites Machado Filho &lt;tuliom@redhat.com&gt; - 12.93-3" date="1750680000">- Annocheck: Fix requirement for annobin notes from LLVM/Clang (RHEL-93213)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.98-1" date="1753444800">- Rebase to 12.98.  (RHEL-105572)
- Improve configure and meson files for consistent builds.
- Annocheck: Delete the temporary debug info directory after the tests have finished.
- Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
- Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
- Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.99-1" date="1754481600">- Annocheck: Improve detection of glibc static maths libraries.  (RHEL-107470)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 13.01-1" date="1761566400">- Annocheck: Change FAIL for binaries built by a cross compiler to a MAYBE.  (RHEL-123671)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 13.02-1" date="1762257600">- Annocheck: Update heuristic to detect gcc libraries.  (RHEL-124816)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 13.02-2" date="1768305600">- Rebuild against LLVM 21.  (RHEL-108331)</changelog>
</package>
<package pkgid="bdf9a096fd37c358747e1fdb93d79083f823824705ddd23baafc0fcdffac07ee" name="annobin-libannocheck" arch="x86_64">
  <version epoch="0" ver="13.02" rel="2.el10"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.92-1" date="1739534400">- Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79473)</changelog>
  <changelog author="Tulio Magno Quites Machado Filho &lt;tuliom@redhat.com&gt; - 12.92-2" date="1741694400">- Spec file: Generate latest-annobin.tar.xz at prep phase (RHEL-83034)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.93-1" date="1742385600">- Annocheck: Fix test for GO revision.  (RHEL-56031)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.93-2" date="1746532800">- NVR bump in order to rebuild with LLVM 20.  (RHEL-82000)</changelog>
  <changelog author="Tulio Magno Quites Machado Filho &lt;tuliom@redhat.com&gt; - 12.93-3" date="1750680000">- Annocheck: Fix requirement for annobin notes from LLVM/Clang (RHEL-93213)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.98-1" date="1753444800">- Rebase to 12.98.  (RHEL-105572)
- Improve configure and meson files for consistent builds.
- Annocheck: Delete the temporary debug info directory after the tests have finished.
- Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
- Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
- Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.99-1" date="1754481600">- Annocheck: Improve detection of glibc static maths libraries.  (RHEL-107470)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 13.01-1" date="1761566400">- Annocheck: Change FAIL for binaries built by a cross compiler to a MAYBE.  (RHEL-123671)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 13.02-1" date="1762257600">- Annocheck: Update heuristic to detect gcc libraries.  (RHEL-124816)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 13.02-2" date="1768305600">- Rebuild against LLVM 21.  (RHEL-108331)</changelog>
</package>
<package pkgid="f4d801c4581842d444849f001bf651df1dfa5ff29f89f12cc40e2a5823dbdaca" name="annobin-plugin-clang" arch="x86_64">
  <version epoch="0" ver="13.02" rel="2.el10"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.92-1" date="1739534400">- Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79473)</changelog>
  <changelog author="Tulio Magno Quites Machado Filho &lt;tuliom@redhat.com&gt; - 12.92-2" date="1741694400">- Spec file: Generate latest-annobin.tar.xz at prep phase (RHEL-83034)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.93-1" date="1742385600">- Annocheck: Fix test for GO revision.  (RHEL-56031)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.93-2" date="1746532800">- NVR bump in order to rebuild with LLVM 20.  (RHEL-82000)</changelog>
  <changelog author="Tulio Magno Quites Machado Filho &lt;tuliom@redhat.com&gt; - 12.93-3" date="1750680000">- Annocheck: Fix requirement for annobin notes from LLVM/Clang (RHEL-93213)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.98-1" date="1753444800">- Rebase to 12.98.  (RHEL-105572)
- Improve configure and meson files for consistent builds.
- Annocheck: Delete the temporary debug info directory after the tests have finished.
- Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
- Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
- Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.99-1" date="1754481600">- Annocheck: Improve detection of glibc static maths libraries.  (RHEL-107470)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 13.01-1" date="1761566400">- Annocheck: Change FAIL for binaries built by a cross compiler to a MAYBE.  (RHEL-123671)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 13.02-1" date="1762257600">- Annocheck: Update heuristic to detect gcc libraries.  (RHEL-124816)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 13.02-2" date="1768305600">- Rebuild against LLVM 21.  (RHEL-108331)</changelog>
</package>
<package pkgid="71cc5b8ee024dd6979a7116723015bfeabbb1c8e4c7b42d88b96f1a6fb2fa7c2" name="annobin-plugin-gcc" arch="x86_64">
  <version epoch="0" ver="13.02" rel="2.el10"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.92-1" date="1739534400">- Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79473)</changelog>
  <changelog author="Tulio Magno Quites Machado Filho &lt;tuliom@redhat.com&gt; - 12.92-2" date="1741694400">- Spec file: Generate latest-annobin.tar.xz at prep phase (RHEL-83034)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.93-1" date="1742385600">- Annocheck: Fix test for GO revision.  (RHEL-56031)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.93-2" date="1746532800">- NVR bump in order to rebuild with LLVM 20.  (RHEL-82000)</changelog>
  <changelog author="Tulio Magno Quites Machado Filho &lt;tuliom@redhat.com&gt; - 12.93-3" date="1750680000">- Annocheck: Fix requirement for annobin notes from LLVM/Clang (RHEL-93213)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.98-1" date="1753444800">- Rebase to 12.98.  (RHEL-105572)
- Improve configure and meson files for consistent builds.
- Annocheck: Delete the temporary debug info directory after the tests have finished.
- Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
- Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
- Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.99-1" date="1754481600">- Annocheck: Improve detection of glibc static maths libraries.  (RHEL-107470)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 13.01-1" date="1761566400">- Annocheck: Change FAIL for binaries built by a cross compiler to a MAYBE.  (RHEL-123671)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 13.02-1" date="1762257600">- Annocheck: Update heuristic to detect gcc libraries.  (RHEL-124816)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 13.02-2" date="1768305600">- Rebuild against LLVM 21.  (RHEL-108331)</changelog>
</package>
<package pkgid="d7b6e63a680e23d416ae7071018ed7e2b3848fe4880164d44c8488757b7c13dc" name="annobin-plugin-llvm" arch="x86_64">
  <version epoch="0" ver="13.02" rel="2.el10"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.92-1" date="1739534400">- Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79473)</changelog>
  <changelog author="Tulio Magno Quites Machado Filho &lt;tuliom@redhat.com&gt; - 12.92-2" date="1741694400">- Spec file: Generate latest-annobin.tar.xz at prep phase (RHEL-83034)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.93-1" date="1742385600">- Annocheck: Fix test for GO revision.  (RHEL-56031)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.93-2" date="1746532800">- NVR bump in order to rebuild with LLVM 20.  (RHEL-82000)</changelog>
  <changelog author="Tulio Magno Quites Machado Filho &lt;tuliom@redhat.com&gt; - 12.93-3" date="1750680000">- Annocheck: Fix requirement for annobin notes from LLVM/Clang (RHEL-93213)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.98-1" date="1753444800">- Rebase to 12.98.  (RHEL-105572)
- Improve configure and meson files for consistent builds.
- Annocheck: Delete the temporary debug info directory after the tests have finished.
- Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
- Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
- Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.99-1" date="1754481600">- Annocheck: Improve detection of glibc static maths libraries.  (RHEL-107470)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 13.01-1" date="1761566400">- Annocheck: Change FAIL for binaries built by a cross compiler to a MAYBE.  (RHEL-123671)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 13.02-1" date="1762257600">- Annocheck: Update heuristic to detect gcc libraries.  (RHEL-124816)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 13.02-2" date="1768305600">- Rebuild against LLVM 21.  (RHEL-108331)</changelog>
</package>
<package pkgid="cac4e4d2dc37c6b9e9c0a664b0af65e9faed669de4f10ecedb9c2fd17de33fd5" name="ansible-collection-microsoft-sql" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="1.el10"/>
  <changelog author="Sergei Petrosian &lt;spetrosi@redhat.com&gt; - 2.2.3-2" date="1709035200">- Revert ExcludeArch: i686 due to TFT-2460
  Resolves: RHEL-16342</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sergei Petrosian &lt;spetrosi@redhat.com&gt; - 2.3.1-1" date="1723723200">- Add new version to RHEL 10
  Resolves: RHEL-34575</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Sergei Petrosian &lt;spetrosi@redhat.com&gt; - 2.5.2-1" date="1732104000">- Use new adutil functionality to enable AES encryption
  Resolves: RHEL-68490
- Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools
  Resolves: RHEL-68468
- Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula
  Resolves: RHEL-69315</changelog>
  <changelog author="Sergei Petrosian &lt;spetrosi@redhat.com&gt; - 2.6.1-1" date="1751371200">- Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
  Resolves: RHEL-101355
- Add secondary_role_allow_connections and mssql_ha_read_only_routing_list
  Resolves: RHEL-101356</changelog>
  <changelog author="Sergei Petrosian &lt;spetrosi@redhat.com&gt; - 2.6.2-1" date="1751630400">- Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
  Resolves: RHEL-101355</changelog>
  <changelog author="Sergei Petrosian &lt;spetrosi@redhat.com&gt; - 2.6.3-1" date="1753704000">- refactor: support ansible 2.19
  Resolves: RHEL-106152</changelog>
  <changelog author="Sergei Petrosian &lt;spetrosi@redhat.com&gt; - 2.6.4-1" date="1755086400">- test: use post quantum crypto for certs where available (#368)
- fix: Fix templates/configure_ag.j2 for Ansible 2.19
  Resolves: RHEL-106152</changelog>
  <changelog author="Sergei Petrosian &lt;spetrosi@redhat.com&gt; - 2.6.6-1" date="1770379200">- provide ad_integration_sssd_settings to set proper krb5_canonicalize
  Resolves: RHEL-147423</changelog>
</package>
<package pkgid="524cd4949adb223f69358b4b1d493d366ccbdc142f41197e1136bc4a68637a84" name="ansible-collection-redhat-hpc" arch="noarch">
  <version epoch="0" ver="0.3.1" rel="1.el10"/>
  <changelog author="Sergei Petrosian &lt;spetrosi@redhat.com&gt; - 0.3.1-1" date="1770120000">- Initial release based on the ansible-collection-microsoft-sql spec
- Resolves: RHEL-134968 : [RFE] Add a separate package for HPC ansible collection to Supplementary</changelog>
</package>
<package pkgid="003dd882cbfe06489e0ef5e76dd49ed51ec9bab42dff4a02f7d04baa1ce8ff2b" name="ansible-collection-redhat-leapp" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="1.el10_2"/>
  <changelog author="Sergei Petrosian &lt;spetrosi@redhat.com&gt; - 0.0.1-1" date="1764936000">- Initialize the package
- Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10</changelog>
  <changelog author="Sergei Petrosian &lt;spetrosi@redhat.com&gt; - 0.0.1-2" date="1764936001">- Bump version to get automation to do builds and create an erratum
- Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10</changelog>
  <changelog author="Sergei Petrosian &lt;spetrosi@redhat.com&gt; - 1.7.0-1" date="1770984000">- Replace upstream value of leapp_system_roles_collection with downstream redhat.rhel_system_roles.
- Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10</changelog>
  <changelog author="Sergei Petrosian &lt;spetrosi@redhat.com&gt; - 1.7.1-1" date="1771848000">- Update to latest upstream version via commit hash
- Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10</changelog>
  <changelog author="Sergei Petrosian &lt;spetrosi@redhat.com&gt; - 1.7.1-2" date="1771934400">- Fix spec file to require rhel-system-roles package
- Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10</changelog>
  <changelog author="Sergei Petrosian &lt;spetrosi@redhat.com&gt; - 1.7.4-1" date="1773057600">- Update to latest upstream version 1.7.4
- Resolves: RHEL-153382 : Fix the role failing on steps that copy logs to the controller EL10</changelog>
</package>
<package pkgid="26f76806ad4d668aa2cc32504fac73bce81b0d78b2d3c8c227b52186feac290b" name="ansible-core" arch="noarch">
  <version epoch="1" ver="2.16.16" rel="2.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.16.3-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Brian Stinson &lt;bstinson@redhat.com&gt; - 1:2.16.3-3" date="1721908800">- Bump the Epoch to preserve upgrade path with previous versions of RHEL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.16.3-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.13-1" date="1732622400">- ansible-core 2.16.13 release (RHEL-69036)
- Add back ansible-test subpackage and drop doc subpackage
- Fix CVE-2024-8775 (Exposure of Sensitive Information in Ansible
  Vault Files Due to Improper Logging) (RHEL-59076)
- Fix CVE-2024-9902 (Ansible-core user may read/write unauthorized
  content) (RHEL-69034)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.14-1" date="1733140800">- ansible-core 2.16.14 release (RHEL-69763)
- Fix CVE-2024-11079 (Unsafe Tagging Bypass via hostvars Object in
  Ansible-Core) (RHEL-66996)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.14-2" date="1761566400">- Add telemetry for RHEL (RHEL-123004)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.15-1" date="1765886400">- ansible-core 2.16.15 release (RHEL-136245)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.16-1" date="1770120000">- ansible-core 2.16.16 release (RHEL-145990)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.16-2" date="1770724800">- Fix selinux AVC denial when telemetry is enabled (RHEL-148292)</changelog>
</package>
<package pkgid="3abd7abf089f8abdafb3a185d24117f120ad3b02cdf5797154e3679262b5d9b0" name="ansible-core" arch="noarch">
  <version epoch="1" ver="2.16.16" rel="2.el10_2.1"/>
  <changelog author="Brian Stinson &lt;bstinson@redhat.com&gt; - 1:2.16.3-3" date="1721908800">- Bump the Epoch to preserve upgrade path with previous versions of RHEL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.16.3-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.13-1" date="1732622400">- ansible-core 2.16.13 release (RHEL-69036)
- Add back ansible-test subpackage and drop doc subpackage
- Fix CVE-2024-8775 (Exposure of Sensitive Information in Ansible
  Vault Files Due to Improper Logging) (RHEL-59076)
- Fix CVE-2024-9902 (Ansible-core user may read/write unauthorized
  content) (RHEL-69034)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.14-1" date="1733140800">- ansible-core 2.16.14 release (RHEL-69763)
- Fix CVE-2024-11079 (Unsafe Tagging Bypass via hostvars Object in
  Ansible-Core) (RHEL-66996)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.14-2" date="1761566400">- Add telemetry for RHEL (RHEL-123004)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.15-1" date="1765886400">- ansible-core 2.16.15 release (RHEL-136245)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.16-1" date="1770120000">- ansible-core 2.16.16 release (RHEL-145990)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.16-2" date="1770724800">- Fix selinux AVC denial when telemetry is enabled (RHEL-148292)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.16.16-2.1" date="1783771200">- Fix CVE-2026-11332 (ansible-galaxy role installs could allow
  arbitrary git configuration injection via malformed role
  requirements) (RHEL-194128)</changelog>
</package>
<package pkgid="bbc00e753a0a748e51588955f0dd6c9794fbad1fa578b4ada1ae80f3b4f78ac1" name="ansible-freeipa" arch="noarch">
  <version epoch="0" ver="1.16.0" rel="1.el10"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 1.14.1-1" date="1732708800">- Update to version 1.14.1
  https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
  Resolves: RHEL-67567
- Fix requirements for ansible-core
  Resolves: RHEL-68648</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 1.14.2-1" date="1734091200">- Update to version 1.14.2
  https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
  Resolves: RHEL-67567
- ipareplica: Pass ipareplica_ip_addresses to ipaclient
  Resolves: RHEL-40228
- ipagroup: Correctly handle externalmember in member actions
  Resolves: RHEL-70023
- ipasudorule: Evaluate all members related to hosts and users
  Resolves: RHEL-68441
- ipacert: Correctly handle removFromCRL revocation
  Resolves: RHEL-70021
- Collection: No more role module duplication
  Resolves: RHEL-71124</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 1.14.2-2" date="1734091201">- Fix version of obsoletes for collection and tests sub package
  Resolves: RHEL-67567</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 1.14.3-1" date="1738584000">- Update to version 1.14.3
  Resolves: RHEL-67567
- Fix management of AD objects for ipagroup
  Resolves: RHEL-70023</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 1.14.4-1" date="1738670400">- Update to version 1.14.4
  Resolves: RHEL-67567
- Fix management of AD objects for ipagroup
  Resolves: RHEL-70023</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 1.14.5-1" date="1739275200">- Update to version 1.14.5
  Resolves: RHEL-67567
- ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
  Resolves: RHEL-78229</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 1.14.6-1" date="1746532800">- Update to version 1.14.6
- Fix CA certificates iteration in ipaclient role
  Resolves: RHEL-88212</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 1.15.0-1" date="1753444800">- Update to version 1.15.0
  Resolves: RHEL-104653
- ipaclient: Fix AttributeError by defaulting dns_over_tls to False
  Resolves: RHEL-92890
- Provide compatibility for AAH naming
  Resolves: RHEL-89438
- Ensure ipaidrange required parameters are correct on recent versions of IPA
  Resolves: RHEL-95104
- Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles
  Resolves: RHEL-78635</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 1.15.1-1" date="1754049600">- Update to version 1.15.1
  Resolves: RHEL-104653
- ipaclient: client_dns has new statestore arg with IPA change e6445b8
  Resolves: RHEL-106560</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 1.16.0-1" date="1768219200">- Update to version 1.16.0
  https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0
  Resolves: RHEL-139147
- Add suppport for passkey management
  Resolves: RHEL-139258
- Add suppport for sysaccount management
  Resolves: RHEL-140600
- ipadnsrecord: Allow to set any IP address if create_reverse is false
  Resolves: RHEL-140606</changelog>
</package>
<package pkgid="b3768ad695c0da2f0804be23dd1e137f1a17d05479bd3a65aabe48e4f0bba03e" name="ansible-pcp" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="1.el10"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; 2.3.0-1" date="1701172800">- Latest upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; 2.3.0-4" date="1718798400">- Rebuild for c10s.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; 2.4.0-1" date="1730980800">- Latest upstream release</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 2.4.1-1" date="1732104000">- Latest upstream release to resolve build issues</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 2.4.2-1" date="1755000000">- Latest upstream release</changelog>
</package>
<package pkgid="265d455175548fef66eb08dc4b65d6d12371d4d7a46574a7ef958456fec070ff" name="ansible-test" arch="noarch">
  <version epoch="1" ver="2.16.16" rel="2.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.16.3-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Brian Stinson &lt;bstinson@redhat.com&gt; - 1:2.16.3-3" date="1721908800">- Bump the Epoch to preserve upgrade path with previous versions of RHEL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.16.3-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.13-1" date="1732622400">- ansible-core 2.16.13 release (RHEL-69036)
- Add back ansible-test subpackage and drop doc subpackage
- Fix CVE-2024-8775 (Exposure of Sensitive Information in Ansible
  Vault Files Due to Improper Logging) (RHEL-59076)
- Fix CVE-2024-9902 (Ansible-core user may read/write unauthorized
  content) (RHEL-69034)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.14-1" date="1733140800">- ansible-core 2.16.14 release (RHEL-69763)
- Fix CVE-2024-11079 (Unsafe Tagging Bypass via hostvars Object in
  Ansible-Core) (RHEL-66996)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.14-2" date="1761566400">- Add telemetry for RHEL (RHEL-123004)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.15-1" date="1765886400">- ansible-core 2.16.15 release (RHEL-136245)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.16-1" date="1770120000">- ansible-core 2.16.16 release (RHEL-145990)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.16-2" date="1770724800">- Fix selinux AVC denial when telemetry is enabled (RHEL-148292)</changelog>
</package>
<package pkgid="b0e71243f4b1efd9acd76fa333732a4b1a54599d7b25696e42fc7f97f44dae80" name="ansible-test" arch="noarch">
  <version epoch="1" ver="2.16.16" rel="2.el10_2.1"/>
  <changelog author="Brian Stinson &lt;bstinson@redhat.com&gt; - 1:2.16.3-3" date="1721908800">- Bump the Epoch to preserve upgrade path with previous versions of RHEL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.16.3-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.13-1" date="1732622400">- ansible-core 2.16.13 release (RHEL-69036)
- Add back ansible-test subpackage and drop doc subpackage
- Fix CVE-2024-8775 (Exposure of Sensitive Information in Ansible
  Vault Files Due to Improper Logging) (RHEL-59076)
- Fix CVE-2024-9902 (Ansible-core user may read/write unauthorized
  content) (RHEL-69034)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.14-1" date="1733140800">- ansible-core 2.16.14 release (RHEL-69763)
- Fix CVE-2024-11079 (Unsafe Tagging Bypass via hostvars Object in
  Ansible-Core) (RHEL-66996)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.14-2" date="1761566400">- Add telemetry for RHEL (RHEL-123004)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.15-1" date="1765886400">- ansible-core 2.16.15 release (RHEL-136245)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.16-1" date="1770120000">- ansible-core 2.16.16 release (RHEL-145990)</changelog>
  <changelog author="Dimitri Savineau &lt;dsavinea@redhat.com&gt; - 1:2.16.16-2" date="1770724800">- Fix selinux AVC denial when telemetry is enabled (RHEL-148292)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.16.16-2.1" date="1783771200">- Fix CVE-2026-11332 (ansible-galaxy role installs could allow
  arbitrary git configuration injection via malformed role
  requirements) (RHEL-194128)</changelog>
</package>
<package pkgid="3dd7739c9154815ed5997005f7045356c40485c67348cf8b2de8a67ea8527945" name="ant" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="30f522dec6ee1bc5c7bf1e912d9ce4f4f4807ce889a6392ecaabacee6ed31409" name="ant-antlr" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="6f9140171639ea22e3f91ed0c614c163cb4afa63793c8c1033d03096a0029677" name="ant-apache-bcel" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="5d31189239fdfdf497e4a4620497eafc3368b46b355999ece4284e4ceff822bb" name="ant-apache-bsf" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="cc071ec78fbef524f30b140febc7d0a5221308fcb487b143c8a09ec9691019c6" name="ant-apache-oro" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="a01308ddc8649a4885448e5e1e29571b570d2a1b3d95a1c232db5f48e926d5b3" name="ant-apache-regexp" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="7c56e2dffcc31aacc437e4422ade532479e465653084c9af00e983fd9486134f" name="ant-apache-resolver" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="73f0ed6fdf717192df17d2eec3743733fdc5dbbeb26229611632305bfde709b8" name="ant-apache-xalan2" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="766d5adcd6ad431161e255d3dcb5102b926a1bc0a9e5eab228ac3befc93cc9c4" name="ant-commons-logging" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="828c22291f5fa777659bc21f4fc92dfd156745dfb001aa40a53c9cfca8858ff6" name="ant-commons-net" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="1495f7b93274a1a27d6c453c7c1b2c1edd31cc383504d8df73b9dee5d4c8c686" name="ant-imageio" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="0f41372924648016881bd5b71a5b602bc103f497d726e1f66fe903d2d94dc9fc" name="ant-jakartamail" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="b3a31e89a3d794232ca05085c4d65775a9b9290187a922219d5e567d9bdadac6" name="ant-javadoc" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="29630650476f72d548045dbc8942e0603487894b0a375ae62a51f01f7172adcc" name="ant-jdepend" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="ab23c5590ed3b66e45f6cb4e63edbba2e9c770f34319afb7f163241bfbee339c" name="ant-jmf" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="eccd50273efd031370aeb541e6ee035fa5527c81dd58728d6392b494b39f8e8d" name="ant-jsch" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="c4e36ab333e1284d2cc4dd4f32351edfbc98ccd2b5f7aed2a30b537ee3c1aa96" name="ant-junit" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="e2c44427389101569ce8e0930bd744680dfe79d1a15cf22926bbe3b1121108d3" name="ant-junit5" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="c9a52dd158fee449b7a81e3254254ad659272545dbb014429450af00b4006e0e" name="ant-lib" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="7794604ce807078c39317d76f49da075cb6c7b49c83037e635f1b6ebad719130" name="ant-manual" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="81422b5b772458502d0b69888e3061ad75b0827384c88ebd50563612e9e1e29d" name="ant-openjdk21" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="4b94b48ce9b50755efb3cd3793c3c9183cbff010e03b693c6ae5a85b2ee77819" name="ant-swing" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="1420e6a2c73745d5337e70f9db876370f41926646fa702d75d7449d41d6a4f53" name="ant-testutil" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="08b6f8040440bbcdeb301cc244a3d7d5e8115a2cf70a5f17de5a16484bcb375a" name="ant-unbound" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="33bb9f95943cea1399d59fe6ee1bc322aec15af8db088ca964efc7141f7557bb" name="ant-xz" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-6" date="1707480000">- Fix source tarball URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-7" date="1707825600">- Drop patch removing tools.jar from test classpath</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-9" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52715</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.14-10" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.14-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-1" date="1734523200">- Update to upstream version 1.10.15</changelog>
</package>
<package pkgid="2b5e24a2550ac4f3fdeab5cc871608a168f8c75c24949e8f99e1bdd8aa96e555" name="anthy-unicode" arch="x86_64">
  <version epoch="0" ver="1.0.0.20240502" rel="12.el10"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.0.0.20240502-11" date="1723982400">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.0.20240502-12" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="fb4a67eabb4fd159c500ec0a3955dd8db3e60243fd1dcd0fbbcc4d0b893bdfdc" name="anthy-unicode-devel" arch="x86_64">
  <version epoch="0" ver="1.0.0.20240502" rel="12.el10"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.0.0.20240502-11" date="1723982400">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.0.20240502-12" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="6a0bef04a329855a22c72130d6f7d1b7f2940963fd37a3eb95de30f1c31980da" name="antlr-C++" arch="x86_64">
  <version epoch="0" ver="2.7.7" rel="79.el10"/>
  <changelog author="Peter Fordham &lt;peter.fordham@gmail.com&gt; - 2.7.7-71" date="1670328000">- Port configure script to C99.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.7-72" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.7-73" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.7-74" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.7-75" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.7-76" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.7-77" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.7.7-78" date="1722859200">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.7-79" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7d107d33ddee6de84391095ad3aa1e7f19dc8122ba59c463cc62137d1c767f8f" name="antlr-javadoc" arch="noarch">
  <version epoch="0" ver="2.7.7" rel="79.el10"/>
  <changelog author="Peter Fordham &lt;peter.fordham@gmail.com&gt; - 2.7.7-71" date="1670328000">- Port configure script to C99.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.7-72" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.7-73" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.7-74" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.7-75" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.7-76" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.7-77" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.7.7-78" date="1722859200">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.7-79" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="216295dc216ea15db3d4250bda7a047d0362b71fa360f27d2d50fddd67fe1426" name="antlr-manual" arch="noarch">
  <version epoch="0" ver="2.7.7" rel="79.el10"/>
  <changelog author="Peter Fordham &lt;peter.fordham@gmail.com&gt; - 2.7.7-71" date="1670328000">- Port configure script to C99.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.7-72" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.7-73" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.7-74" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.7-75" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.7-76" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.7-77" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.7.7-78" date="1722859200">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.7-79" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5d0a6f904dfaa6521ad381b2b2f9faa17203921bca1a4e787c0536cd33ea5b69" name="antlr-tool" arch="noarch">
  <version epoch="0" ver="2.7.7" rel="79.el10"/>
  <changelog author="Peter Fordham &lt;peter.fordham@gmail.com&gt; - 2.7.7-71" date="1670328000">- Port configure script to C99.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.7-72" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.7-73" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.7-74" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.7-75" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.7-76" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.7-77" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.7.7-78" date="1722859200">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.7-79" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="641b3486b2bd4012b4be90ba6495c518bff7b867fd22f108dbe4031e8246ffc4" name="aopalliance" arch="noarch">
  <version epoch="0" ver="1.0" rel="40.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-32" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-33" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.0-34" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.0-35" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-36" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-37" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:1.0-38" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:1.0-39" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:1.0-40" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a9d588c76719a5d927512abeada1ebb66b65fdfbb7022083edf7a0c6f574246e" name="aopalliance-javadoc" arch="noarch">
  <version epoch="0" ver="1.0" rel="40.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-32" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-33" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.0-34" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.0-35" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-36" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-37" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:1.0-38" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:1.0-39" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:1.0-40" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="625c3a7da2e85cfef4eec62c51b8506a10786f52fb08897c60194aad9f34e9cc" name="apache-commons-beanutils" arch="noarch">
  <version epoch="0" ver="1.9.4" rel="21.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-13" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-14" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-15" date="1701691200">- Port to apache-commons-parent 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-16" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-17" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.4-18" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.4-19" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.4-20" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-21" date="1749816000">- Fix improper access control vulnerability
- Resolves: CVE-2025-48734</changelog>
</package>
<package pkgid="8864c5e894de6b487aa996b643096a2579c8da231666a58f8a7f00ec992fbd49" name="apache-commons-beanutils-javadoc" arch="noarch">
  <version epoch="0" ver="1.9.4" rel="21.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-13" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-14" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-15" date="1701691200">- Port to apache-commons-parent 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-16" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-17" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.4-18" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.4-19" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.4-20" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-21" date="1749816000">- Fix improper access control vulnerability
- Resolves: CVE-2025-48734</changelog>
</package>
<package pkgid="7983737bbfae25d52c936fdd3ebc7d005bcb6ecb76a0c6cc8520687150e0eb1b" name="apache-commons-cli" arch="noarch">
  <version epoch="0" ver="1.9.0" rel="1.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.5.0-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.5.0-8" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.6.0-1" date="1701691200">- Update to upstream version 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.0-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.9.0-1" date="1753963200">- Update to upstream version 1.9.0</changelog>
</package>
<package pkgid="1b05b9811c42a9460ec9a261d2d28f508ce157fc86334ac2ab2cd4db981175cb" name="apache-commons-cli-javadoc" arch="noarch">
  <version epoch="0" ver="1.9.0" rel="1.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.5.0-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.5.0-8" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.6.0-1" date="1701691200">- Update to upstream version 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.0-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.9.0-1" date="1753963200">- Update to upstream version 1.9.0</changelog>
</package>
<package pkgid="3bb41838fd8a07e9d985b0c0b42820f25a62da813a6b6405f2307dbad7e854b3" name="apache-commons-codec" arch="noarch">
  <version epoch="0" ver="1.17.1" rel="1.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.15-10" date="1691668800">- Use implicit maven toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.16.0-1" date="1692273600">- Update to upstream version 1.16.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.16.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.16.0-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.0-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.0-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.16.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.16.0-7" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.16.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.17.1-1" date="1737028800">- Update to upstream version 1.17.1</changelog>
</package>
<package pkgid="fbfe82082de468d91fac5f1c2e41c260507601746d090fba104416affea86a2a" name="apache-commons-codec-javadoc" arch="noarch">
  <version epoch="0" ver="1.17.1" rel="1.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.15-10" date="1691668800">- Use implicit maven toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.16.0-1" date="1692273600">- Update to upstream version 1.16.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.16.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.16.0-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.0-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.0-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.16.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.16.0-7" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.16.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.17.1-1" date="1737028800">- Update to upstream version 1.17.1</changelog>
</package>
<package pkgid="f1c581efa46b5caed49bbfc604a70c1602223e4842c7e5fa7b046d24c668541f" name="apache-commons-collections" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="37.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-29" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-30" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-31" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-32" date="1701691200">- Port to apache-commons-parent 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-33" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-34" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.2-35" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.2-36" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-36" date="1722859200">- Port to OpenJDK 21
- Resolves: RHEL-52709</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.2-37" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="addf2e17cdfcbf1f0ba1827127cd334e988143f64753fcf509b19d63f22e3a08" name="apache-commons-collections-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="37.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-29" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-30" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-31" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-32" date="1701691200">- Port to apache-commons-parent 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-33" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-34" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.2-35" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.2-36" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-36" date="1722859200">- Port to OpenJDK 21
- Resolves: RHEL-52709</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.2-37" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="89a14aed39463f00d4da65372d5ce3ec35209f0f67d9dbbdd15734862a46bfc9" name="apache-commons-collections-testframework" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="37.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-29" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-30" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-31" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-32" date="1701691200">- Port to apache-commons-parent 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-33" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-34" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.2-35" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.2-36" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-36" date="1722859200">- Port to OpenJDK 21
- Resolves: RHEL-52709</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.2-37" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b29c33128d1f3bf02db3c72c92552d65bebc7057a179a1b72657f81e2090ecec" name="apache-commons-collections4" arch="noarch">
  <version epoch="0" ver="4.4" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4-11" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4-12" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4-13" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4-14" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0dbde2f5a64db8584fed44f194c32090f94f27f1fc33db661508f3898c818627" name="apache-commons-collections4-javadoc" arch="noarch">
  <version epoch="0" ver="4.4" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4-11" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4-12" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4-13" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4-14" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6861bb83f2fee57e98a10ab2c6f36b9116852ff52833779dad23da056962a4dd" name="apache-commons-compress" arch="noarch">
  <version epoch="0" ver="1.27.1" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.21-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.21-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.21-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.25.0-1" date="1702036800">- Update to upstream version 1.25.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.25.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.25.0-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.25.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.27.1-1" date="1736942400">- Update to upstream version 1.27.1</changelog>
</package>
<package pkgid="d4729c3df8e45353b1c6cf7d5f754ad8c04d7b1b704f144a6142b2b7c6022d77" name="apache-commons-compress-javadoc" arch="noarch">
  <version epoch="0" ver="1.27.1" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.21-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.21-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.21-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.25.0-1" date="1702036800">- Update to upstream version 1.25.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.25.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.25.0-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.25.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.27.1-1" date="1736942400">- Update to upstream version 1.27.1</changelog>
</package>
<package pkgid="456d8959a5fc8daf99fccccddc33786b86b350da560e0170cdba5b0f323ca16c" name="apache-commons-exec" arch="noarch">
  <version epoch="0" ver="1.3" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-25" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Mohamed El Morabity &lt;melmorabity@fedoraproject.org&gt; - 1.3-26" date="1681041600">- Fix RHBZ #2171437 (FTBFS)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-27" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-28" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-29" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-30" date="1706702400">- Port to apache-commons-parent 65</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-31" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.3-32" date="1723464000">- Rebuild without generated Requires</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b7c5188f085d1e53b2075a230b41f8802eb17bd0b6acbefb03a54021b4351aa8" name="apache-commons-exec-javadoc" arch="noarch">
  <version epoch="0" ver="1.3" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-25" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Mohamed El Morabity &lt;melmorabity@fedoraproject.org&gt; - 1.3-26" date="1681041600">- Fix RHBZ #2171437 (FTBFS)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-27" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-28" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-29" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-30" date="1706702400">- Port to apache-commons-parent 65</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-31" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.3-32" date="1723464000">- Rebuild without generated Requires</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7cd69a246f05332f26add7b744990f7ffb9ebc56b97ef1802698df394f7de6ec" name="apache-commons-io" arch="noarch">
  <version epoch="1" ver="2.16.1" rel="1.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:2.13.0-1" date="1691582400">- Update to upstream version 2.13.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.13.0-2" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.13.0-3" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.13.0-4" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.13.0-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.13.0-6" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.13.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.13.0-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.13.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.16.1-1" date="1737028800">- Update to upstream version 2.16.1</changelog>
</package>
<package pkgid="3f00e1bdd080b13609c440e3ff8da599554b4ef4bf514ae8769466a3857ccc33" name="apache-commons-io-javadoc" arch="noarch">
  <version epoch="1" ver="2.16.1" rel="1.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:2.13.0-1" date="1691582400">- Update to upstream version 2.13.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.13.0-2" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.13.0-3" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.13.0-4" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.13.0-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.13.0-6" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.13.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.13.0-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.13.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.16.1-1" date="1737028800">- Update to upstream version 2.16.1</changelog>
</package>
<package pkgid="81eafabcfaa056186602783590ecd6158025da4d8b2da1f02abb2d81c9140e4e" name="apache-commons-jxpath" arch="noarch">
  <version epoch="0" ver="1.3" rel="53.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-45" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-46" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-47" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-48" date="1701691200">- Port to apache-commons-parent 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-49" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-50" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-51" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-52" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-53" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fbc36bf0a50c99a1861f112679a3bbeee31c21485b00faafc3fa12c2c6468a9a" name="apache-commons-jxpath-javadoc" arch="noarch">
  <version epoch="0" ver="1.3" rel="53.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-45" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-46" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-47" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-48" date="1701691200">- Port to apache-commons-parent 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-49" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-50" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-51" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-52" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-53" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="54a6b4004979520135c8c053a93557265863e61a2bbbb6c89f91ebb73006762e" name="apache-commons-lang3" arch="noarch">
  <version epoch="0" ver="3.14.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-9" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.13.0-1" date="1691755200">- Update to upstream version 3.13.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.13.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.13.0-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.14.0-1" date="1702900800">- Update to upstream version 3.14.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.14.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.14.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.14.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.14.0-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.14.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="55f2cd84a1b197aac30423d64291d118345fecdbb6e04ee9e8191f7a59dd2e7d" name="apache-commons-lang3-javadoc" arch="noarch">
  <version epoch="0" ver="3.14.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-9" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.13.0-1" date="1691755200">- Update to upstream version 3.13.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.13.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.13.0-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.14.0-1" date="1702900800">- Update to upstream version 3.14.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.14.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.14.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.14.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.14.0-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.14.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="05262b7db77669000370811b079174ce72a82651902a5cd360563e6545abab64" name="apache-commons-logging" arch="noarch">
  <version epoch="0" ver="1.3.4" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-33" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1.2-34" date="1689768001">- Build with log4j support in non-bootstrap mode
- Convert the License tag to SPDX
- Update the project URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2-35" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.0-1" date="1701691200">- Update to upstream version 1.3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.4-1" date="1737028800">- Update to upstream version 1.3.4</changelog>
</package>
<package pkgid="db7db02bceb94dd1ad759d9838a265990dfcb66f1c3972703dc437c7e1c5cf8f" name="apache-commons-logging-javadoc" arch="noarch">
  <version epoch="0" ver="1.3.4" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-33" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1.2-34" date="1689768001">- Build with log4j support in non-bootstrap mode
- Convert the License tag to SPDX
- Update the project URL</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2-35" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.0-1" date="1701691200">- Update to upstream version 1.3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.4-1" date="1737028800">- Update to upstream version 1.3.4</changelog>
</package>
<package pkgid="d435be1ac73e35284d4b7112a3eeffb7be69fb2827f6ed6e70ae8b93a44a837c" name="apache-commons-net" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.0-2" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.0-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.9.0-1" date="1691755200">- Update to upstream version 3.9.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.10.0-1" date="1702900800">- Update to upstream version 3.10.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.10.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.10.0-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.10.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cb158eaa2408fa76ecbdd59aca94ca8844b7e939bbf30ff1d080442295fa998f" name="apache-commons-net-javadoc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.0-2" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.0-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.9.0-1" date="1691755200">- Update to upstream version 3.9.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.10.0-1" date="1702900800">- Update to upstream version 3.10.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.10.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.10.0-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.10.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a0ae7c20f8825d50a990d167530269043d9f7a3e789228fb0a39b3221108d934" name="apache-commons-parent" arch="noarch">
  <version epoch="0" ver="66" rel="4.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 61-1" date="1693396800">- Update to upstream version 61</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 61-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 65-1" date="1701691200">- Update to upstream version 65</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 65-2" date="1701691201">- Enable moditect-maven-plugin</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 65-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 65-4" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 66-1" date="1706875200">- Update to upstream version 66</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 66-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 66-3" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 66-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a817df856d7a7d0b92375715e2ace2f620b870ba4edb5c2c2c3a392b1cf1237c" name="apache-parent" arch="noarch">
  <version epoch="0" ver="33" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 27-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 30-1" date="1691755200">- Update to upstream version 30</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 30-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 31-1" date="1702036800">- Update to upstream version 31</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 31-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 31-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 31-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 31-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 31-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 33-1" date="1737028800">- Update to upstream version 33</changelog>
</package>
<package pkgid="f4065deb7dd3bee7593c4895e6bd1af6a0900a72c9ea78eb3b744cf9790b9f32" name="apache-resource-bundles" arch="noarch">
  <version epoch="1" ver="1.5" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 37-2" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 37-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.5-1" date="1691755200">- Update to upstream version 1.5</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.5-2" date="1692792000">- Port to maven-verifier 2.0.0~M1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.5-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.5-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.5-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.5-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.5-7" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.5-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="97cbd6f2a3b68363861c0926c1ad80de1c10db5e8180e7bc36a8a7c61380967e" name="apcu-panel" arch="noarch">
  <version epoch="0" ver="5.1.23" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.22-4" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 5.1.22-5" date="1681992000">- use SPDX license ID</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.22-6" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 5.1.22-6" date="1696334400">- rebuild for https://fedoraproject.org/wiki/Changes/php83
- build out of sources tree</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 5.1.23-1" date="1699876800">- update to 5.1.23</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.23-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.23-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.23-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.23-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="221425745a24cda615f2b259aec46df2802b068032124f9d5abb1d2da0cc3e19" name="apiguardian" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="13.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.1.2-6" date="1676462400">- Build with module-info</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.2-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.2-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.2-12" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.2-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a81d72aaaaf0117227d654ea6cb2463dc21156c272129eb6f1e633ffbb87132e" name="apiguardian-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="13.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.1.2-6" date="1676462400">- Build with module-info</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.2-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.2-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.2-12" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.2-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8a6cf63d3f97cc2686de7d819b4e315feba6330f5065fcd54d150a4f8ff6370f" name="appstream" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="5.el10"/>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.0.0~git20231102.d88ed03-1" date="1698926400">- Rebase to 1.0.0 git snapshot</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.0.0-1" date="1700222400">- Update to 1.0.0 final</changelog>
  <changelog author="Steve Cossette &lt;farchord@gmail.com&gt; - 1.0.1-1" date="1704283200">- Update to 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.0.2-1" date="1708862400">- Update to 1.0.2
- Clean up some pre-1.0 scriptlet cruft
- Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)</changelog>
  <changelog author="Alessandro Astone &lt;ales.astone@gmail.com&gt; - 1.0.2-2" date="1709985600">- Backport patch to fix installing swcatalog
- Resolves: RHEL-31497 (Backport latest build from Fedora 40)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.0.2-3" date="1718798400">- Resolves: RHEL-43437 Disable stemming support and remove build requirement "libstemmer-devel"</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bce024f6fdceb5ffa36ecf096b1f23b768a6bd5ce7004dd4d2b2f298642cb36b" name="appstream-compose" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="5.el10"/>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.0.0~git20231102.d88ed03-1" date="1698926400">- Rebase to 1.0.0 git snapshot</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.0.0-1" date="1700222400">- Update to 1.0.0 final</changelog>
  <changelog author="Steve Cossette &lt;farchord@gmail.com&gt; - 1.0.1-1" date="1704283200">- Update to 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.0.2-1" date="1708862400">- Update to 1.0.2
- Clean up some pre-1.0 scriptlet cruft
- Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)</changelog>
  <changelog author="Alessandro Astone &lt;ales.astone@gmail.com&gt; - 1.0.2-2" date="1709985600">- Backport patch to fix installing swcatalog
- Resolves: RHEL-31497 (Backport latest build from Fedora 40)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.0.2-3" date="1718798400">- Resolves: RHEL-43437 Disable stemming support and remove build requirement "libstemmer-devel"</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0431e094174cfbe283ea5a17f506f426112dbc3e7972a8546b85d5888e38b07d" name="appstream-compose-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="5.el10"/>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.0.0~git20231102.d88ed03-1" date="1698926400">- Rebase to 1.0.0 git snapshot</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.0.0-1" date="1700222400">- Update to 1.0.0 final</changelog>
  <changelog author="Steve Cossette &lt;farchord@gmail.com&gt; - 1.0.1-1" date="1704283200">- Update to 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.0.2-1" date="1708862400">- Update to 1.0.2
- Clean up some pre-1.0 scriptlet cruft
- Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)</changelog>
  <changelog author="Alessandro Astone &lt;ales.astone@gmail.com&gt; - 1.0.2-2" date="1709985600">- Backport patch to fix installing swcatalog
- Resolves: RHEL-31497 (Backport latest build from Fedora 40)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.0.2-3" date="1718798400">- Resolves: RHEL-43437 Disable stemming support and remove build requirement "libstemmer-devel"</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="038b6be702ce46314c59d733e41a800c25c02d1bd76a4a4fded15cabd643295c" name="appstream-data" arch="noarch">
  <version epoch="1" ver="10" rel="20250213.1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 40-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 40-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1:10-1" date="1711454400">- Switch from the Fedora 40 to the RHEL 9 metadata template</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1:10-2" date="1711454401">- New metadata version</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1:10-3" date="1711627200">- Fix SPDX license tags and use the new appstream file paths</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:10-4" date="1717416000">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:10-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1:10-6" date="1724760000">- New metadata version</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:10-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1:10-8" date="1739448000">- New metadata version</changelog>
</package>
<package pkgid="17d2671a50bfc064929efe0c99c228f4f92f513456f0ea1bfc21d828342223c2" name="appstream-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="5.el10"/>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.0.0~git20231102.d88ed03-1" date="1698926400">- Rebase to 1.0.0 git snapshot</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.0.0-1" date="1700222400">- Update to 1.0.0 final</changelog>
  <changelog author="Steve Cossette &lt;farchord@gmail.com&gt; - 1.0.1-1" date="1704283200">- Update to 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.0.2-1" date="1708862400">- Update to 1.0.2
- Clean up some pre-1.0 scriptlet cruft
- Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)</changelog>
  <changelog author="Alessandro Astone &lt;ales.astone@gmail.com&gt; - 1.0.2-2" date="1709985600">- Backport patch to fix installing swcatalog
- Resolves: RHEL-31497 (Backport latest build from Fedora 40)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.0.2-3" date="1718798400">- Resolves: RHEL-43437 Disable stemming support and remove build requirement "libstemmer-devel"</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d000461102e9b229a884165f0340ba8a4cbe9327a4a254edcfc9ca638150adf4" name="appstream-qt" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="5.el10"/>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.0.0~git20231102.d88ed03-1" date="1698926400">- Rebase to 1.0.0 git snapshot</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.0.0-1" date="1700222400">- Update to 1.0.0 final</changelog>
  <changelog author="Steve Cossette &lt;farchord@gmail.com&gt; - 1.0.1-1" date="1704283200">- Update to 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.0.2-1" date="1708862400">- Update to 1.0.2
- Clean up some pre-1.0 scriptlet cruft
- Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)</changelog>
  <changelog author="Alessandro Astone &lt;ales.astone@gmail.com&gt; - 1.0.2-2" date="1709985600">- Backport patch to fix installing swcatalog
- Resolves: RHEL-31497 (Backport latest build from Fedora 40)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.0.2-3" date="1718798400">- Resolves: RHEL-43437 Disable stemming support and remove build requirement "libstemmer-devel"</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f197bf893113ba88027c08ecf794134b5898cbe988c9f4b367cd06b5a0aa4740" name="appstream-qt-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="5.el10"/>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.0.0~git20231102.d88ed03-1" date="1698926400">- Rebase to 1.0.0 git snapshot</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.0.0-1" date="1700222400">- Update to 1.0.0 final</changelog>
  <changelog author="Steve Cossette &lt;farchord@gmail.com&gt; - 1.0.1-1" date="1704283200">- Update to 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.0.2-1" date="1708862400">- Update to 1.0.2
- Clean up some pre-1.0 scriptlet cruft
- Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)</changelog>
  <changelog author="Alessandro Astone &lt;ales.astone@gmail.com&gt; - 1.0.2-2" date="1709985600">- Backport patch to fix installing swcatalog
- Resolves: RHEL-31497 (Backport latest build from Fedora 40)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.0.2-3" date="1718798400">- Resolves: RHEL-43437 Disable stemming support and remove build requirement "libstemmer-devel"</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="39c73a9a7fec54b1e23b064fb09591006e98994e83a84c4df012e8331642b115" name="apr" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="3.el10"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.7.3-3" date="1695988800">- SPDX migration</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.7.3-4" date="1698148800">- rebuilt</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-6" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-7" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.3-8" date="1707393600">- use autosetup
- always disable SCTP support at build time</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.3-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.7.5-1" date="1725278400">- new version 1.7.5
- Resolves: RHEL-56637 - apr: Lax permissions in Apache Portable Runtime shared
  memory (CVE-2023-49582)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.5-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 1.7.5-3" date="1757419200">- resolves: RHEL-107890</changelog>
</package>
<package pkgid="c2ec9055430efe94e0f346d80885068997e241ec8b8f51871c1381468bfc4f18" name="apr-devel" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="3.el10"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.7.3-3" date="1695988800">- SPDX migration</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.7.3-4" date="1698148800">- rebuilt</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-6" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-7" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.3-8" date="1707393600">- use autosetup
- always disable SCTP support at build time</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.3-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.7.5-1" date="1725278400">- new version 1.7.5
- Resolves: RHEL-56637 - apr: Lax permissions in Apache Portable Runtime shared
  memory (CVE-2023-49582)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.5-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 1.7.5-3" date="1757419200">- resolves: RHEL-107890</changelog>
</package>
<package pkgid="18c3b9c63df6bbcb2541afb489a0e98637acf2f33353bcedf8428cddd91fc81e" name="apr-util" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="23.el10_1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-13" date="1702382400">- re-enable LMDB by default again for Fedora &gt;= 40 (#1779267)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-14" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-15" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-16" date="1707393600">- fix ODBC type mismatch (r1908586)
- use autosetup</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-18" date="1719316800">- drop ENGINE support from apr_crypto (RHEL-33728)
- fix (harmless) gcc snprintf warning in testbuckets.c</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.6.3-19" date="1722254400">- Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies
- Related: RHEL-33728 - drop ENGINE support from apr_crypto</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-20" date="1722945600">- restore -devel dep on openldap-devel to fix mod_perl FTBFS
  Related: RHEL-50386</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.6.3-23" date="1764936000">- Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user</changelog>
</package>
<package pkgid="05fe8a5302513c41143d1512761bb62a6f0d61374c242fc36ad386cc3e468a7c" name="apr-util-devel" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="23.el10_1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-13" date="1702382400">- re-enable LMDB by default again for Fedora &gt;= 40 (#1779267)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-14" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-15" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-16" date="1707393600">- fix ODBC type mismatch (r1908586)
- use autosetup</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-18" date="1719316800">- drop ENGINE support from apr_crypto (RHEL-33728)
- fix (harmless) gcc snprintf warning in testbuckets.c</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.6.3-19" date="1722254400">- Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies
- Related: RHEL-33728 - drop ENGINE support from apr_crypto</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-20" date="1722945600">- restore -devel dep on openldap-devel to fix mod_perl FTBFS
  Related: RHEL-50386</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.6.3-23" date="1764936000">- Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user</changelog>
</package>
<package pkgid="0525befe273f481abcf82a734a0e4e94af78a26c501738271552cc6ad3f63c11" name="apr-util-ldap" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="23.el10_1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-13" date="1702382400">- re-enable LMDB by default again for Fedora &gt;= 40 (#1779267)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-14" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-15" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-16" date="1707393600">- fix ODBC type mismatch (r1908586)
- use autosetup</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-18" date="1719316800">- drop ENGINE support from apr_crypto (RHEL-33728)
- fix (harmless) gcc snprintf warning in testbuckets.c</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.6.3-19" date="1722254400">- Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies
- Related: RHEL-33728 - drop ENGINE support from apr_crypto</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-20" date="1722945600">- restore -devel dep on openldap-devel to fix mod_perl FTBFS
  Related: RHEL-50386</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.6.3-23" date="1764936000">- Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user</changelog>
</package>
<package pkgid="c9256809245eb1ad44b164e7d2283fed019e1f717a7a0602a5e717fd8c5b5fee" name="apr-util-lmdb" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="23.el10_1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-13" date="1702382400">- re-enable LMDB by default again for Fedora &gt;= 40 (#1779267)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-14" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-15" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-16" date="1707393600">- fix ODBC type mismatch (r1908586)
- use autosetup</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-18" date="1719316800">- drop ENGINE support from apr_crypto (RHEL-33728)
- fix (harmless) gcc snprintf warning in testbuckets.c</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.6.3-19" date="1722254400">- Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies
- Related: RHEL-33728 - drop ENGINE support from apr_crypto</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-20" date="1722945600">- restore -devel dep on openldap-devel to fix mod_perl FTBFS
  Related: RHEL-50386</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.6.3-23" date="1764936000">- Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user</changelog>
</package>
<package pkgid="581b1d6cbec3ab1142f6c84b0a23dfbb73079a9111030a27554cb89dd43695db" name="apr-util-mysql" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="23.el10_1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-13" date="1702382400">- re-enable LMDB by default again for Fedora &gt;= 40 (#1779267)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-14" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-15" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-16" date="1707393600">- fix ODBC type mismatch (r1908586)
- use autosetup</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-18" date="1719316800">- drop ENGINE support from apr_crypto (RHEL-33728)
- fix (harmless) gcc snprintf warning in testbuckets.c</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.6.3-19" date="1722254400">- Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies
- Related: RHEL-33728 - drop ENGINE support from apr_crypto</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-20" date="1722945600">- restore -devel dep on openldap-devel to fix mod_perl FTBFS
  Related: RHEL-50386</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.6.3-23" date="1764936000">- Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user</changelog>
</package>
<package pkgid="788212eb1461131e0b73358546047ca2200e09375193046afc327e5dcaf18032" name="apr-util-odbc" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="23.el10_1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-13" date="1702382400">- re-enable LMDB by default again for Fedora &gt;= 40 (#1779267)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-14" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-15" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-16" date="1707393600">- fix ODBC type mismatch (r1908586)
- use autosetup</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-18" date="1719316800">- drop ENGINE support from apr_crypto (RHEL-33728)
- fix (harmless) gcc snprintf warning in testbuckets.c</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.6.3-19" date="1722254400">- Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies
- Related: RHEL-33728 - drop ENGINE support from apr_crypto</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-20" date="1722945600">- restore -devel dep on openldap-devel to fix mod_perl FTBFS
  Related: RHEL-50386</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.6.3-23" date="1764936000">- Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user</changelog>
</package>
<package pkgid="51e6fc6f1e252f3e040230a2fbbd2c48ba44cc2f9303437b225c0b121dd0d4d6" name="apr-util-openssl" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="23.el10_1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-13" date="1702382400">- re-enable LMDB by default again for Fedora &gt;= 40 (#1779267)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-14" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-15" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-16" date="1707393600">- fix ODBC type mismatch (r1908586)
- use autosetup</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-18" date="1719316800">- drop ENGINE support from apr_crypto (RHEL-33728)
- fix (harmless) gcc snprintf warning in testbuckets.c</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.6.3-19" date="1722254400">- Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies
- Related: RHEL-33728 - drop ENGINE support from apr_crypto</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-20" date="1722945600">- restore -devel dep on openldap-devel to fix mod_perl FTBFS
  Related: RHEL-50386</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.6.3-23" date="1764936000">- Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user</changelog>
</package>
<package pkgid="2373be24862a3436415a1fa34bbfea509a27ea985efc90bad6ddf7654e7d708e" name="apr-util-pgsql" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="23.el10_1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-13" date="1702382400">- re-enable LMDB by default again for Fedora &gt;= 40 (#1779267)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-14" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-15" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-16" date="1707393600">- fix ODBC type mismatch (r1908586)
- use autosetup</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-18" date="1719316800">- drop ENGINE support from apr_crypto (RHEL-33728)
- fix (harmless) gcc snprintf warning in testbuckets.c</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.6.3-19" date="1722254400">- Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies
- Related: RHEL-33728 - drop ENGINE support from apr_crypto</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-20" date="1722945600">- restore -devel dep on openldap-devel to fix mod_perl FTBFS
  Related: RHEL-50386</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.6.3-23" date="1764936000">- Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user</changelog>
</package>
<package pkgid="2c3342f2d11a56a5c1374b92dea140032552cd3620d43900f1c740fcab1fc501" name="apr-util-sqlite" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="23.el10_1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-13" date="1702382400">- re-enable LMDB by default again for Fedora &gt;= 40 (#1779267)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-14" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-15" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-16" date="1707393600">- fix ODBC type mismatch (r1908586)
- use autosetup</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-18" date="1719316800">- drop ENGINE support from apr_crypto (RHEL-33728)
- fix (harmless) gcc snprintf warning in testbuckets.c</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.6.3-19" date="1722254400">- Resolves: RHEL-50386 - drop unnecessary apr-util-devel dependencies
- Related: RHEL-33728 - drop ENGINE support from apr_crypto</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.3-20" date="1722945600">- restore -devel dep on openldap-devel to fix mod_perl FTBFS
  Related: RHEL-50386</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.6.3-23" date="1764936000">- Resolves: RHEL-117419 - apr-util lmdb prevent htdbm to remove user</changelog>
</package>
<package pkgid="9aa2c248946d05bd70faf544ef2247390310e3603cb531b18b9c87a8e9bbf9b2" name="aqute-bnd" arch="noarch">
  <version epoch="0" ver="6.3.1" rel="11.el10"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 6.3.1-2" date="1667908800">- Re-enable maven plugin for RHEL 10+</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-3" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.1-4" date="1686139200">- Conditionally disable bnd-maven-plugin</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.1-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.3.1-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.3.1-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.1-10" date="1722859200">- Port to OpenJDK 21
- Resolves: RHEL-52710</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.3.1-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e5c5d20017fe1fca075fc1b6f8572a1e1b799b5feb15e5986d73ea2e418318ac" name="aqute-bnd-javadoc" arch="noarch">
  <version epoch="0" ver="6.3.1" rel="11.el10"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 6.3.1-2" date="1667908800">- Re-enable maven plugin for RHEL 10+</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-3" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.1-4" date="1686139200">- Conditionally disable bnd-maven-plugin</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.1-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.3.1-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.3.1-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.1-10" date="1722859200">- Port to OpenJDK 21
- Resolves: RHEL-52710</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.3.1-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ed10862cd8579895186f642f47d628c624f25cfd3fe630fda8fce91441d8b69e" name="aqute-bndlib" arch="noarch">
  <version epoch="0" ver="6.3.1" rel="11.el10"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 6.3.1-2" date="1667908800">- Re-enable maven plugin for RHEL 10+</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-3" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.1-4" date="1686139200">- Conditionally disable bnd-maven-plugin</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.1-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.3.1-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.3.1-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.1-10" date="1722859200">- Port to OpenJDK 21
- Resolves: RHEL-52710</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.3.1-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="720e5c74070f3819424eb98170a2af3b02b4cbe311b9c639f0158db198cd4c8e" name="argparse-manpage" arch="noarch">
  <version epoch="0" ver="4.5" rel="5.el10"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 4.2-1" date="1684065600">- new upstream release, upport for pyproject.toml specs, and --manfile option</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 4.3-1" date="1684411200">- new upstream release, tomli dep instead of toml
  https://github.com/praiskup/argparse-manpage/releases/tag/v4.3</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.3-2" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 4.4-1" date="1693828800">- new upstream release: https://github.com/praiskup/argparse-manpage/releases/tag/v4.4
- license tag in SPDX format</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 4.5-1" date="1695384000">- new upstream release https://github.com/praiskup/argparse-manpage/releases/tag/v4.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.5-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.5-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7ff6c189fd64095069a4a86fe7b30276f40a9f2a1148a21479bf4cf47b1801ef" name="asciidoc" arch="noarch">
  <version epoch="0" ver="10.2.0" rel="12.el10"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 10.2.0-3" date="1685102400">- Fix build with pip 23.1.2+
- Fixes: rhbz#2209018</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 10.2.0-4" date="1686830400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 10.2.0-5" date="1688990400">- fix invalid escape sequence (#2220936)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 10.2.0-7" date="1690459200">- fix SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-8" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-9" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.2.0-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 10.2.0-11" date="1719403200">- Add gating.yaml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.2.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7921fdd59ac5474d3c3ca0a115914462935ba3255c17befb3df7c7baf1b099a1" name="asciidoc-doc" arch="noarch">
  <version epoch="0" ver="10.2.0" rel="12.el10"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 10.2.0-3" date="1685102400">- Fix build with pip 23.1.2+
- Fixes: rhbz#2209018</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 10.2.0-4" date="1686830400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 10.2.0-5" date="1688990400">- fix invalid escape sequence (#2220936)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 10.2.0-7" date="1690459200">- fix SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-8" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-9" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.2.0-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 10.2.0-11" date="1719403200">- Add gating.yaml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.2.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dd1b89764b5c0fb4c0812eef6ee6363e47727d54a6afcf6c280162f88fcf2678" name="asciidoc-latex" arch="noarch">
  <version epoch="0" ver="10.2.0" rel="12.el10"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 10.2.0-3" date="1685102400">- Fix build with pip 23.1.2+
- Fixes: rhbz#2209018</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 10.2.0-4" date="1686830400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 10.2.0-5" date="1688990400">- fix invalid escape sequence (#2220936)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 10.2.0-7" date="1690459200">- fix SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-8" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.0-9" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.2.0-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 10.2.0-11" date="1719403200">- Add gating.yaml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.2.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f679b1020f5b723fe17411cd1fdb8066d0993f58de7431759fb455935d19759c" name="asio-devel" arch="x86_64">
  <version epoch="0" ver="1.30.2" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28.0-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Julian Sikorski &lt;belegdol@fedoraproject.org&gt; - 1.28.1-1" date="1690718400">- Update to 1.28.1</changelog>
  <changelog author="Julian Sikorski &lt;belegdol@fedoraproject.org&gt; - 1.28.1-2" date="1690718401">- Upload updated source</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28.1-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28.1-4" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Julian Sikorski &lt;belegdol@fedoraproject.org&gt; - 1.30.2-1" date="1721736000">- Update to 1.30.2</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 1.30.2-2" date="1721736001">- Remove usage of OpenSSL Engine</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 1.30.2-3" date="1723291200">- Update %devel package Recommends to Requires</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.30.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="8b68bc2561aa84989574147960f5b26a805558408a63e39f33c60f276370ccb2" name="aspell" arch="x86_64">
  <version epoch="12" ver="0.60.8.1" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:0.60.8-11" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:0.60.8-12" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:0.60.8-13" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:0.60.8-14" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Peter Oliver &lt;rpm@mavit.org.uk&gt; - 12:0.60.8.1-1" date="1716206400">- Update to version 0.60.8.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 12:0.60.8.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 12:0.60.8.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a9ec4773e0174bb7ba844d4c3aba0b4a96617edab2b0d779e5adebb665c7fec2" name="aspell-devel" arch="x86_64">
  <version epoch="12" ver="0.60.8.1" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:0.60.8-11" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:0.60.8-12" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:0.60.8-13" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:0.60.8-14" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Peter Oliver &lt;rpm@mavit.org.uk&gt; - 12:0.60.8.1-1" date="1716206400">- Update to version 0.60.8.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 12:0.60.8.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 12:0.60.8.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="adb2bd66d5c099bd151d2d27c8b3e1959eb8aab6c869b8fb9ff0b23af7e11728" name="aspnetcore-runtime-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.10" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
</package>
<package pkgid="89b653144c7005322998f6ee6bc4d16120b339763c43e19260db2b8288490a64" name="aspnetcore-runtime-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.11" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.111-1" date="1786276800">- Update to .NET SDK 10.0.111 and Runtime 10.0.11
- Resolves: RHEL-235482</changelog>
</package>
<package pkgid="041cc57031ca914cd1d8c786d952974a8dbb5a3e7bd65b0e97a88f0e30bdac13" name="aspnetcore-runtime-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.6" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~preview.7.25380.108-0.9" date="1757419200">- Disable bootstrap
- Related: RHEL-98678</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.10" date="1757851200">- Update to .NET 10 RC 1
- Resolves: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
</package>
<package pkgid="0e7af7dcabe09cac0fe3709de1aaf2ed21a348192c3a16b8f56e8fae37f68cbf" name="aspnetcore-runtime-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.8" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
</package>
<package pkgid="a57442386e8bd0491a0005801833be3ed5cf33657c240392dd6199d85765135b" name="aspnetcore-runtime-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
</package>
<package pkgid="ec359b98c6abba57bdda2a2b0358d236a7e64de0e44372132325d8716f3e1027" name="aspnetcore-runtime-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.26" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.117-2" date="1749643200">- Update to .NET SDK 8.0.117 and Runtime 8.0.17
- Resolves: RHEL-94416</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
</package>
<package pkgid="f5882f6f511f0727a1c28b3a9022997207a95c4a22094417a8808abfb97f74a9" name="aspnetcore-runtime-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.27" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
</package>
<package pkgid="5bbf174823638d204bf62b17ee2700e61ccfa3e3b1ffb07efe5c6c5e98332ff1" name="aspnetcore-runtime-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
</package>
<package pkgid="5cf520e5da1c817791a623eb3ed425bc1b3b2c95602ff0103bb8a7d25917f926" name="aspnetcore-runtime-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
</package>
<package pkgid="7d6f603f2636135084327a3d50c47b3aabb5ed220b0e8feb6535aa13abdb98c6" name="aspnetcore-runtime-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.130-1" date="1786276800">- Update to .NET SDK 8.0.130 and Runtime 8.0.30
- Resolves: RHEL-235472</changelog>
</package>
<package pkgid="59ad1a1f32f0dee180bc82e13f607e4143835872743a4685b5267daa520544b7" name="aspnetcore-runtime-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.15" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.107-2" date="1749643200">- Update to .NET SDK 9.0.107 and Runtime 9.0.6
- Resolves: RHEL-94423</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
</package>
<package pkgid="1ca87551a13dcb1e6e2b018e07ab208a21bed4c3f46bfc2e6b96f3daaa52d717" name="aspnetcore-runtime-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.16" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
</package>
<package pkgid="0f181e5497194d29234c6f31a6b5702b91e5e300b1292ff6a4f31facbb276c3a" name="aspnetcore-runtime-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.17" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
</package>
<package pkgid="87428a703032243c4be723853370301f4a378a6aa7dfd76a8491ba5256ec5339" name="aspnetcore-runtime-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.18" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
</package>
<package pkgid="32c0b0585989cabb2d1a27c95d1a8711900f28ca5b3af8c3e38416b6407fc5cb" name="aspnetcore-runtime-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.19" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.120-1" date="1786276800">- Update to .NET SDK 9.0.120 and Runtime 9.0.19
- Resolves: RHEL-235477</changelog>
</package>
<package pkgid="c3fc1cb00049e4a822248ba0cca3eaeff5c1022db7316ea3c2d85e15a8ec6d41" name="aspnetcore-runtime-dbg-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.10" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
</package>
<package pkgid="6e930759fcd8b3c1fe5769a09dc566706e00964140266e5195bd78a17b3de17e" name="aspnetcore-runtime-dbg-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.11" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.111-1" date="1786276800">- Update to .NET SDK 10.0.111 and Runtime 10.0.11
- Resolves: RHEL-235482</changelog>
</package>
<package pkgid="3f00636ea1358a63ba0bfddef3bd238b9068900d2cd366cefd1c5d2f35dcd7b4" name="aspnetcore-runtime-dbg-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.6" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~preview.7.25380.108-0.9" date="1757419200">- Disable bootstrap
- Related: RHEL-98678</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.10" date="1757851200">- Update to .NET 10 RC 1
- Resolves: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
</package>
<package pkgid="9829e7da71aed9d64d525c64c6e2e48507fec035c056585e5d996cb5f9a0c8ba" name="aspnetcore-runtime-dbg-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.8" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
</package>
<package pkgid="610ae59f3874149d415d4e78bd33d7611ea50d1fd788194a2750a33ec93aab13" name="aspnetcore-runtime-dbg-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
</package>
<package pkgid="1051f7c40bae973553c2a54f14e5f8f217e8caa8c85e4b552b7971716caf5a1d" name="aspnetcore-runtime-dbg-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.26" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.117-2" date="1749643200">- Update to .NET SDK 8.0.117 and Runtime 8.0.17
- Resolves: RHEL-94416</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
</package>
<package pkgid="c6792715d55a5398914106b70bbfb1ec87ad1e77cb5b3e97d44cd72994ab63f5" name="aspnetcore-runtime-dbg-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.27" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
</package>
<package pkgid="4c8ea0a2221d3d93ef9658d83b8c519d27d1b32145089740d47738462375cdc8" name="aspnetcore-runtime-dbg-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
</package>
<package pkgid="9d5c92ab6debe00f422242de080fda02b54cfa3addc8b120b4aea125475d81bf" name="aspnetcore-runtime-dbg-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
</package>
<package pkgid="d7f78b5362d6f6a5d4cf33377805cb5ae35b82f60959928142a80bc9ed6e07fe" name="aspnetcore-runtime-dbg-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.130-1" date="1786276800">- Update to .NET SDK 8.0.130 and Runtime 8.0.30
- Resolves: RHEL-235472</changelog>
</package>
<package pkgid="70909ffabaa1d2299b1ea228dde04faab19d56f6a52a50a388fa5a7ef5c85823" name="aspnetcore-runtime-dbg-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.15" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.107-2" date="1749643200">- Update to .NET SDK 9.0.107 and Runtime 9.0.6
- Resolves: RHEL-94423</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
</package>
<package pkgid="66a800d559bcf112df773795b919f222e6cae22ec4d8f2783ae7291f979f332a" name="aspnetcore-runtime-dbg-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.16" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
</package>
<package pkgid="e0d209f8874774c8f36a566198cac79176bf6c6a91443ae1574cbed92095512a" name="aspnetcore-runtime-dbg-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.17" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
</package>
<package pkgid="ecbb7e8c6bd758ddbf762ecaa72f0ee04e444915771c489ae80ed2e914ed0335" name="aspnetcore-runtime-dbg-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.18" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
</package>
<package pkgid="7f00dee81f6bf5cfcd262c104bfde1f3761cf2ecb30af23f43fee14c9a9a5d9d" name="aspnetcore-runtime-dbg-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.19" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.120-1" date="1786276800">- Update to .NET SDK 9.0.120 and Runtime 9.0.19
- Resolves: RHEL-235477</changelog>
</package>
<package pkgid="2d39990223d416299c911217380619b4d30e4d92e31cf5071ef3b6aec498ecc0" name="aspnetcore-targeting-pack-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.10" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
</package>
<package pkgid="398ff2ff202e43cb66c8ea690c7a1cbf9a07a849354e40d63fd47105a9c91e1c" name="aspnetcore-targeting-pack-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.11" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.111-1" date="1786276800">- Update to .NET SDK 10.0.111 and Runtime 10.0.11
- Resolves: RHEL-235482</changelog>
</package>
<package pkgid="8a48ec9e1671b1ae41593d1f951e4f5218c1c7d4f9320e9ede78d38be3fd87bc" name="aspnetcore-targeting-pack-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.6" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~preview.7.25380.108-0.9" date="1757419200">- Disable bootstrap
- Related: RHEL-98678</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.10" date="1757851200">- Update to .NET 10 RC 1
- Resolves: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
</package>
<package pkgid="aa53f386dd4163c556ca5ce4db3edce111f191fa432a0775c99ef9245cad49e2" name="aspnetcore-targeting-pack-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.8" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
</package>
<package pkgid="23a45ae6fd90f744eac6232bf6bcd18ea9ad62b0ec456d32c7846cebeabddccd" name="aspnetcore-targeting-pack-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
</package>
<package pkgid="b9176be377f9d0162d62662f43000cf55af2de4dbd794f7ea1980745aeee5def" name="aspnetcore-targeting-pack-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.26" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.117-2" date="1749643200">- Update to .NET SDK 8.0.117 and Runtime 8.0.17
- Resolves: RHEL-94416</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
</package>
<package pkgid="f56e8b38daf5339f5be926f980c8e7721b6c559dec43103887b9a93cff98b3c9" name="aspnetcore-targeting-pack-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.27" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
</package>
<package pkgid="e29eddc7964029e9083241c676957af027748d5bb58885ddb0492d343080fdab" name="aspnetcore-targeting-pack-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
</package>
<package pkgid="ae40abf58bf64e4d1404dfda25a7b3a0a403a1f0cd3c45c6fd103100a372ec25" name="aspnetcore-targeting-pack-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
</package>
<package pkgid="fcc121b8d95a80bc44aa04a1568017420b1cdc826a5b3ce2f555964d1e25d3c8" name="aspnetcore-targeting-pack-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.130-1" date="1786276800">- Update to .NET SDK 8.0.130 and Runtime 8.0.30
- Resolves: RHEL-235472</changelog>
</package>
<package pkgid="6a9464df029c8b6814cd7d2614c96da14a108a41e046c2d2bc52cb1c426410d6" name="aspnetcore-targeting-pack-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.15" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.107-2" date="1749643200">- Update to .NET SDK 9.0.107 and Runtime 9.0.6
- Resolves: RHEL-94423</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
</package>
<package pkgid="08afea8cf5d3d227f2828b6586c3e2f1166944e84d7741a521372149ce8c9869" name="aspnetcore-targeting-pack-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.16" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
</package>
<package pkgid="83ac05c2d861cccae48b1ba32bf16782ddcfce58af7a084266888164ca974164" name="aspnetcore-targeting-pack-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.17" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
</package>
<package pkgid="8b7280bb4f034f710ced42b5bbe4de9fe00665ce027f7c43a758fca4e2fb5d82" name="aspnetcore-targeting-pack-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.18" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
</package>
<package pkgid="1762d6c69bfba2e493694193a7a7ff71cc652c7cb4cce4ef9defa5449925218f" name="aspnetcore-targeting-pack-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.19" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.120-1" date="1786276800">- Update to .NET SDK 9.0.120 and Runtime 9.0.19
- Resolves: RHEL-235477</changelog>
</package>
<package pkgid="2af047aca0811adab44de0201d4efbba5fdc88621b9d372892cfb5cbbce24488" name="assertj-core" arch="noarch">
  <version epoch="0" ver="3.24.2" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23.1-2" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.24.2-1" date="1676462400">- Update to upstream version 3.24.2</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.24.2-2" date="1677499200">- Remove dependency on junit5-bom</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.2-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.24.2-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.2-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.2-6" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.2-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.2-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3c376bc8fd5403f8ed0bb6fe8f6324251aeabab60a53b5d634679a47e5ca7be2" name="assertj-core" arch="noarch">
  <version epoch="0" ver="3.24.2" rel="9.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.2-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.24.2-9.1" date="1782388800">- Fix CVE-2026-24400: add XXE protection to XmlStringPrettyFormatter
- Resolves: RHEL-183469</changelog>
</package>
<package pkgid="be1d710babdc4277cb77ca1117e4d0c771310d681166a75868add838bb7b777d" name="assertj-core-javadoc" arch="noarch">
  <version epoch="0" ver="3.24.2" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23.1-2" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.24.2-1" date="1676462400">- Update to upstream version 3.24.2</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.24.2-2" date="1677499200">- Remove dependency on junit5-bom</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.2-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.24.2-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.2-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.2-6" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.2-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.2-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9ff1d1843f7a0bed39604a8906696d929fd163ffb10991581bcaefafa2b82249" name="assertj-core-javadoc" arch="noarch">
  <version epoch="0" ver="3.24.2" rel="9.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.2-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.24.2-9.1" date="1782388800">- Fix CVE-2026-24400: add XXE protection to XmlStringPrettyFormatter
- Resolves: RHEL-183469</changelog>
</package>
<package pkgid="5f94504294554dda6121c60d61a5f8362d22ddf8410d04dc8d272f5f02872ae2" name="at" arch="x86_64">
  <version epoch="0" ver="3.2.5" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.5-8" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.5-9" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.2.5-12" date="1730894400">- Address issues from static analyzer
  Resolves: RHEL-44999</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.2.5-13" date="1751284800">- Add patch to fix past date handling
- Resolves: RHEL-100334</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.2.5-14" date="1758283200">- Use systemd-tmpfiles for /var/spool/at directories
- Resolves: RHEL-110320</changelog>
</package>
<package pkgid="14afaa484f59c723c5044213b279cab9d21d95aaec839d2b6908442eab79f1ac" name="at-spi2-atk" arch="x86_64">
  <version epoch="0" ver="2.56.1" rel="1.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.49.91-1" date="1693915200">- Update to 2.49.91</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.50.0-1" date="1694865600">- Update to 2.50.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.50.1-1" date="1704974400">- Update to 2.50.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.50.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.51.0-1" date="1705752000">- Update to 2.51.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.51.0-2" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Lukas Tyrychtr &lt;ltyrycht@redhat.com&gt; - 2.52.0-1" date="1711454400">- Update to 2.52.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.52.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.52.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lukas Tyrychtr &lt;ltyrycht@redhat.com&gt;" date="1743681600">- Update to at-spi2-core 2.56.1 so we have the a11y keyboard monitor support
  Resolves: 83403</changelog>
</package>
<package pkgid="65275135cb8e0bb89f9b35f0d8c91ebdf097c7de5739749157851809eae64b7c" name="at-spi2-atk-devel" arch="x86_64">
  <version epoch="0" ver="2.56.1" rel="1.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.49.91-1" date="1693915200">- Update to 2.49.91</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.50.0-1" date="1694865600">- Update to 2.50.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.50.1-1" date="1704974400">- Update to 2.50.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.50.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.51.0-1" date="1705752000">- Update to 2.51.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.51.0-2" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Lukas Tyrychtr &lt;ltyrycht@redhat.com&gt; - 2.52.0-1" date="1711454400">- Update to 2.52.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.52.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.52.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lukas Tyrychtr &lt;ltyrycht@redhat.com&gt;" date="1743681600">- Update to at-spi2-core 2.56.1 so we have the a11y keyboard monitor support
  Resolves: 83403</changelog>
</package>
<package pkgid="f898328005d9ae5b86f0a1355b2808658474080952c4d526236ea95ff7122aa7" name="at-spi2-core" arch="x86_64">
  <version epoch="0" ver="2.56.1" rel="1.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.49.91-1" date="1693915200">- Update to 2.49.91</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.50.0-1" date="1694865600">- Update to 2.50.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.50.1-1" date="1704974400">- Update to 2.50.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.50.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.51.0-1" date="1705752000">- Update to 2.51.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.51.0-2" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Lukas Tyrychtr &lt;ltyrycht@redhat.com&gt; - 2.52.0-1" date="1711454400">- Update to 2.52.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.52.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.52.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lukas Tyrychtr &lt;ltyrycht@redhat.com&gt;" date="1743681600">- Update to at-spi2-core 2.56.1 so we have the a11y keyboard monitor support
  Resolves: 83403</changelog>
</package>
<package pkgid="5d99f75b2ec6e27b11fced3f81c8a89a3f8a6a9eafb70059564be9e03a2244e9" name="at-spi2-core-devel" arch="x86_64">
  <version epoch="0" ver="2.56.1" rel="1.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.49.91-1" date="1693915200">- Update to 2.49.91</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.50.0-1" date="1694865600">- Update to 2.50.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.50.1-1" date="1704974400">- Update to 2.50.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.50.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.51.0-1" date="1705752000">- Update to 2.51.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.51.0-2" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Lukas Tyrychtr &lt;ltyrycht@redhat.com&gt; - 2.52.0-1" date="1711454400">- Update to 2.52.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.52.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.52.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lukas Tyrychtr &lt;ltyrycht@redhat.com&gt;" date="1743681600">- Update to at-spi2-core 2.56.1 so we have the a11y keyboard monitor support
  Resolves: 83403</changelog>
</package>
<package pkgid="5c8785ce794c112bd8c1af83afcbda3552c6865dd57654e32fb81ecdcda61667" name="atheros-firmware" arch="noarch">
  <version epoch="0" ver="20260411" rel="19.5.el10_1"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-19.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128447)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128447</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-19.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-140094)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-140094</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-19.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145532)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145532</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260311-19.4" date="1773230400">- Update linux-firmware to latest upstream (RHEL-154362)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-154362</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260411-19.5" date="1775908800">- Update linux-firmware to latest upstream (RHEL-164389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
Resolves: RHEL-164389</changelog>
</package>
<package pkgid="4c8798c34b1b47ceb7df4784f1cbf8b3f92c61201b514137303710fcef32bcd5" name="atheros-firmware" arch="noarch">
  <version epoch="0" ver="20260609" rel="23.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250212-14" date="1740484800">- accel: ivpu: Update firmware for NPU (RHEL-38586)
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
</package>
<package pkgid="7666b4b7f4791abdfca1300f2ffbe7059780df6f2c4d9abc1b0409431136ccc1" name="atheros-firmware" arch="noarch">
  <version epoch="0" ver="20260707" rel="23.1.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream ()
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
</package>
<package pkgid="66a1004faf9f43359cec5a1a2e9070c682e409379aea6983f010dd2a26d86c25" name="atheros-firmware" arch="noarch">
  <version epoch="0" ver="20260804" rel="23.2.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream (RHEL-188389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260804-23.2" date="1785844800">- Update linux-firmware to latest upstream (RHEL-214057)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- linux-firmware: Add firmware binary files for new HP project (Messi)
- qcom: Add gpu firmwares for Eliza chipset
- cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
- rtw89: 8922d: add fw 0.35.113.2
- qcom: venus-5.4: fix vp9 decoder assertion failure
- qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
- qcom: Update qdsp6sw firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- intel_vpu: Update NPU firmware
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: Add firmware for new soundwire projects
- rtw88: add firmware v41.0.0 for RTL8723B
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add ADSP firmware for hawi platform
- powervr: add firmware for Imagination Technologies BXM-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform
Resolves: RHEL-214057</changelog>
</package>
<package pkgid="6f272b8de14a4df15ba859d85e8aebd648f9d8cd700b7f54c4e04581f5d63b82" name="atinject" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="13.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.5-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.5-8" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-12" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ffb82e0dbe279f1a2b973b31bd8a642707700f66fecf2a7a83b6ed91da300ade" name="atinject-javadoc" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="13.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.5-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.5-8" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-12" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="33bb9983d32efd3eaea229c5076b09e195a9e3278b3f78652c53be72d369ca15" name="atk" arch="x86_64">
  <version epoch="0" ver="2.56.1" rel="1.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.49.91-1" date="1693915200">- Update to 2.49.91</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.50.0-1" date="1694865600">- Update to 2.50.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.50.1-1" date="1704974400">- Update to 2.50.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.50.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.51.0-1" date="1705752000">- Update to 2.51.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.51.0-2" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Lukas Tyrychtr &lt;ltyrycht@redhat.com&gt; - 2.52.0-1" date="1711454400">- Update to 2.52.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.52.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.52.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lukas Tyrychtr &lt;ltyrycht@redhat.com&gt;" date="1743681600">- Update to at-spi2-core 2.56.1 so we have the a11y keyboard monitor support
  Resolves: 83403</changelog>
</package>
<package pkgid="8a9e24ca53ef2a3c0287a2865801b8e046b27a9b24799b7b32559a71ccde8737" name="atk-devel" arch="x86_64">
  <version epoch="0" ver="2.56.1" rel="1.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.49.91-1" date="1693915200">- Update to 2.49.91</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.50.0-1" date="1694865600">- Update to 2.50.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.50.1-1" date="1704974400">- Update to 2.50.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.50.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.51.0-1" date="1705752000">- Update to 2.51.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.51.0-2" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Lukas Tyrychtr &lt;ltyrycht@redhat.com&gt; - 2.52.0-1" date="1711454400">- Update to 2.52.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.52.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.52.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lukas Tyrychtr &lt;ltyrycht@redhat.com&gt;" date="1743681600">- Update to at-spi2-core 2.56.1 so we have the a11y keyboard monitor support
  Resolves: 83403</changelog>
</package>
<package pkgid="1c4bee072cf525b740820e81db99978f201d72bc3f2a77b3082e9aa9a7ebdf5d" name="attr" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.1-6" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.5.1-7" date="1678795200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.1-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Temuri Doghonadze &lt;temuri.doghonadze@gmail.com&gt; - 2.5.1-9" date="1694174400">- Backporting Georgian language for RHEL10 until next release of attr</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.5.2-1" date="1705320000">- rebase to latest version (rhbz#2258293)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.2-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.2-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b014aa94a51deca92e4278a66b4a154c1166a1481d95cda52523f3a6363ffe2b" name="attr" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.6.0-1" date="1782388800">- rebase to 2.6.0 to fix the following CVEs:
  - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr (RHEL-186128)</changelog>
</package>
<package pkgid="f47d84452e6c6666e17e7b078f79982a78589f69ed7fb8e15f13b0b0dff12f2b" name="audispd-plugins" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="5.el10"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 4.0-5" date="1706097600">- Auditd is stopping during upgrade (bz 2259610)</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 4.0-7" date="1706184000">- Don't do "live" operations during rpm-ostree composes</changelog>
  <changelog author="Timoth&#xE9;e Ravier &lt;tim@siosm.fr&gt; - 4.0-8" date="1707048000">- Fix 'install' calls in post scriptlet</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-1" date="1736337600">- Rebase to 4.0.3
- Pluginst must have .conf suffix, otherwise skipped
  Resolves: RHEL-58838
- ausearch checkpoint inode fix
  Resolves: RHEL-62333
- Audisp-filter: filter audit events and forward them to other plugins
  Resolves: RHEL-5199
- Log to console when system is halted due to audit not having enough storage
  Resolves: RHEL-990
- auditctl: remove misleasing error with --input file
  Resolves: RHEL-5200
- Remove ProtectKernelModules=true from service file
  Resolves: RHEL-59571
- Update syscall tables to reflect current kernel
  Resolves: RHEL-46969
- af_unix: Restore old behavior
  Resolves: RHEL-39955
- Add systemd-tempfiles.d for audit when root fs is read-only
  Resolves: RHEL-45311
- ausearch fix error reporting
  Resolves: RHEL-32808
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-59561</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-2" date="1743163200">- Add auditd.cron (5) man page for time-based log rotation description
  Resolves: RHEL-77141
- Remove HALT from space_left_action
- Broadcast warning to users when auditd is about to halt
  Resolves: RHEL-73111
- Fix TTY hostname in log messages
  Resolves: RHEL-79476
- permtab: remove unsupported syscalls from rules
  Resolves: RHEL-59560
- Restore permission on audit.rules</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-3" date="1743768000">- Adjust dependency between audit and audit-rules
  Resolves: RHEL-77141</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-4" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86896</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-5" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-128464</changelog>
</package>
<package pkgid="f25e9c5fa490b2be0098eb3e2eda7233d753c8a9c02db977f077d4caa88c2527" name="audispd-plugins-zos" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="5.el10"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 4.0-5" date="1706097600">- Auditd is stopping during upgrade (bz 2259610)</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 4.0-7" date="1706184000">- Don't do "live" operations during rpm-ostree composes</changelog>
  <changelog author="Timoth&#xE9;e Ravier &lt;tim@siosm.fr&gt; - 4.0-8" date="1707048000">- Fix 'install' calls in post scriptlet</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-1" date="1736337600">- Rebase to 4.0.3
- Pluginst must have .conf suffix, otherwise skipped
  Resolves: RHEL-58838
- ausearch checkpoint inode fix
  Resolves: RHEL-62333
- Audisp-filter: filter audit events and forward them to other plugins
  Resolves: RHEL-5199
- Log to console when system is halted due to audit not having enough storage
  Resolves: RHEL-990
- auditctl: remove misleasing error with --input file
  Resolves: RHEL-5200
- Remove ProtectKernelModules=true from service file
  Resolves: RHEL-59571
- Update syscall tables to reflect current kernel
  Resolves: RHEL-46969
- af_unix: Restore old behavior
  Resolves: RHEL-39955
- Add systemd-tempfiles.d for audit when root fs is read-only
  Resolves: RHEL-45311
- ausearch fix error reporting
  Resolves: RHEL-32808
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-59561</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-2" date="1743163200">- Add auditd.cron (5) man page for time-based log rotation description
  Resolves: RHEL-77141
- Remove HALT from space_left_action
- Broadcast warning to users when auditd is about to halt
  Resolves: RHEL-73111
- Fix TTY hostname in log messages
  Resolves: RHEL-79476
- permtab: remove unsupported syscalls from rules
  Resolves: RHEL-59560
- Restore permission on audit.rules</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-3" date="1743768000">- Adjust dependency between audit and audit-rules
  Resolves: RHEL-77141</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-4" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86896</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-5" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-128464</changelog>
</package>
<package pkgid="8270d5a7fa5a730196126a8404917c36fbfe3e4f13a6843cc1ce4da6a14113e0" name="audit" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="5.el10"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 4.0-5" date="1706097600">- Auditd is stopping during upgrade (bz 2259610)</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 4.0-7" date="1706184000">- Don't do "live" operations during rpm-ostree composes</changelog>
  <changelog author="Timoth&#xE9;e Ravier &lt;tim@siosm.fr&gt; - 4.0-8" date="1707048000">- Fix 'install' calls in post scriptlet</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-1" date="1736337600">- Rebase to 4.0.3
- Pluginst must have .conf suffix, otherwise skipped
  Resolves: RHEL-58838
- ausearch checkpoint inode fix
  Resolves: RHEL-62333
- Audisp-filter: filter audit events and forward them to other plugins
  Resolves: RHEL-5199
- Log to console when system is halted due to audit not having enough storage
  Resolves: RHEL-990
- auditctl: remove misleasing error with --input file
  Resolves: RHEL-5200
- Remove ProtectKernelModules=true from service file
  Resolves: RHEL-59571
- Update syscall tables to reflect current kernel
  Resolves: RHEL-46969
- af_unix: Restore old behavior
  Resolves: RHEL-39955
- Add systemd-tempfiles.d for audit when root fs is read-only
  Resolves: RHEL-45311
- ausearch fix error reporting
  Resolves: RHEL-32808
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-59561</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-2" date="1743163200">- Add auditd.cron (5) man page for time-based log rotation description
  Resolves: RHEL-77141
- Remove HALT from space_left_action
- Broadcast warning to users when auditd is about to halt
  Resolves: RHEL-73111
- Fix TTY hostname in log messages
  Resolves: RHEL-79476
- permtab: remove unsupported syscalls from rules
  Resolves: RHEL-59560
- Restore permission on audit.rules</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-3" date="1743768000">- Adjust dependency between audit and audit-rules
  Resolves: RHEL-77141</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-4" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86896</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-5" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-128464</changelog>
</package>
<package pkgid="b82f4b8fae532ae99f0515f48c8ed3d88798e648344e61ac3c0e3bfe7da6f977" name="audit-libs" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="5.el10"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 4.0-5" date="1706097600">- Auditd is stopping during upgrade (bz 2259610)</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 4.0-7" date="1706184000">- Don't do "live" operations during rpm-ostree composes</changelog>
  <changelog author="Timoth&#xE9;e Ravier &lt;tim@siosm.fr&gt; - 4.0-8" date="1707048000">- Fix 'install' calls in post scriptlet</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-1" date="1736337600">- Rebase to 4.0.3
- Pluginst must have .conf suffix, otherwise skipped
  Resolves: RHEL-58838
- ausearch checkpoint inode fix
  Resolves: RHEL-62333
- Audisp-filter: filter audit events and forward them to other plugins
  Resolves: RHEL-5199
- Log to console when system is halted due to audit not having enough storage
  Resolves: RHEL-990
- auditctl: remove misleasing error with --input file
  Resolves: RHEL-5200
- Remove ProtectKernelModules=true from service file
  Resolves: RHEL-59571
- Update syscall tables to reflect current kernel
  Resolves: RHEL-46969
- af_unix: Restore old behavior
  Resolves: RHEL-39955
- Add systemd-tempfiles.d for audit when root fs is read-only
  Resolves: RHEL-45311
- ausearch fix error reporting
  Resolves: RHEL-32808
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-59561</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-2" date="1743163200">- Add auditd.cron (5) man page for time-based log rotation description
  Resolves: RHEL-77141
- Remove HALT from space_left_action
- Broadcast warning to users when auditd is about to halt
  Resolves: RHEL-73111
- Fix TTY hostname in log messages
  Resolves: RHEL-79476
- permtab: remove unsupported syscalls from rules
  Resolves: RHEL-59560
- Restore permission on audit.rules</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-3" date="1743768000">- Adjust dependency between audit and audit-rules
  Resolves: RHEL-77141</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-4" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86896</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-5" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-128464</changelog>
</package>
<package pkgid="5615927ad92fab780f35bad3b7dc7ca2514b7ee80a499923e4b13d6e566322a7" name="audit-libs-devel" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="5.el10"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 4.0-5" date="1706097600">- Auditd is stopping during upgrade (bz 2259610)</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 4.0-7" date="1706184000">- Don't do "live" operations during rpm-ostree composes</changelog>
  <changelog author="Timoth&#xE9;e Ravier &lt;tim@siosm.fr&gt; - 4.0-8" date="1707048000">- Fix 'install' calls in post scriptlet</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-1" date="1736337600">- Rebase to 4.0.3
- Pluginst must have .conf suffix, otherwise skipped
  Resolves: RHEL-58838
- ausearch checkpoint inode fix
  Resolves: RHEL-62333
- Audisp-filter: filter audit events and forward them to other plugins
  Resolves: RHEL-5199
- Log to console when system is halted due to audit not having enough storage
  Resolves: RHEL-990
- auditctl: remove misleasing error with --input file
  Resolves: RHEL-5200
- Remove ProtectKernelModules=true from service file
  Resolves: RHEL-59571
- Update syscall tables to reflect current kernel
  Resolves: RHEL-46969
- af_unix: Restore old behavior
  Resolves: RHEL-39955
- Add systemd-tempfiles.d for audit when root fs is read-only
  Resolves: RHEL-45311
- ausearch fix error reporting
  Resolves: RHEL-32808
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-59561</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-2" date="1743163200">- Add auditd.cron (5) man page for time-based log rotation description
  Resolves: RHEL-77141
- Remove HALT from space_left_action
- Broadcast warning to users when auditd is about to halt
  Resolves: RHEL-73111
- Fix TTY hostname in log messages
  Resolves: RHEL-79476
- permtab: remove unsupported syscalls from rules
  Resolves: RHEL-59560
- Restore permission on audit.rules</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-3" date="1743768000">- Adjust dependency between audit and audit-rules
  Resolves: RHEL-77141</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-4" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86896</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-5" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-128464</changelog>
</package>
<package pkgid="87708e4bb3a232a338c52c2df463f7edbfa66fc635faa2e8782f4188b4fd4fd7" name="audit-rules" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="5.el10"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 4.0-5" date="1706097600">- Auditd is stopping during upgrade (bz 2259610)</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 4.0-7" date="1706184000">- Don't do "live" operations during rpm-ostree composes</changelog>
  <changelog author="Timoth&#xE9;e Ravier &lt;tim@siosm.fr&gt; - 4.0-8" date="1707048000">- Fix 'install' calls in post scriptlet</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-1" date="1736337600">- Rebase to 4.0.3
- Pluginst must have .conf suffix, otherwise skipped
  Resolves: RHEL-58838
- ausearch checkpoint inode fix
  Resolves: RHEL-62333
- Audisp-filter: filter audit events and forward them to other plugins
  Resolves: RHEL-5199
- Log to console when system is halted due to audit not having enough storage
  Resolves: RHEL-990
- auditctl: remove misleasing error with --input file
  Resolves: RHEL-5200
- Remove ProtectKernelModules=true from service file
  Resolves: RHEL-59571
- Update syscall tables to reflect current kernel
  Resolves: RHEL-46969
- af_unix: Restore old behavior
  Resolves: RHEL-39955
- Add systemd-tempfiles.d for audit when root fs is read-only
  Resolves: RHEL-45311
- ausearch fix error reporting
  Resolves: RHEL-32808
- Resolve ordering cycle when using remote logging
  Resolves: RHEL-59561</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-2" date="1743163200">- Add auditd.cron (5) man page for time-based log rotation description
  Resolves: RHEL-77141
- Remove HALT from space_left_action
- Broadcast warning to users when auditd is about to halt
  Resolves: RHEL-73111
- Fix TTY hostname in log messages
  Resolves: RHEL-79476
- permtab: remove unsupported syscalls from rules
  Resolves: RHEL-59560
- Restore permission on audit.rules</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-3" date="1743768000">- Adjust dependency between audit and audit-rules
  Resolves: RHEL-77141</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-4" date="1744372800">- ausearch-checkpoint race condition fix
  Resolves: RHEL-86896</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 4.0.3-5" date="1767700800">- Fix POSTIN scriplet to not fail during upgrade
  Resolves: RHEL-128464</changelog>
</package>
<package pkgid="55128a57e77598b913f0cbca0e5862262778042e79365a09ab79572f1317aadc" name="augeas" arch="x86_64">
  <version epoch="0" ver="1.14.2" rel="0.9.20260120gitf4135e3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-7" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.13.0-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.1-1" date="1720094400">- New upstream version 1.14.1
- Use github tarballs again.
- New binary augprint.
- New bash-completions subpackage.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.1-2" date="1725278400">- Fix parsing of /etc/fstab
  resolves: RHEL-55741</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.2-0" date="1725883200">- Rebase to Fedora Rawhide version
  resolves: RHEL-55741</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.2-0.2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.2-0.3" date="1740398400">- lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf
  resolves: RHEL-76283
- lenses/multipath.aug: Support all possible values for find_multipaths
- lenses/systemd.aug: Allow "+"(fullprivileges) command flag</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.2-0.9" date="1768910400">- Fix: fails to parse /etc/fstab when there is a double comma after character
  resolves: RHEL-77279
- Fix: fails to parse /etc/iproute2/README and /usr/share/iproute2/
  resolves: RHEL-113748
- Synchronize spec file with Fedora</changelog>
</package>
<package pkgid="33d62ad22a8dd4b52d56e42f6765e64f2429dae0cc467bb370c7d523c7dfd5b3" name="augeas-bash-completion" arch="noarch">
  <version epoch="0" ver="1.14.2" rel="0.9.20260120gitf4135e3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-7" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.13.0-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.1-1" date="1720094400">- New upstream version 1.14.1
- Use github tarballs again.
- New binary augprint.
- New bash-completions subpackage.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.1-2" date="1725278400">- Fix parsing of /etc/fstab
  resolves: RHEL-55741</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.2-0" date="1725883200">- Rebase to Fedora Rawhide version
  resolves: RHEL-55741</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.2-0.2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.2-0.3" date="1740398400">- lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf
  resolves: RHEL-76283
- lenses/multipath.aug: Support all possible values for find_multipaths
- lenses/systemd.aug: Allow "+"(fullprivileges) command flag</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.2-0.9" date="1768910400">- Fix: fails to parse /etc/fstab when there is a double comma after character
  resolves: RHEL-77279
- Fix: fails to parse /etc/iproute2/README and /usr/share/iproute2/
  resolves: RHEL-113748
- Synchronize spec file with Fedora</changelog>
</package>
<package pkgid="50095b6c3cb4e6bd708d0a84c677567b75281f4eea68d77fa6c7c8a331c3d594" name="augeas-devel" arch="x86_64">
  <version epoch="0" ver="1.14.2" rel="0.9.20260120gitf4135e3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-7" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.13.0-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.1-1" date="1720094400">- New upstream version 1.14.1
- Use github tarballs again.
- New binary augprint.
- New bash-completions subpackage.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.1-2" date="1725278400">- Fix parsing of /etc/fstab
  resolves: RHEL-55741</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.2-0" date="1725883200">- Rebase to Fedora Rawhide version
  resolves: RHEL-55741</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.2-0.2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.2-0.3" date="1740398400">- lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf
  resolves: RHEL-76283
- lenses/multipath.aug: Support all possible values for find_multipaths
- lenses/systemd.aug: Allow "+"(fullprivileges) command flag</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.2-0.9" date="1768910400">- Fix: fails to parse /etc/fstab when there is a double comma after character
  resolves: RHEL-77279
- Fix: fails to parse /etc/iproute2/README and /usr/share/iproute2/
  resolves: RHEL-113748
- Synchronize spec file with Fedora</changelog>
</package>
<package pkgid="8adbf275a021a5732e09c2e513f069fa1e09c22753e5120f0f2ae29cb7726669" name="augeas-libs" arch="x86_64">
  <version epoch="0" ver="1.14.2" rel="0.9.20260120gitf4135e3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-7" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.13.0-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.1-1" date="1720094400">- New upstream version 1.14.1
- Use github tarballs again.
- New binary augprint.
- New bash-completions subpackage.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.1-2" date="1725278400">- Fix parsing of /etc/fstab
  resolves: RHEL-55741</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.2-0" date="1725883200">- Rebase to Fedora Rawhide version
  resolves: RHEL-55741</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.2-0.2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.2-0.3" date="1740398400">- lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf
  resolves: RHEL-76283
- lenses/multipath.aug: Support all possible values for find_multipaths
- lenses/systemd.aug: Allow "+"(fullprivileges) command flag</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.2-0.9" date="1768910400">- Fix: fails to parse /etc/fstab when there is a double comma after character
  resolves: RHEL-77279
- Fix: fails to parse /etc/iproute2/README and /usr/share/iproute2/
  resolves: RHEL-113748
- Synchronize spec file with Fedora</changelog>
</package>
<package pkgid="878c3bd8413283648c06102bc398f8d2f29a91d15a660f0c2b5101a94f215268" name="augeas-static" arch="x86_64">
  <version epoch="0" ver="1.14.2" rel="0.9.20260120gitf4135e3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-7" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.13.0-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.1-1" date="1720094400">- New upstream version 1.14.1
- Use github tarballs again.
- New binary augprint.
- New bash-completions subpackage.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.1-2" date="1725278400">- Fix parsing of /etc/fstab
  resolves: RHEL-55741</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.2-0" date="1725883200">- Rebase to Fedora Rawhide version
  resolves: RHEL-55741</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.2-0.2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.2-0.3" date="1740398400">- lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf
  resolves: RHEL-76283
- lenses/multipath.aug: Support all possible values for find_multipaths
- lenses/systemd.aug: Allow "+"(fullprivileges) command flag</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.2-0.9" date="1768910400">- Fix: fails to parse /etc/fstab when there is a double comma after character
  resolves: RHEL-77279
- Fix: fails to parse /etc/iproute2/README and /usr/share/iproute2/
  resolves: RHEL-113748
- Synchronize spec file with Fedora</changelog>
</package>
<package pkgid="fc8370c0a713783a80239505a5a407b87b7c37cc2a8e7d64bdcb36aa9ec4c67e" name="authselect" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.2-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.4.3-1" date="1695816000">- Rebase to 1.4.3</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.5.0-1" date="1705579200">- Rebase to 1.5.0
- "minimal" profile was removed and replaced with "local". (rhbz#2253180)
- "local" profile is now default (rhbz#2253180)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.5.0-4" date="1708689600">- Add back with-files-access-provider
- Remove outdated scriptlets
- Group merging added to nsswitch.conf group in all profiles
- myhostname is put right before dns module in nsswitch.conf hosts (rhbz#2257197)
- Internal packaging changes</changelog>
  <changelog author="Jonathan Lebon &lt;jonathan@jlebon.com&gt; - 1.5.0-5" date="1709035200">- Fix altfiles rendering on OSTree variants</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.5.0-7" date="1722600000">- myhostname is put after dns module in nsswitch.conf hosts to fix hostname --fqdn (RHEL-39537)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6e80063d767f7b7fc685b1f41e3930452d74347f44eacc387747fc9feba688c5" name="authselect-devel" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.2-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.4.3-1" date="1695816000">- Rebase to 1.4.3</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.5.0-1" date="1705579200">- Rebase to 1.5.0
- "minimal" profile was removed and replaced with "local". (rhbz#2253180)
- "local" profile is now default (rhbz#2253180)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.5.0-4" date="1708689600">- Add back with-files-access-provider
- Remove outdated scriptlets
- Group merging added to nsswitch.conf group in all profiles
- myhostname is put right before dns module in nsswitch.conf hosts (rhbz#2257197)
- Internal packaging changes</changelog>
  <changelog author="Jonathan Lebon &lt;jonathan@jlebon.com&gt; - 1.5.0-5" date="1709035200">- Fix altfiles rendering on OSTree variants</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.5.0-7" date="1722600000">- myhostname is put after dns module in nsswitch.conf hosts to fix hostname --fqdn (RHEL-39537)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="19f583b64c6203d12a657e81d1259f877395a13a6cf7523e6dbc3af004a9d206" name="authselect-libs" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.2-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.4.3-1" date="1695816000">- Rebase to 1.4.3</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.5.0-1" date="1705579200">- Rebase to 1.5.0
- "minimal" profile was removed and replaced with "local". (rhbz#2253180)
- "local" profile is now default (rhbz#2253180)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.5.0-4" date="1708689600">- Add back with-files-access-provider
- Remove outdated scriptlets
- Group merging added to nsswitch.conf group in all profiles
- myhostname is put right before dns module in nsswitch.conf hosts (rhbz#2257197)
- Internal packaging changes</changelog>
  <changelog author="Jonathan Lebon &lt;jonathan@jlebon.com&gt; - 1.5.0-5" date="1709035200">- Fix altfiles rendering on OSTree variants</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.5.0-7" date="1722600000">- myhostname is put after dns module in nsswitch.conf hosts to fix hostname --fqdn (RHEL-39537)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="05c30e8f8ba0d8b4bc1e0d23a55565822037d10504f4ea9643196f8e416df364" name="autoconf" arch="noarch">
  <version epoch="0" ver="2.71" rel="13.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.71-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Frederic Berat &lt;fberat@redhat.com&gt; - 2.71-7" date="1691409600">- Migrate to SPDX licences (#2222088)</changelog>
  <changelog author="Frederic Berat &lt;fberat@redhat.com&gt; - 2.71-8" date="1703246400">- Modify spec file to support autoconf-latest package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.71-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.71-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.71-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.71-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Frederic Berat &lt;fberat@redhat.com&gt; - 2.71-13" date="1741953600">- Ensure that we can transition from autoconf-latest to autoconf (RHEL-33538)</changelog>
</package>
<package pkgid="5c017790a109f2a80e0ca9471da21de1d1ef9bd283042a8c19917dfbd3111dc1" name="autoconf-archive" arch="noarch">
  <version epoch="0" ver="2023.02.20" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2022.09.03-2" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2023.02.20-1" date="1676894400">- Update to 2023.02.20 (#2171879)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2023.02.20-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Frederic Berat &lt;fberat@redhat.com&gt; - 2023.02.20-3" date="1695816000">- Migrate to SPDX licenses (#2222089)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2023.02.20-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2023.02.20-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2023.02.20-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Brian Stinson &lt;bstinson@redhat.com&gt; - 2023.02.20-7" date="1721390400">- Update License string with the correct Exception name
  Resolves: RHEL-49926</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2023.02.20-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="12108c54a332a98bff85603cd8b6ddaf3604068cebe89ddf3f0d994fed653322" name="autofs" arch="x86_64">
  <version epoch="1" ver="5.1.9" rel="13.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1:5.1.9-4" date="1702900800">- Further C compatibility fixes, run autoconf</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:5.1.9-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:5.1.9-6" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:5.1.9-7" date="1718625600">- RHEL-39412 - Remove autofs dependency on libnsl2
  - remove BuildRequires: libnsl2-devel.
- Resolves: RHEL-39412</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:5.1.9-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.9-9" date="1721649600">- RHEL-32639 - [10.0-beta] starting autofs leads to core dump
  - bring the existing patches up to date with upstream.
    - update the configure script.
    - the two existing patches were renamed upstream.
      autofs-configure-c99.patch =&gt; autofs-5.1.9-fix-ldap_parse_page_control-check.patch.
      autofs-c99.patch =&gt; autofs-5.1.9-Fix-incompatible-function-pointer-types-in-cyrus-sasl-module.patch
  - fix crash in make_options_string().
- Resolves: RHEL-32639</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.9-10" date="1721649601">- Upstream bug fix sync.
  - fix always recreate credential cache.
  - fix get parent multi-mount check in try_remount().
  - fix deadlock in remount.
  - fix amd external mount error handling.
  - fix amd external mount mount handling.
  - don't free ext mount if mounted.
  - refactor amd function do_program_mount().
  - refactor umount_amd_ext_mount().
  - add flags argument to amd do_program_mount().
  - fix amd cache options not copied.
  - seperate amd mount and entry flags.
  - make iocl ops -&gt;timeout() handle per-dentry expire.
  - refactor amd mount options handling.
  - add some unimplemented amd map options.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:5.1.9-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.9-12" date="1746014400">- RHEL-87525 - autofs hang - autofs-5.1.4-114.el8_10.2 [rhel-10]
  - fix submount shutdown race.
  - fix deadlock in master_notify_submount().
  - fix lock ordering deadlock in expire_cleanup().
- Resolves: RHEL-87525</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 1:5.1.9-13" date="1747051200">- RHEL-90571 - autofs: segfault while dereferencing null mapent [rhel-10]
  - fix handling of ignored offsets.
  - fix invalidated map entry handling in hosts module.
- Resolves: RHEL-90571</changelog>
</package>
<package pkgid="4d661c6e4edd00fef5fc836a3428864e4d481cb729ca7c8c547f602e93b09bf9" name="automake" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="20.el10"/>
  <changelog author="Frederic Berat &lt;fberat@redhat.com&gt; - 1.16.5-11" date="1674216000">- Fix test failure due to texinfo 7.0 update</changelog>
  <changelog author="Frederic Berat &lt;fberat@redhat.com&gt; - 1.16.5-12" date="1676376000">- Port to modern C: various fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.5-13" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Frederic Berat &lt;fberat@redhat.com&gt; - 1.16.5-14" date="1691409600">- Migrate to SPDX licenses (#2222090)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.5-15" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.5-16" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.16.5-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.16.5-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Frederic Berat &lt;fberat@redhat.com&gt; - 1.16.5-19" date="1732622400">- Filter ncompress out for rhel (RHEL-59969)
- Fix pep3147_tweak regression (RHEL-59974)</changelog>
  <changelog author="Frederic Berat &lt;fberat@redhat.com&gt; - 1.16.5-20" date="1732708800">- test: another check for PEP-3147 induced by Python 3.12.1 (RHEL-66594)</changelog>
</package>
<package pkgid="7046cf6635b9ef156443777a41c117b6a5810bb55b3e4054141d44ef0328ec2f" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.9~rc2" rel="2.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-25" date="1690372800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8-28" date="1719489600">- TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-29" date="1724328000">- fix file attributes of /run/avahi-daemon (RHEL-55762)
- fix SAST issues (RHEL-40016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-1" date="1739361600">- Rebase to 0.9-rc2 (RHEL-78770)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-2" date="1752062400">- Fix for CVE-2024-52615 (RHEL-67715)</changelog>
</package>
<package pkgid="ddd6018f223f7ee00264a03ce798e17d3dfc725e3e751a4633be91a887e75b49" name="avahi-autoipd" arch="x86_64">
  <version epoch="0" ver="0.9~rc2" rel="2.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-25" date="1690372800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8-28" date="1719489600">- TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-29" date="1724328000">- fix file attributes of /run/avahi-daemon (RHEL-55762)
- fix SAST issues (RHEL-40016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-1" date="1739361600">- Rebase to 0.9-rc2 (RHEL-78770)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-2" date="1752062400">- Fix for CVE-2024-52615 (RHEL-67715)</changelog>
</package>
<package pkgid="20f4367e7f195afd60bafc4602577eb0bfeff38c24e0161f8d733a9c08d73855" name="avahi-compat-howl" arch="x86_64">
  <version epoch="0" ver="0.9~rc2" rel="2.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-25" date="1690372800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8-28" date="1719489600">- TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-29" date="1724328000">- fix file attributes of /run/avahi-daemon (RHEL-55762)
- fix SAST issues (RHEL-40016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-1" date="1739361600">- Rebase to 0.9-rc2 (RHEL-78770)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-2" date="1752062400">- Fix for CVE-2024-52615 (RHEL-67715)</changelog>
</package>
<package pkgid="7aaf5a82147113fa7a1449f2b325ff6aa81cbd29989cf571460d56c25b36b3cd" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.9~rc2" rel="2.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-25" date="1690372800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8-28" date="1719489600">- TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-29" date="1724328000">- fix file attributes of /run/avahi-daemon (RHEL-55762)
- fix SAST issues (RHEL-40016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-1" date="1739361600">- Rebase to 0.9-rc2 (RHEL-78770)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-2" date="1752062400">- Fix for CVE-2024-52615 (RHEL-67715)</changelog>
</package>
<package pkgid="db33204acb365012a0ddd8bb9bd21a099b8718708fcf0b6b91fc51d3ced28652" name="avahi-compat-libdns_sd" arch="x86_64">
  <version epoch="0" ver="0.9~rc2" rel="2.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-25" date="1690372800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8-28" date="1719489600">- TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-29" date="1724328000">- fix file attributes of /run/avahi-daemon (RHEL-55762)
- fix SAST issues (RHEL-40016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-1" date="1739361600">- Rebase to 0.9-rc2 (RHEL-78770)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-2" date="1752062400">- Fix for CVE-2024-52615 (RHEL-67715)</changelog>
</package>
<package pkgid="5fd9f8fce39ee649631445d606d8a6466aaa7127aa085b34950af827cff959b0" name="avahi-compat-libdns_sd-devel" arch="x86_64">
  <version epoch="0" ver="0.9~rc2" rel="2.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-25" date="1690372800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8-28" date="1719489600">- TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-29" date="1724328000">- fix file attributes of /run/avahi-daemon (RHEL-55762)
- fix SAST issues (RHEL-40016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-1" date="1739361600">- Rebase to 0.9-rc2 (RHEL-78770)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-2" date="1752062400">- Fix for CVE-2024-52615 (RHEL-67715)</changelog>
</package>
<package pkgid="a75f84f30b11e3c950a9087acb4c1e2db51eddf4016404f8cc609a5635cef8fe" name="avahi-devel" arch="x86_64">
  <version epoch="0" ver="0.9~rc2" rel="2.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-25" date="1690372800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8-28" date="1719489600">- TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-29" date="1724328000">- fix file attributes of /run/avahi-daemon (RHEL-55762)
- fix SAST issues (RHEL-40016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-1" date="1739361600">- Rebase to 0.9-rc2 (RHEL-78770)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-2" date="1752062400">- Fix for CVE-2024-52615 (RHEL-67715)</changelog>
</package>
<package pkgid="0e50d98eac4594eb56ed73eb521fd7618f6c287d8eefe4ea959b9507c0f8d2f3" name="avahi-dnsconfd" arch="x86_64">
  <version epoch="0" ver="0.9~rc2" rel="2.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-25" date="1690372800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8-28" date="1719489600">- TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-29" date="1724328000">- fix file attributes of /run/avahi-daemon (RHEL-55762)
- fix SAST issues (RHEL-40016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-1" date="1739361600">- Rebase to 0.9-rc2 (RHEL-78770)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-2" date="1752062400">- Fix for CVE-2024-52615 (RHEL-67715)</changelog>
</package>
<package pkgid="6c7c7b4ecd52f762a6f67d08a98a2f6bfe21f51eb6c12a0e8153c0f20f8b5971" name="avahi-glib" arch="x86_64">
  <version epoch="0" ver="0.9~rc2" rel="2.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-25" date="1690372800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8-28" date="1719489600">- TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-29" date="1724328000">- fix file attributes of /run/avahi-daemon (RHEL-55762)
- fix SAST issues (RHEL-40016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-1" date="1739361600">- Rebase to 0.9-rc2 (RHEL-78770)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-2" date="1752062400">- Fix for CVE-2024-52615 (RHEL-67715)</changelog>
</package>
<package pkgid="57fbeaa6fa366bb0697c4c05b5795fdb52572aaddaeeac28a4651b8608459ab0" name="avahi-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.9~rc2" rel="2.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-25" date="1690372800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8-28" date="1719489600">- TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-29" date="1724328000">- fix file attributes of /run/avahi-daemon (RHEL-55762)
- fix SAST issues (RHEL-40016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-1" date="1739361600">- Rebase to 0.9-rc2 (RHEL-78770)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-2" date="1752062400">- Fix for CVE-2024-52615 (RHEL-67715)</changelog>
</package>
<package pkgid="ac3f306c58a60cd12f12fc356a3b08835115ecbab2204a419acaa369b4afc8cc" name="avahi-gobject" arch="x86_64">
  <version epoch="0" ver="0.9~rc2" rel="2.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-25" date="1690372800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8-28" date="1719489600">- TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-29" date="1724328000">- fix file attributes of /run/avahi-daemon (RHEL-55762)
- fix SAST issues (RHEL-40016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-1" date="1739361600">- Rebase to 0.9-rc2 (RHEL-78770)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-2" date="1752062400">- Fix for CVE-2024-52615 (RHEL-67715)</changelog>
</package>
<package pkgid="011e6c87512b7ed42ca5374357f96735e1225d261383ba7a9bb3dcffd667eb1d" name="avahi-gobject-devel" arch="x86_64">
  <version epoch="0" ver="0.9~rc2" rel="2.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-25" date="1690372800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8-28" date="1719489600">- TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-29" date="1724328000">- fix file attributes of /run/avahi-daemon (RHEL-55762)
- fix SAST issues (RHEL-40016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-1" date="1739361600">- Rebase to 0.9-rc2 (RHEL-78770)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-2" date="1752062400">- Fix for CVE-2024-52615 (RHEL-67715)</changelog>
</package>
<package pkgid="675bf726601c8bc1b7ea1f482d94aed842b0895e812d6a2acc13a3944fb9d537" name="avahi-libs" arch="x86_64">
  <version epoch="0" ver="0.9~rc2" rel="2.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-25" date="1690372800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8-28" date="1719489600">- TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-29" date="1724328000">- fix file attributes of /run/avahi-daemon (RHEL-55762)
- fix SAST issues (RHEL-40016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-1" date="1739361600">- Rebase to 0.9-rc2 (RHEL-78770)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-2" date="1752062400">- Fix for CVE-2024-52615 (RHEL-67715)</changelog>
</package>
<package pkgid="28a6a700272ebc69048ff7efde0b10a62580afd04bb2c9c0b8d77babbcac1a74" name="avahi-tools" arch="x86_64">
  <version epoch="0" ver="0.9~rc2" rel="2.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-25" date="1690372800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8-28" date="1719489600">- TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-29" date="1724328000">- fix file attributes of /run/avahi-daemon (RHEL-55762)
- fix SAST issues (RHEL-40016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-1" date="1739361600">- Rebase to 0.9-rc2 (RHEL-78770)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-2" date="1752062400">- Fix for CVE-2024-52615 (RHEL-67715)</changelog>
</package>
<package pkgid="b6aca7b84881bc9f1b4eee17290b3249fdd23ff2e3fe672bb00fb104ab544586" name="avahi-ui-devel" arch="x86_64">
  <version epoch="0" ver="0.9~rc2" rel="2.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-25" date="1690372800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8-28" date="1719489600">- TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-29" date="1724328000">- fix file attributes of /run/avahi-daemon (RHEL-55762)
- fix SAST issues (RHEL-40016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-1" date="1739361600">- Rebase to 0.9-rc2 (RHEL-78770)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-2" date="1752062400">- Fix for CVE-2024-52615 (RHEL-67715)</changelog>
</package>
<package pkgid="717ccbe42173580fe514cfcd2ee52e606889ea5eeca5b707c79b96654bf26678" name="avahi-ui-gtk3" arch="x86_64">
  <version epoch="0" ver="0.9~rc2" rel="2.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-25" date="1690372800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8-28" date="1719489600">- TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-29" date="1724328000">- fix file attributes of /run/avahi-daemon (RHEL-55762)
- fix SAST issues (RHEL-40016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-1" date="1739361600">- Rebase to 0.9-rc2 (RHEL-78770)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-2" date="1752062400">- Fix for CVE-2024-52615 (RHEL-67715)</changelog>
</package>
<package pkgid="687dbbfdf72b63f529c431a58a7d0998a0fedf565957cc71b7f7c9a091b83b06" name="avahi-ui-tools" arch="x86_64">
  <version epoch="0" ver="0.9~rc2" rel="2.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-25" date="1690372800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8-28" date="1719489600">- TigerVNC won't be shipped in RHEL 10, prefer GNOME Connections instead</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-29" date="1724328000">- fix file attributes of /run/avahi-daemon (RHEL-55762)
- fix SAST issues (RHEL-40016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-1" date="1739361600">- Rebase to 0.9-rc2 (RHEL-78770)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.9~rc2-2" date="1752062400">- Fix for CVE-2024-52615 (RHEL-67715)</changelog>
</package>
<package pkgid="42a44735c3f018d0afacb077f4f171226b5cc3877cc7b5ecb26cb32e0fde6eb7" name="awscli2" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="1.el10_2"/>
  <changelog author="Major Hayden &lt;major@redhat.com&gt; - 2.17.18-2" date="1724328000">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Major Hayden &lt;major@redhat.com&gt; - 2.17.18-3" date="1724328001">- Avoid jsonschema dep by skipping tests</changelog>
  <changelog author="Major Hayden &lt;major@redhat.com&gt; - 2.17.18-4" date="1724328002">- Add less to recommended packages</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.17.18-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="ccowman &lt;ccowman@redhat.com&gt; - 2.22.9-1" date="1734955200">- Revise patches and update to 2.22.9</changelog>
  <changelog author="Kseniia Nivnia &lt;knivnia@redhat.com&gt; - 2.27.0-1" date="1753358400">- Update to 2.27.0</changelog>
  <changelog author="Kseniia Nivnia &lt;knivnia@redhat.com&gt; - 2.33.0-1" date="1773403200">- Update to v2.33.0</changelog>
</package>
<package pkgid="41afe28baba8cbd49067fe9e0b2c16ff34219f1d9c2cc4338815a2b8cea1ab6c" name="azure-vm-utils" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="1.el10"/>
  <changelog author="Huijuan Zhao &lt;huzhao@redhat.com&gt; - 0.5.2-1" date="1744891200">- Initial commit on c10s</changelog>
  <changelog author="Huijuan Zhao &lt;huzhao@redhat.com&gt; - 0.5.2-2" date="1744891201">- Enable gating for azure-vm-utils</changelog>
  <changelog author="Huijuan Zhao &lt;huzhao@redhat.com&gt; - 0.7.0-1" date="1761134400">- Rebase to 0.7.0 [RHEL-99444]
- Resolves: RHEL-99444
  ([Azure][rhel-10] azure-vm-utils rebase)</changelog>
</package>
<package pkgid="f7954debce47b789104e313f8131c4b4e4d779e6f6fa494a184c8d569591ce6f" name="babel" arch="noarch">
  <version epoch="0" ver="2.13.1" rel="5.el10"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.12.1-1" date="1677672000">- Update to 2.12.1</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.12.1-2" date="1681128000">- Fix DST-related test failures</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.12.1-3" date="1685966400">- Avoid libfaketime and python-freezegun deps in RHEL builds</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.12.1-4" date="1686657600">- Bootstrap for Python 3.12</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.12.1-5" date="1686916800">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12.1-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.13.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.13.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6851705ad45f839b5159d0f5bb0923dd70fc97b378ef4d94ca7605d365dc9b70" name="babel-doc" arch="noarch">
  <version epoch="0" ver="2.13.1" rel="5.el10"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.12.1-1" date="1677672000">- Update to 2.12.1</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.12.1-2" date="1681128000">- Fix DST-related test failures</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.12.1-3" date="1685966400">- Avoid libfaketime and python-freezegun deps in RHEL builds</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.12.1-4" date="1686657600">- Bootstrap for Python 3.12</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.12.1-5" date="1686916800">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12.1-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.13.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.13.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b1fa2cb6aa7c168bef0f130bb7327ad65ecb0c7815b409b8aedcea990b8f3123" name="babeltrace" arch="x86_64">
  <version epoch="0" ver="1.5.11" rel="9.el10"/>
  <changelog author="Michael Jeanson &lt;mjeanson@efficios.com&gt; - 1.5.11-1" date="1667390400">- New upstream release
- Drop patches merged upstream
- Add builddep on python3-setuptools for Python 3.12+</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.11-2" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@efficios.com&gt; - 1.5.11-3" date="1683547200">- migrated to SPDX license</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt;" date="1685448000">- Update license expression.</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.5.11-4" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.11-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.11-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.11-7" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.11-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.11-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8a27f8b7f5105cf797e89d9db1fd97e7942cc407fa6048e4fce5a70b226b4677" name="babl" arch="x86_64">
  <version epoch="0" ver="0.1.106" rel="1.el10"/>
  <changelog author="Rocky Linux Build System (Peridot) &lt;releng@rockylinux.org&gt; - 0.1.106-1.el10" date="1709121600">- local build</changelog>
</package>
<package pkgid="91a5b95d3e909d5db849ed93ee9ed1e17018536eac71e7b8b23ed57d631372d9" name="babl-devel" arch="x86_64">
  <version epoch="0" ver="0.1.106" rel="1.el10"/>
  <changelog author="Rocky Linux Build System (Peridot) &lt;releng@rockylinux.org&gt; - 0.1.106-1.el10" date="1709121600">- local build</changelog>
</package>
<package pkgid="614060a1a5696cd78c3690e0cd9b9f6147593f083fd6ceee06c319f4eb901b86" name="babl-devel-docs" arch="noarch">
  <version epoch="0" ver="0.1.106" rel="1.el10"/>
  <changelog author="Rocky Linux Build System (Peridot) &lt;releng@rockylinux.org&gt; - 0.1.106-1.el10" date="1709121600">- local build</changelog>
</package>
<package pkgid="2e479248f6ed8d0ca1fc26322ae40fb4ab985de948c51f2cf46de9bc65108b21" name="baobab" arch="x86_64">
  <version epoch="0" ver="46.0" rel="4.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 44.0-1" date="1679227200">- Update to 44.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45~alpha-1" date="1688472000">- Update to 45.alpha</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45~alpha-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0-1" date="1695211200">- Update to 45.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 46.0-1" date="1711108800">- Update to 46.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 46.0-3" date="1719403200">- Disable column reordering of FolderDisplay (RHEL-40874, RHEL-40875)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4af901669a21dca5daeef8dfbb57ce115bf5c80c246c8693576703e2a81d189b" name="basesystem" arch="noarch">
  <version epoch="0" ver="11" rel="22.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11-15" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 11-17" date="1685707200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11-18" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11-19" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11-20" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 11-21" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 11-22" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7cab082f05eaf1f45bcf84c0a1c8207ca21864a88eef48656098a6b6ec847218" name="bash" arch="x86_64">
  <version epoch="0" ver="5.2.26" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.15-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.2.21-1" date="1699617600">- Update to bash-5.2 patchlevel 21
  Resolves: #2248970</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 5.2.21-2" date="1700481600">- Fix another C compatibility issue in the configure script</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.21-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.2.26-1" date="1705924800">- Update to bash-5.2 patchlevel 26
  Resolves: #2259619</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.26-2" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.2.26-3" date="1707480000">- Update patch for audit logs
  Resolves: RHEL-22619</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.2.26-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.2.26-5" date="1724932800">- Fix issues identified by OpenScanHub
  Resolves: RHEL-44649</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.2.26-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="16a21353657f8e35b36e8a6e0587e46e7ca27e8ee60eaf97363b35de417af3f6" name="bash-color-prompt" arch="noarch">
  <version epoch="0" ver="0.4.2" rel="3.el10"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.1-6" date="1692100800">- rename source package to shell-color-prompt</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.1.1-1" date="1699531200">- only show error code if PROMPT_ERROR set</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.2-1" date="1699617600">- add PROMPT_DIR_COLOR to change the dir color (Thomas Steenholdt, #2239152)
- also check for bash default prompt for login shell (Sam Morris, #2248853)
- add PROMPT_BRACKETS to surround the prompt with traditional brackets
  (based on feedback from Thomas Steenholdt, #2239152)</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.2.1-1" date="1699704000">- add a container ⬢ symbol prefix</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.3-1" date="1699876800">- add PROMPT_SEPARATOR and PROMPT_DIRECTORY default variables (#2239152)
- add optional PROMPT_START and PROMPT_END (replaces PROMPT_BRACKETS)
- add prompt_default(), prompt_traditional(), and prompt_default_os()
- expand README.md</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.4-1" date="1699876801">- define PROMPT_COLOR
- add PROMPT_USERHOST default variable
- add colorpre and colorsuf variables
- drop PROMPT_ERROR
- drop built-in container support for now
- reset color after $ prompt
- only define default functions if setting PS1</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.4.1-1" date="1706184000">- also enable for Linux console (TERM=linux)</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.4.2-1" date="1717761600">- test for BASH_VERSION to avoid running for other shells
  (#2279643, Nathan Grennan)
- fix condition regression introduced in 0.4.1 linux console change
- rename prompt_color_force variable to bash_prompt_color_force</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7f762f53ea63eed5df1e7415b0796e7178fd04c20665670b11ee6b2785191050" name="bash-completion" arch="noarch">
  <version epoch="1" ver="2.11" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.11-9" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:2.11-10" date="1681214400">- migrate to SPDX license format</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 1:2.11-11" date="1686916800">- Remove bash completions for javaws
  Resolves: #2188865</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.11-12" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.11-13" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.11-14" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.11-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.11-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1d383c9896f62971cdc91e83807617898f80823344dc2ebf9cc97053bbe6688d" name="bash-devel" arch="x86_64">
  <version epoch="0" ver="5.2.26" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.15-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.2.21-1" date="1699617600">- Update to bash-5.2 patchlevel 21
  Resolves: #2248970</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 5.2.21-2" date="1700481600">- Fix another C compatibility issue in the configure script</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.21-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.2.26-1" date="1705924800">- Update to bash-5.2 patchlevel 26
  Resolves: #2259619</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.26-2" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.2.26-3" date="1707480000">- Update patch for audit logs
  Resolves: RHEL-22619</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.2.26-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.2.26-5" date="1724932800">- Fix issues identified by OpenScanHub
  Resolves: RHEL-44649</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.2.26-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="45c53a687da25bf53ec53352357445b7c50a2556de0df5837960b86d2196e0d6" name="bash-doc" arch="x86_64">
  <version epoch="0" ver="5.2.26" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.15-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.2.21-1" date="1699617600">- Update to bash-5.2 patchlevel 21
  Resolves: #2248970</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 5.2.21-2" date="1700481600">- Fix another C compatibility issue in the configure script</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.21-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.2.26-1" date="1705924800">- Update to bash-5.2 patchlevel 26
  Resolves: #2259619</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.26-2" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.2.26-3" date="1707480000">- Update patch for audit logs
  Resolves: RHEL-22619</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.2.26-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.2.26-5" date="1724932800">- Fix issues identified by OpenScanHub
  Resolves: RHEL-44649</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.2.26-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="52136f8215a8613a93c535b21c8afab11934f30c65cd7482e6c06fdd45a9c611" name="bc" arch="x86_64">
  <version epoch="0" ver="1.07.1" rel="23.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.07.1-17" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 1.07.1-18" date="1687694400">- Migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.07.1-19" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.07.1-20" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.07.1-21" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.07.1-22" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.07.1-23" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="56b895b9d2f49fe575f1dacce242cc382da4c48232eb7e24dc0b40f20bf9e23b" name="bcc" arch="x86_64">
  <version epoch="0" ver="0.35.0" rel="3.el10"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-3" date="1728043200">- Remove python3-pyelftools dependency (RHEL-60064)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-4" date="1730203200">- Fix LLVM 19 build (RHEL-64925)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-5" date="1730808000">- Explicitely disable blazesym support (RHEL-65850)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-6" date="1730894400">- Fix gating tests of libbpf gating.</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.32.0-1" date="1736856000">- Rebase to the latest version (RHEL-63886)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.34.0-1" date="1747656000">- Rebase to the latest version (RHEL-78921)
- Rebuild with LLVM 20 (RHEL-81772)
- Silence warning of trace tools (RHEL-68952)
- Fix bpf-runqlen (RHEL-91190)
- Fix sslsniff and sofdsnoop (RHEL-58348)
- Fix slabratetop (RHEL-58810)
- Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947)
- Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001)
- Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529)
- Fix multiples ppc64 tools (RHEL-58147)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.34.0-2" date="1753704000">- Fix bio* tools tracepoints (RHEL-99677)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.35.0-1" date="1761566400">- Rebase to version 0.35.0 (RHEL-79002)
- Fix bpf-ksnoop (RHEL-93852)
- Fix bpf-javagc (RHEL-75531)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.35.0-2" date="1761739200">- Rebuild in a side-tag</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.35.0-3" date="1767787200">- Rebuild with LLVM 21 (RHEL-108333)</changelog>
</package>
<package pkgid="87a809313598256523aa9f43cf9c855a29644a6d8ff14c5c477cdae724abb254" name="bcc-devel" arch="x86_64">
  <version epoch="0" ver="0.35.0" rel="3.el10"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-3" date="1728043200">- Remove python3-pyelftools dependency (RHEL-60064)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-4" date="1730203200">- Fix LLVM 19 build (RHEL-64925)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-5" date="1730808000">- Explicitely disable blazesym support (RHEL-65850)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-6" date="1730894400">- Fix gating tests of libbpf gating.</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.32.0-1" date="1736856000">- Rebase to the latest version (RHEL-63886)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.34.0-1" date="1747656000">- Rebase to the latest version (RHEL-78921)
- Rebuild with LLVM 20 (RHEL-81772)
- Silence warning of trace tools (RHEL-68952)
- Fix bpf-runqlen (RHEL-91190)
- Fix sslsniff and sofdsnoop (RHEL-58348)
- Fix slabratetop (RHEL-58810)
- Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947)
- Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001)
- Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529)
- Fix multiples ppc64 tools (RHEL-58147)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.34.0-2" date="1753704000">- Fix bio* tools tracepoints (RHEL-99677)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.35.0-1" date="1761566400">- Rebase to version 0.35.0 (RHEL-79002)
- Fix bpf-ksnoop (RHEL-93852)
- Fix bpf-javagc (RHEL-75531)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.35.0-2" date="1761739200">- Rebuild in a side-tag</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.35.0-3" date="1767787200">- Rebuild with LLVM 21 (RHEL-108333)</changelog>
</package>
<package pkgid="622674cbbc64ddf7ece275096e941eb960727abda7beaea0f8b5627bec11e66d" name="bcc-doc" arch="noarch">
  <version epoch="0" ver="0.35.0" rel="3.el10"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-3" date="1728043200">- Remove python3-pyelftools dependency (RHEL-60064)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-4" date="1730203200">- Fix LLVM 19 build (RHEL-64925)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-5" date="1730808000">- Explicitely disable blazesym support (RHEL-65850)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-6" date="1730894400">- Fix gating tests of libbpf gating.</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.32.0-1" date="1736856000">- Rebase to the latest version (RHEL-63886)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.34.0-1" date="1747656000">- Rebase to the latest version (RHEL-78921)
- Rebuild with LLVM 20 (RHEL-81772)
- Silence warning of trace tools (RHEL-68952)
- Fix bpf-runqlen (RHEL-91190)
- Fix sslsniff and sofdsnoop (RHEL-58348)
- Fix slabratetop (RHEL-58810)
- Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947)
- Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001)
- Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529)
- Fix multiples ppc64 tools (RHEL-58147)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.34.0-2" date="1753704000">- Fix bio* tools tracepoints (RHEL-99677)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.35.0-1" date="1761566400">- Rebase to version 0.35.0 (RHEL-79002)
- Fix bpf-ksnoop (RHEL-93852)
- Fix bpf-javagc (RHEL-75531)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.35.0-2" date="1761739200">- Rebuild in a side-tag</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.35.0-3" date="1767787200">- Rebuild with LLVM 21 (RHEL-108333)</changelog>
</package>
<package pkgid="42ec66345d6f880520902c009f1ccf3dea2ac88bd0599b4ab522cbe7948761f0" name="bcc-tools" arch="x86_64">
  <version epoch="0" ver="0.35.0" rel="3.el10"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-3" date="1728043200">- Remove python3-pyelftools dependency (RHEL-60064)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-4" date="1730203200">- Fix LLVM 19 build (RHEL-64925)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-5" date="1730808000">- Explicitely disable blazesym support (RHEL-65850)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-6" date="1730894400">- Fix gating tests of libbpf gating.</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.32.0-1" date="1736856000">- Rebase to the latest version (RHEL-63886)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.34.0-1" date="1747656000">- Rebase to the latest version (RHEL-78921)
- Rebuild with LLVM 20 (RHEL-81772)
- Silence warning of trace tools (RHEL-68952)
- Fix bpf-runqlen (RHEL-91190)
- Fix sslsniff and sofdsnoop (RHEL-58348)
- Fix slabratetop (RHEL-58810)
- Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947)
- Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001)
- Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529)
- Fix multiples ppc64 tools (RHEL-58147)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.34.0-2" date="1753704000">- Fix bio* tools tracepoints (RHEL-99677)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.35.0-1" date="1761566400">- Rebase to version 0.35.0 (RHEL-79002)
- Fix bpf-ksnoop (RHEL-93852)
- Fix bpf-javagc (RHEL-75531)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.35.0-2" date="1761739200">- Rebuild in a side-tag</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.35.0-3" date="1767787200">- Rebuild with LLVM 21 (RHEL-108333)</changelog>
</package>
<package pkgid="e4f3f431a54c6dbf3a0cb4b5917829ffef03492158f6c9ddf308862f474c0ddd" name="bcel" arch="noarch">
  <version epoch="0" ver="6.8.1" rel="4.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.7.0-1" date="1692360000">- Update to upstream version 6.7.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.7.0-2" date="1692360001">- Add missing build-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.7.0-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 6.8.0-1" date="1702296000">- Update to upstream version 6.8.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.8.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.8.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.8.1-1" date="1706788800">- Update to upstream version 6.8.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.8.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.8.1-3" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.8.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="793da28302998bc120ff472d6ea6621937c13d4067b0808fe80668b526fbda62" name="bcel-javadoc" arch="noarch">
  <version epoch="0" ver="6.8.1" rel="4.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.7.0-1" date="1692360000">- Update to upstream version 6.7.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.7.0-2" date="1692360001">- Add missing build-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.7.0-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 6.8.0-1" date="1702296000">- Update to upstream version 6.8.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.8.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.8.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.8.1-1" date="1706788800">- Update to upstream version 6.8.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.8.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.8.1-3" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.8.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3cb4e34255d55a01562634b44a2b0003bdd3133ab8380baca5d6a901a2ad682e" name="bdf2psf" arch="noarch">
  <version epoch="0" ver="1.224" rel="3.el10"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.220-1" date="1684238400">- Update to latest upstream version
  Resolves: #2196018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.221-1" date="1685016000">- Update to latest upstream version
  Resolves: #2208916</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.222-1" date="1687521600">- Update to latest upstream version
  Resolves: #2216578</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.222-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.223-1" date="1698235200">- Update to latest upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.223-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.223-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.224-1" date="1706443200">- Update to latest upstream version</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.224-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.224-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5c406fac110f998102cdb823643677ab0d78ad3dc71e987d8292ae0ab478ee81" name="bdftopcf" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-6" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt;" date="1693915200">- SPDX migration: change to SPDX license identifier</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.1.1-1" date="1698321600">- bdftopcf 1.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a70423d8150304b9587f1aa32e32d4e9e2e23315d2b16d1cf4e7b8ba20b5b5a4" name="beust-jcommander" arch="noarch">
  <version epoch="0" ver="1.82" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-2" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.82-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.82-5" date="1698753600">- Fix license directory permissions
- Resolves: rhbz#2144648</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-7" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.82-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.82-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.82-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8601dc049a0024109a1c4d71d7a35657fbf64a8bfcafa62957adcb22b4798858" name="beust-jcommander-javadoc" arch="noarch">
  <version epoch="0" ver="1.82" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-2" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.82-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.82-5" date="1698753600">- Fix license directory permissions
- Resolves: rhbz#2144648</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-7" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.82-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.82-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.82-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="99ae5a62986fb98b72a483d4c9bd5e1c83108eca7db8b60ab043bfcd07f785c8" name="bind" arch="x86_64">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-7" date="1752062400">- Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.18.33-8" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-9" date="1757678401">- Decode IDN names on input in all situations in utilities (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-10" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-11" date="1759492800">- Move named.* files from /var/named into /usr/share/named
- Move named.ca into /etc/named.ca</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-12" date="1761220800">- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-13" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
</package>
<package pkgid="7f7a0b2fb96592c38b909e9a44d4f07d0147e0dad356a82797cfeb3c3a134943" name="bind" arch="x86_64">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.4" date="1784808000">- Fix assertion failure on malformed NSEC/NSEC3 responses
  (CVE-2026-13204)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.5" date="1784808001">- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.6" date="1784808002">- Fix RRSIG label count validation for wildcard cache poisoning
  (CVE-2026-11721)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.7" date="1784808003">- Fix reference-counted dns_slabheaders in cache (CVE-2026-11622)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.9" date="1784894400">- Reject out-of-zone NSEC next owner names (CVE-2026-13321)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.10" date="1785153600">- Validate NSEC3 signer matches owning zone (CVE-2026-10723)</changelog>
</package>
<package pkgid="b2ba776552b028fe17b4a0fa1b5d76351bfe35b45ab5ce10bd400554c58cc63b" name="bind" arch="x86_64">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.18.33-8" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-9" date="1757678401">- Decode IDN names on input in all situations in utilities (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-10" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-11" date="1759492800">- Move named.* files from /var/named into /usr/share/named
- Move named.ca into /etc/named.ca</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-12" date="1761220800">- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-13" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="c533fafe39544e92dd6c5bea9e7047a6ff7dbf25e0e32f45584cce8cdfdb871f" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-7" date="1752062400">- Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.18.33-8" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-9" date="1757678401">- Decode IDN names on input in all situations in utilities (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-10" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-11" date="1759492800">- Move named.* files from /var/named into /usr/share/named
- Move named.ca into /etc/named.ca</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-12" date="1761220800">- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-13" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
</package>
<package pkgid="3ea0d270c87dbdaa5a1f29c40b94616e9ec9bb85f6bc979989344526ce68a6c5" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.4" date="1784808000">- Fix assertion failure on malformed NSEC/NSEC3 responses
  (CVE-2026-13204)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.5" date="1784808001">- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.6" date="1784808002">- Fix RRSIG label count validation for wildcard cache poisoning
  (CVE-2026-11721)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.7" date="1784808003">- Fix reference-counted dns_slabheaders in cache (CVE-2026-11622)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.9" date="1784894400">- Reject out-of-zone NSEC next owner names (CVE-2026-13321)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.10" date="1785153600">- Validate NSEC3 signer matches owning zone (CVE-2026-10723)</changelog>
</package>
<package pkgid="328d8eebaeed1af3a1f36eb6ed88cbc59cc469d00c392a0d43e310b22eb1a4e6" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.18.33-8" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-9" date="1757678401">- Decode IDN names on input in all situations in utilities (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-10" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-11" date="1759492800">- Move named.* files from /var/named into /usr/share/named
- Move named.ca into /etc/named.ca</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-12" date="1761220800">- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-13" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="17549d44728d318f61e5fe5a625cd7eefeba08026061b797fec6cbe706db5750" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-7" date="1752062400">- Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.18.33-8" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-9" date="1757678401">- Decode IDN names on input in all situations in utilities (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-10" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-11" date="1759492800">- Move named.* files from /var/named into /usr/share/named
- Move named.ca into /etc/named.ca</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-12" date="1761220800">- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-13" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
</package>
<package pkgid="86aa5ac08d479bd3d04931e44ca7ed814385fa218b13a7800387e4fa73007f0f" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.4" date="1784808000">- Fix assertion failure on malformed NSEC/NSEC3 responses
  (CVE-2026-13204)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.5" date="1784808001">- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.6" date="1784808002">- Fix RRSIG label count validation for wildcard cache poisoning
  (CVE-2026-11721)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.7" date="1784808003">- Fix reference-counted dns_slabheaders in cache (CVE-2026-11622)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.9" date="1784894400">- Reject out-of-zone NSEC next owner names (CVE-2026-13321)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.10" date="1785153600">- Validate NSEC3 signer matches owning zone (CVE-2026-10723)</changelog>
</package>
<package pkgid="23b57b8a5357be6c7fd8c05c47404ee45bac182a77992cb5d4e5e3dca5750418" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.18.33-8" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-9" date="1757678401">- Decode IDN names on input in all situations in utilities (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-10" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-11" date="1759492800">- Move named.* files from /var/named into /usr/share/named
- Move named.ca into /etc/named.ca</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-12" date="1761220800">- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-13" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="af218321163eb9b857318122fb018268546ad866235a4159b98126dcdfe4db1e" name="bind-dnssec-utils" arch="x86_64">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-7" date="1752062400">- Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.18.33-8" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-9" date="1757678401">- Decode IDN names on input in all situations in utilities (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-10" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-11" date="1759492800">- Move named.* files from /var/named into /usr/share/named
- Move named.ca into /etc/named.ca</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-12" date="1761220800">- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-13" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
</package>
<package pkgid="383d1bc731a4fe5d03671151b7df2deb37fa252988c2b2c1797adf6567097225" name="bind-dnssec-utils" arch="x86_64">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.4" date="1784808000">- Fix assertion failure on malformed NSEC/NSEC3 responses
  (CVE-2026-13204)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.5" date="1784808001">- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.6" date="1784808002">- Fix RRSIG label count validation for wildcard cache poisoning
  (CVE-2026-11721)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.7" date="1784808003">- Fix reference-counted dns_slabheaders in cache (CVE-2026-11622)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.9" date="1784894400">- Reject out-of-zone NSEC next owner names (CVE-2026-13321)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.10" date="1785153600">- Validate NSEC3 signer matches owning zone (CVE-2026-10723)</changelog>
</package>
<package pkgid="f0daa7244f777c746a6b26cbacaa0cfb565256c473312be826bb87ffda712943" name="bind-dnssec-utils" arch="x86_64">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.18.33-8" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-9" date="1757678401">- Decode IDN names on input in all situations in utilities (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-10" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-11" date="1759492800">- Move named.* files from /var/named into /usr/share/named
- Move named.ca into /etc/named.ca</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-12" date="1761220800">- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-13" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="b91370e0ac21c0fbe987ac54b47d010b2eb4abcd50b12a00b922b31f57ba044a" name="bind-doc" arch="noarch">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-7" date="1752062400">- Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.18.33-8" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-9" date="1757678401">- Decode IDN names on input in all situations in utilities (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-10" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-11" date="1759492800">- Move named.* files from /var/named into /usr/share/named
- Move named.ca into /etc/named.ca</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-12" date="1761220800">- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-13" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
</package>
<package pkgid="4c5e02add5d6363988640e0988284eaf5ae3cfb45a96b1b996353448ac56b59d" name="bind-doc" arch="noarch">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.4" date="1784808000">- Fix assertion failure on malformed NSEC/NSEC3 responses
  (CVE-2026-13204)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.5" date="1784808001">- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.6" date="1784808002">- Fix RRSIG label count validation for wildcard cache poisoning
  (CVE-2026-11721)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.7" date="1784808003">- Fix reference-counted dns_slabheaders in cache (CVE-2026-11622)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.9" date="1784894400">- Reject out-of-zone NSEC next owner names (CVE-2026-13321)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.10" date="1785153600">- Validate NSEC3 signer matches owning zone (CVE-2026-10723)</changelog>
</package>
<package pkgid="063626ac7e2e25c2fd5de63c621dba7238f6df973472f04b1ff0f66e6da8682b" name="bind-doc" arch="noarch">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.18.33-8" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-9" date="1757678401">- Decode IDN names on input in all situations in utilities (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-10" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-11" date="1759492800">- Move named.* files from /var/named into /usr/share/named
- Move named.ca into /etc/named.ca</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-12" date="1761220800">- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-13" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="d73cca9fdc207cfe7ebfed1618960d6e894d1253a2a690540fecd7511eeabed2" name="bind-dyndb-ldap" arch="x86_64">
  <version epoch="0" ver="11.11" rel="2.el10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 11.10-21" date="1695643200">- Support for bind 9.18.19 (#2232346)
- Require autoconf-archive at build time</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 11.10-22" date="1700481600">- Rebuilt for BIND 9.18.20 (#2249835)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 11.10-23" date="1705320000">- Rebuilt for BIND 9.18.21 (#2255407)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11.10-24" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11.10-25" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 11.10-26" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 11.10-27" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 11.10-28" date="1731499200">- Replace dependency on openssl-pkcs11 by pkcs11-provider
- Resolves: RHEL-30556</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 11.11-1" date="1739275200">- Release 11.11, Support BIND 9.18
  Resolves: RHEL-78925</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 11.11-2" date="1739361600">- Release bump, fixed date for previous changelog entry
  Resolves: RHEL-78925</changelog>
</package>
<package pkgid="5290dd73dd8cd49b85b9c7c24e2277f40c41626b8b36efed13e1b274074f0aa1" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-7" date="1752062400">- Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.18.33-8" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-9" date="1757678401">- Decode IDN names on input in all situations in utilities (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-10" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-11" date="1759492800">- Move named.* files from /var/named into /usr/share/named
- Move named.ca into /etc/named.ca</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-12" date="1761220800">- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-13" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
</package>
<package pkgid="ac22e6db661ba62ff082d6e5294153a576c3289e7421f891075006f4406c76c4" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.4" date="1784808000">- Fix assertion failure on malformed NSEC/NSEC3 responses
  (CVE-2026-13204)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.5" date="1784808001">- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.6" date="1784808002">- Fix RRSIG label count validation for wildcard cache poisoning
  (CVE-2026-11721)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.7" date="1784808003">- Fix reference-counted dns_slabheaders in cache (CVE-2026-11622)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.9" date="1784894400">- Reject out-of-zone NSEC next owner names (CVE-2026-13321)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.10" date="1785153600">- Validate NSEC3 signer matches owning zone (CVE-2026-10723)</changelog>
</package>
<package pkgid="0a1ab103e538d7e2d6f433990e4792d9621fbb5f8cdd44ee2093a15cff26de54" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.18.33-8" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-9" date="1757678401">- Decode IDN names on input in all situations in utilities (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-10" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-11" date="1759492800">- Move named.* files from /var/named into /usr/share/named
- Move named.ca into /etc/named.ca</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-12" date="1761220800">- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-13" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="2ad0e3b68b9a288066aa865910d2fa7bfdc3de784ed4f57f9577869b1d532e0e" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-7" date="1752062400">- Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.18.33-8" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-9" date="1757678401">- Decode IDN names on input in all situations in utilities (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-10" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-11" date="1759492800">- Move named.* files from /var/named into /usr/share/named
- Move named.ca into /etc/named.ca</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-12" date="1761220800">- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-13" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
</package>
<package pkgid="470321a2c37f6c39ee7f0684c36c00a139e950ddb2714a6ac3c706283b610ca3" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.4" date="1784808000">- Fix assertion failure on malformed NSEC/NSEC3 responses
  (CVE-2026-13204)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.5" date="1784808001">- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.6" date="1784808002">- Fix RRSIG label count validation for wildcard cache poisoning
  (CVE-2026-11721)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.7" date="1784808003">- Fix reference-counted dns_slabheaders in cache (CVE-2026-11622)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.9" date="1784894400">- Reject out-of-zone NSEC next owner names (CVE-2026-13321)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.10" date="1785153600">- Validate NSEC3 signer matches owning zone (CVE-2026-10723)</changelog>
</package>
<package pkgid="fed371a3681da536e0778643a4b6d9543a2ca15b218fa97d11c331074e4f2c1a" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.18.33-8" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-9" date="1757678401">- Decode IDN names on input in all situations in utilities (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-10" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-11" date="1759492800">- Move named.* files from /var/named into /usr/share/named
- Move named.ca into /etc/named.ca</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-12" date="1761220800">- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-13" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="b92b16958c7a8679e81d8c0805f61d1bf713bfba019cb0f686d9dfae4f0e6525" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-7" date="1752062400">- Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.18.33-8" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-9" date="1757678401">- Decode IDN names on input in all situations in utilities (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-10" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-11" date="1759492800">- Move named.* files from /var/named into /usr/share/named
- Move named.ca into /etc/named.ca</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-12" date="1761220800">- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-13" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
</package>
<package pkgid="d31277a20f1cb2c0d508e052eaf24caa8b22eec2370faefc2192652e1e7a7843" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.4" date="1784808000">- Fix assertion failure on malformed NSEC/NSEC3 responses
  (CVE-2026-13204)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.5" date="1784808001">- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.6" date="1784808002">- Fix RRSIG label count validation for wildcard cache poisoning
  (CVE-2026-11721)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.7" date="1784808003">- Fix reference-counted dns_slabheaders in cache (CVE-2026-11622)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.9" date="1784894400">- Reject out-of-zone NSEC next owner names (CVE-2026-13321)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 32:9.18.33-15.10" date="1785153600">- Validate NSEC3 signer matches owning zone (CVE-2026-10723)</changelog>
</package>
<package pkgid="fd5f29b7054557bebe26e21eadaa6139925f5997158b8b82f012ca2d4d1f7bf3" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.18.33" rel="15.el10_2.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;&lt;pemensik@redhat.com&gt;&gt; - 32:9.18.33-8" date="1757678400">- logrotate: skip if empty and remove old variants (RHEL-113942)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-9" date="1757678401">- Decode IDN names on input in all situations in utilities (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-10" date="1758024000">- Fix failures in idna system test (RHEL-66172)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-11" date="1759492800">- Move named.* files from /var/named into /usr/share/named
- Move named.ca into /etc/named.ca</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-12" date="1761220800">- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-13" date="1761912000">- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-14" date="1765540800">- Create /var/named directories for bind-chroot (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15" date="1769601600">- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.1" date="1774612800">- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.18.33-15.2" date="1779710400">- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)</changelog>
</package>
<package pkgid="bda54668cc6c32b272e212777fa00fb57ae0921c5af30ee136e5e3236f37c6d4" name="bindgen-cli" arch="x86_64">
  <version epoch="0" ver="0.72.1" rel="1.el10"/>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 0.72.0-1" date="1752062400">- Initial commit on c10s</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 0.72.0-2" date="1752148800">- Initialize gating</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 0.72.1-1" date="1769774400">- Update to 0.72.1</changelog>
</package>
<package pkgid="5a9bdb2ce9cfb33c93bc7cebd6993f7d69332a2ed49012ac94dc2f1d99f3a927" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.41" rel="63.el10"/>
  <changelog author="Andrea Bolognani  &lt;abologna@redhat.com&gt; - 2.41-54" date="1743595200">- Fix BuildRequires for non-gold architectures.  (RHEL-85855)
- Fix RISC-V ld testsuite failures (thanks Nick Clifton).  (RHEL-85855)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-55" date="1744718400">- Adds z17 as a cpu name for the s390x architecture.  (RHEL-87215)</changelog>
  <changelog author="Andrea Bolognani  &lt;abologna@redhat.com&gt; - 2.41-56" date="1745841600">- Add basic support for RISC-V 64-bit EFI objects.  (RHEL-88815)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-57" date="1751284800">- Add fix for CVE-2025-5244.  (RHEL-100417)
- USe correct fix for CVE-2025-5702.  (RHEL-100159)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-58" date="1754481600">- Remove workaround for CVE-2025-5702.  (RHEL-100159)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-59" date="1762257600">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-125205)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-60" date="1762776000">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-126877)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-61" date="1765886400">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-132254)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-62" date="1768824000">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-142279)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-63" date="1769428800">- Run linker tests for cross binutils.  Compare the native and cross results.  (RHEL-117111)</changelog>
</package>
<package pkgid="0907f95d4351afcac619be9aaf398d05389eba037ad5080c09254824e4539d84" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.41" rel="63.el10"/>
  <changelog author="Andrea Bolognani  &lt;abologna@redhat.com&gt; - 2.41-54" date="1743595200">- Fix BuildRequires for non-gold architectures.  (RHEL-85855)
- Fix RISC-V ld testsuite failures (thanks Nick Clifton).  (RHEL-85855)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-55" date="1744718400">- Adds z17 as a cpu name for the s390x architecture.  (RHEL-87215)</changelog>
  <changelog author="Andrea Bolognani  &lt;abologna@redhat.com&gt; - 2.41-56" date="1745841600">- Add basic support for RISC-V 64-bit EFI objects.  (RHEL-88815)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-57" date="1751284800">- Add fix for CVE-2025-5244.  (RHEL-100417)
- USe correct fix for CVE-2025-5702.  (RHEL-100159)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-58" date="1754481600">- Remove workaround for CVE-2025-5702.  (RHEL-100159)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-59" date="1762257600">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-125205)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-60" date="1762776000">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-126877)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-61" date="1765886400">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-132254)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-62" date="1768824000">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-142279)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-63" date="1769428800">- Run linker tests for cross binutils.  Compare the native and cross results.  (RHEL-117111)</changelog>
</package>
<package pkgid="471e105d75907c03cbffbf5137ee48401286d1872e1c24dfaca807632f010461" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.41" rel="63.el10"/>
  <changelog author="Andrea Bolognani  &lt;abologna@redhat.com&gt; - 2.41-54" date="1743595200">- Fix BuildRequires for non-gold architectures.  (RHEL-85855)
- Fix RISC-V ld testsuite failures (thanks Nick Clifton).  (RHEL-85855)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-55" date="1744718400">- Adds z17 as a cpu name for the s390x architecture.  (RHEL-87215)</changelog>
  <changelog author="Andrea Bolognani  &lt;abologna@redhat.com&gt; - 2.41-56" date="1745841600">- Add basic support for RISC-V 64-bit EFI objects.  (RHEL-88815)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-57" date="1751284800">- Add fix for CVE-2025-5244.  (RHEL-100417)
- USe correct fix for CVE-2025-5702.  (RHEL-100159)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-58" date="1754481600">- Remove workaround for CVE-2025-5702.  (RHEL-100159)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-59" date="1762257600">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-125205)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-60" date="1762776000">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-126877)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-61" date="1765886400">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-132254)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-62" date="1768824000">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-142279)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-63" date="1769428800">- Run linker tests for cross binutils.  Compare the native and cross results.  (RHEL-117111)</changelog>
</package>
<package pkgid="a0898261790007374610c0e4ab824cbde65e572d5365749879249ff9a62ad2f7" name="binutils-gprofng" arch="x86_64">
  <version epoch="0" ver="2.41" rel="63.el10"/>
  <changelog author="Andrea Bolognani  &lt;abologna@redhat.com&gt; - 2.41-54" date="1743595200">- Fix BuildRequires for non-gold architectures.  (RHEL-85855)
- Fix RISC-V ld testsuite failures (thanks Nick Clifton).  (RHEL-85855)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-55" date="1744718400">- Adds z17 as a cpu name for the s390x architecture.  (RHEL-87215)</changelog>
  <changelog author="Andrea Bolognani  &lt;abologna@redhat.com&gt; - 2.41-56" date="1745841600">- Add basic support for RISC-V 64-bit EFI objects.  (RHEL-88815)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-57" date="1751284800">- Add fix for CVE-2025-5244.  (RHEL-100417)
- USe correct fix for CVE-2025-5702.  (RHEL-100159)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-58" date="1754481600">- Remove workaround for CVE-2025-5702.  (RHEL-100159)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-59" date="1762257600">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-125205)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-60" date="1762776000">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-126877)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-61" date="1765886400">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-132254)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-62" date="1768824000">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-142279)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-63" date="1769428800">- Run linker tests for cross binutils.  Compare the native and cross results.  (RHEL-117111)</changelog>
</package>
<package pkgid="9b3fc8579e44909fe5e1f271c9ed8306b936d0131f87231019fb13112db6eee0" name="biosdevname" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.3-11" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.3-12" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.7.3-13" date="1690372800">- migrate to SPDX license format</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.7.3-14" date="1690459200">- correct the License: field</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.3-15" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.3-16" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.7.3-17" date="1716206400">- Pull down latest updates from upstream (RHEL-24108)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.3-18" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.3-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="248d74d8b681b832a23fb7f451cb5ad1414d070c6cb1f251451521e2ee01c9e6" name="bison" arch="x86_64">
  <version epoch="0" ver="3.8.2" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.2-4" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.2-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 3.8.2-6" date="1693569600">- Analyse bison sources for license information
- Migrate License field to SPDX identifiers for
  https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
  (#2222079)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.2-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.2-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fbe223792f3035abf5441fa438bdaee9477e38d02600404b9422de04007af0d6" name="bison-devel" arch="x86_64">
  <version epoch="0" ver="3.8.2" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.2-4" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.2-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 3.8.2-6" date="1693569600">- Analyse bison sources for license information
- Migrate License field to SPDX identifiers for
  https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
  (#2222079)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.2-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.2-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f25681a36e25f0b60b1ad7f09b10ca8b85e3fd4b18dbf0cd793abf6cc78ecfc0" name="bison-runtime" arch="x86_64">
  <version epoch="0" ver="3.8.2" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.2-4" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.2-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 3.8.2-6" date="1693569600">- Analyse bison sources for license information
- Migrate License field to SPDX identifiers for
  https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
  (#2222079)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.2-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.2-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="879ec40ba5fb61fce60d24bfc4a1e11698c7b3184aab620ca60f36a590f16d67" name="blas" arch="x86_64">
  <version epoch="0" ver="3.12.0" rel="7.el10"/>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.11.0-3" date="1684497600">- Adapt license tag to SPDX</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.11.0-4" date="1685620800">- apply upstream fix to https://github.com/Reference-LAPACK/lapack/issues/763</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-1" date="1704369600">- update to 3.12.0</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-2" date="1704974400">- rename isnan.3 to lapack-isnan.3 to avoid conflict with man-pages package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.12.0-7" date="1732708800">- Add explicit requires to the devel subpackages
- Resolves: RHEL-60890</changelog>
</package>
<package pkgid="f5caaa5e837b325a704ae7ce4b8612961233e8dbe2130ec673bd4ff005af860b" name="blas-devel" arch="x86_64">
  <version epoch="0" ver="3.12.0" rel="7.el10"/>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.11.0-3" date="1684497600">- Adapt license tag to SPDX</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.11.0-4" date="1685620800">- apply upstream fix to https://github.com/Reference-LAPACK/lapack/issues/763</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-1" date="1704369600">- update to 3.12.0</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-2" date="1704974400">- rename isnan.3 to lapack-isnan.3 to avoid conflict with man-pages package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.12.0-7" date="1732708800">- Add explicit requires to the devel subpackages
- Resolves: RHEL-60890</changelog>
</package>
<package pkgid="66ce2a1aff5573ec95a26dc9fba83b1f431b44b0316aa2799c89e4ad543647ca" name="blas-static" arch="x86_64">
  <version epoch="0" ver="3.12.0" rel="7.el10"/>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.11.0-3" date="1684497600">- Adapt license tag to SPDX</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.11.0-4" date="1685620800">- apply upstream fix to https://github.com/Reference-LAPACK/lapack/issues/763</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-1" date="1704369600">- update to 3.12.0</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-2" date="1704974400">- rename isnan.3 to lapack-isnan.3 to avoid conflict with man-pages package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.12.0-7" date="1732708800">- Add explicit requires to the devel subpackages
- Resolves: RHEL-60890</changelog>
</package>
<package pkgid="8869445b91c7226eccf12b2433d6e0a525f5710ea1b2ec05b2fb3bde7725ba80" name="blas64" arch="x86_64">
  <version epoch="0" ver="3.12.0" rel="7.el10"/>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.11.0-3" date="1684497600">- Adapt license tag to SPDX</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.11.0-4" date="1685620800">- apply upstream fix to https://github.com/Reference-LAPACK/lapack/issues/763</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-1" date="1704369600">- update to 3.12.0</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-2" date="1704974400">- rename isnan.3 to lapack-isnan.3 to avoid conflict with man-pages package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.12.0-7" date="1732708800">- Add explicit requires to the devel subpackages
- Resolves: RHEL-60890</changelog>
</package>
<package pkgid="9cb66c297919cd208c61fbbf714192ef443bcbe54df01873a2864129de6a30f1" name="blas64_" arch="x86_64">
  <version epoch="0" ver="3.12.0" rel="7.el10"/>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.11.0-3" date="1684497600">- Adapt license tag to SPDX</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.11.0-4" date="1685620800">- apply upstream fix to https://github.com/Reference-LAPACK/lapack/issues/763</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-1" date="1704369600">- update to 3.12.0</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-2" date="1704974400">- rename isnan.3 to lapack-isnan.3 to avoid conflict with man-pages package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.12.0-7" date="1732708800">- Add explicit requires to the devel subpackages
- Resolves: RHEL-60890</changelog>
</package>
<package pkgid="1d46e20a511c7d1e8e6ac324e618b8b873f5c267fce85fb49c0e491c3f6c42ce" name="blivet-data" arch="noarch">
  <version epoch="1" ver="3.13.0" rel="5.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.10.0-19" date="1747742400">- Make ActionDestroyFormat optional when the device is also scheduled to be removed
  Resolves: RHEL-84685
  Resolves: RHEL-84663</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.10.0-20" date="1748606400">- Wipe end partition before creating it as well as the start
  Resolves: RHEL-93967</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.10.0-21" date="1751371200">- Tell LVM DBus to refresh it's internal status during reset
  Resolves: RHEL-93967</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.10.0-22" date="1751976000">- tests: Change expected Stratis metadata size for stratisd 3.7.0
  Resolves: RHEL-102299</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.10.0-23" date="1754308800">- Add a pre-wipe fixup function for LVM logical volumes
  Resolves: RHEL-93966</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.13.0-1" date="1759924800">- Update to blivet 3.13.0 upstream release
  Resolves: RHEL-115005</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.13.0-2" date="1761739200">- Temporarily reintroduce the safe_dbus module
  Related: RHEL-115005</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.13.0-3" date="1762171200">- iSCSI: don't crash when LUN ID &gt;= 256
  Resolves: RHEL-122305
- Remove the safe_dbus module
  Related: RHEL-122305</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.13.0-4" date="1768910400">- Fix luks save_passphrase for missing format context
  Resolves: RHEL-142610</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.13.0-5" date="1770206400">- Fix getting iSCSI firmware initiator name
  Resolves: RHEL-145882</changelog>
</package>
<package pkgid="176e90b8c80c96116d3cf58934ab5e2474af907b0763c6ec9b57d98c739f9475" name="blktrace" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="13.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-6" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.3.0-8" date="1696593600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-10" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.3.0-12" date="1724155200">- fix hang when BLKTRACESETUP fails and "-o -" is used
- Related: RHEL-54662</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a90f1bb2e52c613a33b37125430694fcfdd52e49c91a86d5d7deb0b329330ecf" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.85" rel="1.el10"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-4" date="1724932800">- Update gating and rpminspect files
- Related: Jira:RHEL-76183
- Related: Jira:RHEL-54482</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-5" date="1738238400">- Fix wordexp() related crasher
- Resolves: RHEL-56021</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-6" date="1739188800">- Fix config not being applied
- Resolves: RHEL-78405</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-7" date="1739275200">- Add OSCI tests
- Resolves: RHEL-77171</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-8" date="1745841600">- Fix startup warnings
- Resolves: RHEL-88703</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
- Resolves: RHEL-94817</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-2" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103965</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142551</changelog>
</package>
<package pkgid="aa3c6472921cd58426f916028ecb681ef9b9b4036960b1e87d3f05afa9df23ff" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.85" rel="1.el10"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-4" date="1724932800">- Update gating and rpminspect files
- Related: Jira:RHEL-76183
- Related: Jira:RHEL-54482</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-5" date="1738238400">- Fix wordexp() related crasher
- Resolves: RHEL-56021</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-6" date="1739188800">- Fix config not being applied
- Resolves: RHEL-78405</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-7" date="1739275200">- Add OSCI tests
- Resolves: RHEL-77171</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-8" date="1745841600">- Fix startup warnings
- Resolves: RHEL-88703</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
- Resolves: RHEL-94817</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-2" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103965</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142551</changelog>
</package>
<package pkgid="861fe1939ec5d10e8e29214686ea0eb02f79cdbd870f3bf7ded9d066546656b7" name="bluez-hid2hci" arch="x86_64">
  <version epoch="0" ver="5.85" rel="1.el10"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-4" date="1724932800">- Update gating and rpminspect files
- Related: Jira:RHEL-76183
- Related: Jira:RHEL-54482</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-5" date="1738238400">- Fix wordexp() related crasher
- Resolves: RHEL-56021</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-6" date="1739188800">- Fix config not being applied
- Resolves: RHEL-78405</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-7" date="1739275200">- Add OSCI tests
- Resolves: RHEL-77171</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-8" date="1745841600">- Fix startup warnings
- Resolves: RHEL-88703</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
- Resolves: RHEL-94817</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-2" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103965</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142551</changelog>
</package>
<package pkgid="4a56706affbee212f42638f924cff5f6f965328d02037c4d0c4bc97731bf7190" name="bluez-libs" arch="x86_64">
  <version epoch="0" ver="5.85" rel="1.el10"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-4" date="1724932800">- Update gating and rpminspect files
- Related: Jira:RHEL-76183
- Related: Jira:RHEL-54482</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-5" date="1738238400">- Fix wordexp() related crasher
- Resolves: RHEL-56021</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-6" date="1739188800">- Fix config not being applied
- Resolves: RHEL-78405</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-7" date="1739275200">- Add OSCI tests
- Resolves: RHEL-77171</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-8" date="1745841600">- Fix startup warnings
- Resolves: RHEL-88703</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
- Resolves: RHEL-94817</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-2" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103965</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142551</changelog>
</package>
<package pkgid="9e4403c78c028d7699ee1d675724058fec1cf3f4d18396f7055c641a5515409f" name="bluez-libs-devel" arch="x86_64">
  <version epoch="0" ver="5.85" rel="1.el10"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-4" date="1724932800">- Update gating and rpminspect files
- Related: Jira:RHEL-76183
- Related: Jira:RHEL-54482</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-5" date="1738238400">- Fix wordexp() related crasher
- Resolves: RHEL-56021</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-6" date="1739188800">- Fix config not being applied
- Resolves: RHEL-78405</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-7" date="1739275200">- Add OSCI tests
- Resolves: RHEL-77171</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-8" date="1745841600">- Fix startup warnings
- Resolves: RHEL-88703</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
- Resolves: RHEL-94817</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-2" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103965</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142551</changelog>
</package>
<package pkgid="794c854a88041cf03c786c84524eb29e0fc356bdc1cf5c6e2f6ead363e1cffd4" name="bluez-mesh" arch="x86_64">
  <version epoch="0" ver="5.85" rel="1.el10"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-4" date="1724932800">- Update gating and rpminspect files
- Related: Jira:RHEL-76183
- Related: Jira:RHEL-54482</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-5" date="1738238400">- Fix wordexp() related crasher
- Resolves: RHEL-56021</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-6" date="1739188800">- Fix config not being applied
- Resolves: RHEL-78405</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-7" date="1739275200">- Add OSCI tests
- Resolves: RHEL-77171</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-8" date="1745841600">- Fix startup warnings
- Resolves: RHEL-88703</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
- Resolves: RHEL-94817</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-2" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103965</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142551</changelog>
</package>
<package pkgid="e479b2a0d78736e3a3a60e423f2635002bc40b1d72ca7f6fd0fc7e0409f7c7ab" name="bluez-obexd" arch="x86_64">
  <version epoch="0" ver="5.85" rel="1.el10"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-4" date="1724932800">- Update gating and rpminspect files
- Related: Jira:RHEL-76183
- Related: Jira:RHEL-54482</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-5" date="1738238400">- Fix wordexp() related crasher
- Resolves: RHEL-56021</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-6" date="1739188800">- Fix config not being applied
- Resolves: RHEL-78405</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-7" date="1739275200">- Add OSCI tests
- Resolves: RHEL-77171</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.77-8" date="1745841600">- Fix startup warnings
- Resolves: RHEL-88703</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
- Resolves: RHEL-94817</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-2" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103965</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142551</changelog>
</package>
<package pkgid="12e5a0adda44b9ae283b9198d06629b59a6af0feb9e82ef0b475bf394d315850" name="bmc-snmp-proxy" arch="noarch">
  <version epoch="0" ver="1.8.19" rel="10.el10_1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.19-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.19-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.19-7" date="1707739200">- Update IANA numbers
- Apply patch from CentOS Stream, never applied upstream:
  Disable retry of pre-session "Get cipher suites" command as some
  BMCs are ignoring it (#1831158)
- Apply patches from Debian, never applied upstream:
  - fix tsol buffer overflow,
    https://sourceforge.net/p/ipmitool/mailman/message/24405281/
  - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/
- Update /var/run to /run in ipmievd.service that systemd warns about (#2100475)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.19-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.19-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.19-10" date="1764849600">- Apply Debian/upstream patch: 137aeb64, fixes ipmitool lan print
- Add patch that partially reverts 6e037d6bfb to fix regression in 1.8.19
  Among others fixes ipmievd startup (fedora#2303185)</changelog>
</package>
<package pkgid="0a63483ffca9dc35688952f7b0e1683b2a0c7262890c01aabfd33ad8ad58aa1e" name="bolt" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.6-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.6-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.9.7-1" date="1711454400">- Update to upstream release 0.9.7
- Support 'nopcie' security level</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.9.8-1" date="1716379200">- A new NHI for REMBRANDT.
- systemd configuration improvement.
- Resolve: RHEL-34699</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.8-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.8-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.9.8-5" date="1760961600">- Migrate to tmt test</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.9.10-1" date="1761220800">- Update to the upstream version 0.9.10</changelog>
</package>
<package pkgid="fd8a943cd08e4fc4a9ad3e09cc285b797af37cda2a1989e2674a3f0ae9d73c33" name="bolt-tests" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.6-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.6-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.9.7-1" date="1711454400">- Update to upstream release 0.9.7
- Support 'nopcie' security level</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.9.8-1" date="1716379200">- A new NHI for REMBRANDT.
- systemd configuration improvement.
- Resolve: RHEL-34699</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.8-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.8-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.9.8-5" date="1760961600">- Migrate to tmt test</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.9.10-1" date="1761220800">- Update to the upstream version 0.9.10</changelog>
</package>
<package pkgid="0c0ea9fee8cd71c49f686105ffb7ae9e812f478e682c6c2442fef6454d43d9b4" name="bomtool" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="3.el10"/>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.8.0-6" date="1677067200">- Drop dependency on system-rpm-config (#2172406)</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.9.4-1" date="1677067201">- Rebase to 1.9.4</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 1.9.4-2" date="1684152000">- Rebuild for ATF soname bump</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 1.9.5-1" date="1684238400">- Update pkgconf to 1.9.5 (#2192963)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-2" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.1.0-1" date="1707739200">- update to 2.1.0
- https://github.com/pkgconf/pkgconf/blob/pkgconf-2.1.0/NEWS</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="feeb964d9d22ffc776193fe2425dc539c72ba6b76b2b2073c634abf4c255771b" name="boom-boot" arch="noarch">
  <version epoch="0" ver="1.6.8" rel="1.el10"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.6.0-1" date="1700568000">- Update to release 1.6.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-4" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Bryan Gurney &lt;bgurney@redhat.com&gt; - 1.6.1-1" date="1716292800">- Update to release 1.6.1.</changelog>
  <changelog author="Bryan Gurney &lt;bgurney@redhat.com&gt; - 1.6.1-2" date="1716292801">- Rebuild for new gating configuration
- Resolves: RHEL-37489</changelog>
  <changelog author="Bryan Gurney &lt;bgurney@redhat.com&gt; - 1.6.3-1" date="1718712000">- Update to release 1.6.3
- Resolves: RHEL-37489</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; - 1.6.5-1" date="1734091200">- Update to release 1.6.5
- Resolves: RHEL-59511</changelog>
  <changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; - 1.6.8-1" date="1762257600">- Update to release 1.6.8
- Resolves: RHEL-111710</changelog>
</package>
<package pkgid="d1b342a9d61bfd7a900fcd4c232e64ace461bc67e2ba86fa10f06f320c0a7b7a" name="boom-boot-conf" arch="noarch">
  <version epoch="0" ver="1.6.8" rel="1.el10"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.6.0-1" date="1700568000">- Update to release 1.6.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-4" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Bryan Gurney &lt;bgurney@redhat.com&gt; - 1.6.1-1" date="1716292800">- Update to release 1.6.1.</changelog>
  <changelog author="Bryan Gurney &lt;bgurney@redhat.com&gt; - 1.6.1-2" date="1716292801">- Rebuild for new gating configuration
- Resolves: RHEL-37489</changelog>
  <changelog author="Bryan Gurney &lt;bgurney@redhat.com&gt; - 1.6.3-1" date="1718712000">- Update to release 1.6.3
- Resolves: RHEL-37489</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; - 1.6.5-1" date="1734091200">- Update to release 1.6.5
- Resolves: RHEL-59511</changelog>
  <changelog author="Bryn M. Reeves &lt;bmr@redhat.com&gt; - 1.6.8-1" date="1762257600">- Update to release 1.6.8
- Resolves: RHEL-111710</changelog>
</package>
<package pkgid="2797f3b994ee1472b0d39542e9f57f8955326b2c9eec1ac1f44ce47ae047dc42" name="boost" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="1db708199892ccb52ab68e11d7b4046e73e224bd5177b87f0615b6d0377c9cc2" name="boost-atomic" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="b0c436bcc737c19e49375e051efa0e55217e367372ec09cfc457ede067f15ed2" name="boost-b2" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="98fb3a5ac05c7595bbcacae3e3243cbc63a6d1ce0ab1ef454b786fd8a195398f" name="boost-build" arch="noarch">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="9b155266436042d68ca6341de8a9e41f5b09cd1a2613988f586e1efe3a05810b" name="boost-chrono" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="e19c39db84648af3ed0cc84f4edfb809202fa7ceb225caa4e8ba0d7d2a5004d1" name="boost-container" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="5ad9c48e115f3fbcd47afe077020fc9bafb29c470622d8547fcd4f4320909818" name="boost-context" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="17c1a4f6869b56d343bf26cc88e6dbed79b1aa01960894c24351eecc691e4f07" name="boost-contract" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="3fc448e915738c5329be6694fd74659df5d7a672d807aa3858b8e024c3b38c56" name="boost-coroutine" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="3ae72657a36d985fc138ab3448561eaf73c2c199dc428af23445d9a44260a4b4" name="boost-date-time" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="73f3d8fb33aba5df11cd2f26424973a457b977a338deabdeeb50ad46ebe0cbca" name="boost-devel" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="7cded028f949a0f7d89d6c391803afe93aa8e56f430b6b201f83372ae3fe0c1b" name="boost-doc" arch="noarch">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="317ef88ada4d0e20f19bbe3cb72945a8068ac1cd499863c620bb073e7392e4e9" name="boost-doctools" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="624bf446dab9a729082bd118d1526671125d0801a7f499489cd1aeae89883f9a" name="boost-examples" arch="noarch">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="083308f99f78e4e676f4a67097730ce0f2dc7d654b6f5e27437549e2e233a36c" name="boost-fiber" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="10a0807a958fdba0c0cd2f4ed584c9eb17bc0de9f2a1f69f8cbf2928deab4551" name="boost-filesystem" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="ed47efdd6b71a372d756dc465f46a06a3f15c4bc3f033e6dfea995b59eb170c4" name="boost-graph" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="0b6e83f97c0041f47d9776b8f1161dd986ced9256723d598710313613d3c70be" name="boost-graph-mpich" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="3c6a7f4a13e2fbdabdca15c4a4fa7063278326d98bbc7964c48afaf35609caba" name="boost-graph-openmpi" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="65e01c5c9ecaab3aec04f1ff24c29062223e474c3d9476c04af996c85aab2a1b" name="boost-iostreams" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="adff98762674be87e3cff47232ba2785dd4d7c0b03fb941f16fa9dc5f19533eb" name="boost-json" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="fb593273d2f937ab2c37537fb595b9f2d914278fc45f27f772e05fe6a8acbba7" name="boost-locale" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="527dcf03fd176780d29caa3efc84d27c57ad0e9d8423af71063608894264993b" name="boost-log" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="a3360e87ed6e01a49f7dd874cfb525883db08c4b7245a3882f9925154daf445f" name="boost-math" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="9b71a40f577f02b05ba691e8aa81e6c5a04a3598d26542ff409df4d53be1d25b" name="boost-mpich" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="4077f3cb9fc82f75481ac96cb533c4d78641e81438b213eb23ff19facf6e3650" name="boost-mpich-devel" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="d6055f3a898626981562670768596c27e52387af06d7a19dc7cc06d2756d3c7c" name="boost-mpich-python3" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="5aafb98378767652e74d0080fd6bd2c5ec7983e3a030a52187b1431ae5d38c19" name="boost-mpich-python3-devel" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="c79e2108105ab50b3d37efc9083fc448cd2979ef6d06281ac14ac6aa61dbf655" name="boost-nowide" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="4b012c45babc36d8364abea5748300ca134a87c05dc03f1a62baa5d1e17606af" name="boost-numpy3" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="b91f2d25a3b5bf210979e08ca16f55d46d336a7289152803a6083544475d14e0" name="boost-openmpi" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="3b0c51f53e4a166281ff7f9be04bd2f51f59cc84482beecad6b8744b44c83909" name="boost-openmpi-devel" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="894091a587e5dc46a1263ae9ae7d0a7fd8c05be41b2a5b376d6b17454b5a0876" name="boost-openmpi-python3" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="a32c5c923cd94dbe9b6c0780b291e844be2dab89cff2472c14cd762641ca2dfa" name="boost-openmpi-python3-devel" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="4d9e7605533a3d900927a81a627a94d37e4f16828383e4df706155741894b437" name="boost-program-options" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="d9fd9db1af91366bec5e75a855ff79532c5c72da207a67b77954ecff510e91eb" name="boost-python3" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="86d6a2e6f3f0c35d46c62f6039204698658d0f26f10bc93a385f09e46d188f27" name="boost-random" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="1255491b67d4e514d29ab09855f712253deef2bda8ab00358268adb7380fcc3c" name="boost-regex" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="f487e5a738b014c38b046a6fd31f6ded7bc4574c0db4d2996d6852944d83e7fd" name="boost-serialization" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="be91d5720e5754210c900eb124219f16b87b7434cb27fde0f72003384b412b87" name="boost-stacktrace" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="8f4c0df3271ec824b9bad090bb4eb0ab50de8dd48a4d9d4bdcb819f3324ffe42" name="boost-static" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="2ddfd3f2dcdec8d711b0699e10e084d3d2f185e3e69ff59c479f5fb2c90fd726" name="boost-system" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="76f6a38743a5750cf6e68ca1cc8198459b64f58be1b2463048704061f754bc7e" name="boost-test" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="4e5e2e6209f236e1e2f205b675a89d11d978ccfdce82cfe4afba7872c5f96dd9" name="boost-thread" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="3ca525993f57dd02327375b64851ffc6b3e37ba67c6e8c85e3953755a5061f05" name="boost-timer" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="b26bac6a4729425510c1de1d821ddd03e0f64cffb74bd644f9c14116fe17d76e" name="boost-type_erasure" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="853219027e4dea4fbe0d7819800c4f9ca8b06b50e72367787314c8b7d6050c22" name="boost-url" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="a030fbe26e24e05a9c5c1e3f257b72be07924fec704581c2fa47bb4dce9e5b61" name="boost-wave" arch="x86_64">
  <version epoch="0" ver="1.83.0" rel="7.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.83.0-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.83.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 1.83.0-6" date="1759320000">- Backport patch to fix build of boost thread on Clang19 and later
  Resolves: RHEL-118607</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.83.0-7" date="1769515200">- Add boost-url dependency to metapackage
  Resolves: RHEL-124169</changelog>
</package>
<package pkgid="726f8e5779fc94a8a70ce24ad9c314cd1d9cbca65055efc47847c246543cd01c" name="bootc" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="1.el10_2"/>
  <changelog author="Joseph Marrero Corchado &lt;jmarrero@redhat.com&gt; - 1.10.0-1" date="1761912000">- Release 1.10.0</changelog>
  <changelog author="Xiaofeng Wang &lt;xiaofwan@redhat.com&gt; - 1.10.0-2" date="1762344000">- Fix gating test</changelog>
  <changelog author="Joseph Marrero Corchado &lt;jmarrero@redhat.com&gt; - 1.11.0-1" date="1765281600">- Release 1.11.0</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 1.12.0-1" date="1767960000">- Release 1.12.0</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 1.12.1-1" date="1768564800">- Release 1.12.1</changelog>
  <changelog author="Xiaofeng Wang &lt;xiaofwan@redhat.com&gt; - 1.12.1-2" date="1768824000">- Skip rpminspect checking for symbolic link /usr/lib/bootc/storage</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 1.13.0-1" date="1771934400">- Release 1.13.0
- Update to bootc 1.13.0
- Pass CARGO_FEATURES explicitly to make install to prevent auto-detection
  rebuild in install environment (workaround for upstream Makefile issue)
- Package shell completions (bash, zsh, fish)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 1.14.1-1" date="1774008000">- Update to 1.14.1</changelog>
  <changelog author="Joseph Marrero Corchado &lt;jmarrero@redhat.com&gt; - 1.15.1-1" date="1776168000">- Release 1.15.1</changelog>
  <changelog author="Joseph Marrero Corchado &lt;jmarrero@redhat.com&gt; - 1.15.2-1" date="1777982400">- Release 1.15.2</changelog>
</package>
<package pkgid="a3fb0eec2c2f2605b81b554c180ef0763adf7601ef80854023c53a544a1ca990" name="bootc" arch="x86_64">
  <version epoch="0" ver="1.16.4" rel="1.el10_2"/>
  <changelog author="Xiaofeng Wang &lt;xiaofwan@redhat.com&gt; - 1.10.0-2" date="1762344000">- Fix gating test</changelog>
  <changelog author="Joseph Marrero Corchado &lt;jmarrero@redhat.com&gt; - 1.11.0-1" date="1765281600">- Release 1.11.0</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 1.12.0-1" date="1767960000">- Release 1.12.0</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 1.12.1-1" date="1768564800">- Release 1.12.1</changelog>
  <changelog author="Xiaofeng Wang &lt;xiaofwan@redhat.com&gt; - 1.12.1-2" date="1768824000">- Skip rpminspect checking for symbolic link /usr/lib/bootc/storage</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 1.13.0-1" date="1771934400">- Release 1.13.0
- Update to bootc 1.13.0
- Pass CARGO_FEATURES explicitly to make install to prevent auto-detection
  rebuild in install environment (workaround for upstream Makefile issue)
- Package shell completions (bash, zsh, fish)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 1.14.1-1" date="1774008000">- Update to 1.14.1</changelog>
  <changelog author="Joseph Marrero Corchado &lt;jmarrero@redhat.com&gt; - 1.15.1-1" date="1776168000">- Release 1.15.1</changelog>
  <changelog author="Joseph Marrero Corchado &lt;jmarrero@redhat.com&gt; - 1.15.2-1" date="1777982400">- Release 1.15.2</changelog>
  <changelog author="ckyrouac &lt;ckyrouac@redhat.com&gt; - 1.16.4-1" date="1784721600">- spec: new upstream version 1.16.4</changelog>
</package>
<package pkgid="19c1679ba541030e3e9b119fd8180f774e1e5c77cc997c465bdb27d12235d2a8" name="booth" arch="x86_64">
  <version epoch="0" ver="1.2" rel="3.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.0-283.1.9d4029a.git" date="1669032000">- Rebase to newest upstream snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-283.2.9d4029a.git" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.0-283.3.9d4029a.git" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-283.4.9d4029a.git" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.1-1" date="1697630400">- New upstream release
- Upstream releases should now be released regularly, so convert spec
  to use them instead of git snapshots</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.2-1" date="1717761600">- Resolves: RHEL-22016
- Resolves: RHEL-40410

- New upstream release (RHEL-40410)
- Add support for GnuTLS and stop using libgcrypt (RHEL-22016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e0b9f6110e7ea560e66fb638a994c9dc773724896a9a292023c2cd77b0b88b7d" name="booth-arbitrator" arch="noarch">
  <version epoch="0" ver="1.2" rel="3.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.0-283.1.9d4029a.git" date="1669032000">- Rebase to newest upstream snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-283.2.9d4029a.git" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.0-283.3.9d4029a.git" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-283.4.9d4029a.git" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.1-1" date="1697630400">- New upstream release
- Upstream releases should now be released regularly, so convert spec
  to use them instead of git snapshots</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.2-1" date="1717761600">- Resolves: RHEL-22016
- Resolves: RHEL-40410

- New upstream release (RHEL-40410)
- Add support for GnuTLS and stop using libgcrypt (RHEL-22016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a4c3570d963a7ce73f2bc29aa7775af88e56bd37bf943264c6ae5566046ec0f0" name="booth-core" arch="x86_64">
  <version epoch="0" ver="1.2" rel="3.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.0-283.1.9d4029a.git" date="1669032000">- Rebase to newest upstream snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-283.2.9d4029a.git" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.0-283.3.9d4029a.git" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-283.4.9d4029a.git" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.1-1" date="1697630400">- New upstream release
- Upstream releases should now be released regularly, so convert spec
  to use them instead of git snapshots</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.2-1" date="1717761600">- Resolves: RHEL-22016
- Resolves: RHEL-40410

- New upstream release (RHEL-40410)
- Add support for GnuTLS and stop using libgcrypt (RHEL-22016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0f4dfee1fbd4519a8ec335d57565f5cb1577ef487cf866a0e72d6d4605e70c56" name="booth-site" arch="noarch">
  <version epoch="0" ver="1.2" rel="3.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.0-283.1.9d4029a.git" date="1669032000">- Rebase to newest upstream snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-283.2.9d4029a.git" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.0-283.3.9d4029a.git" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-283.4.9d4029a.git" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.1-1" date="1697630400">- New upstream release
- Upstream releases should now be released regularly, so convert spec
  to use them instead of git snapshots</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.2-1" date="1717761600">- Resolves: RHEL-22016
- Resolves: RHEL-40410

- New upstream release (RHEL-40410)
- Add support for GnuTLS and stop using libgcrypt (RHEL-22016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="888c5b98deca4caa860bbc93c840b5ce4e8f7ab6fa0e7e635e72597800d315ff" name="booth-test" arch="noarch">
  <version epoch="0" ver="1.2" rel="3.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.0-283.1.9d4029a.git" date="1669032000">- Rebase to newest upstream snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-283.2.9d4029a.git" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.0-283.3.9d4029a.git" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-283.4.9d4029a.git" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.1-1" date="1697630400">- New upstream release
- Upstream releases should now be released regularly, so convert spec
  to use them instead of git snapshots</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.2-1" date="1717761600">- Resolves: RHEL-22016
- Resolves: RHEL-40410

- New upstream release (RHEL-40410)
- Add support for GnuTLS and stop using libgcrypt (RHEL-22016)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="00220b9deada5bd20a92c71f6a460ccc61409fc1e8c64e9cff51ed270ed40b58" name="bootupd" arch="x86_64">
  <version epoch="0" ver="0.2.32" rel="2.el10_2"/>
  <changelog author="HuijingHei &lt;hhei@redhat.com&gt; - 0.2.25-1" date="1734004800">- https://github.com/coreos/bootupd/releases/tag/v0.2.25
  Resolves: RHEL-71041</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.2.27-1" date="1739361600">- Update to 0.2.27</changelog>
  <changelog author="Joseph Marrero Corchado &lt;jmarrero@redhat.com&gt; - 0.2.27-2" date="1739361601">- spec: Add BR on git</changelog>
  <changelog author="Huijing Hei &lt;hhei@redhat.com&gt; - 0.2.28-1" date="1750939200">- Update to 0.2.28</changelog>
  <changelog author="Huijing Hei &lt;hhei@redhat.com&gt; - 0.2.28-2" date="1750939201">- Backport the PR that will use an already mounted ESP for installation</changelog>
  <changelog author="Huijing Hei &lt;hhei@redhat.com&gt; - 0.2.29-1" date="1755777600">- Update to 0.2.29</changelog>
  <changelog author="Huijing Hei &lt;hhei@redhat.com&gt; - 0.2.31-1" date="1758888000">- Update to 0.2.31</changelog>
  <changelog author="Huijing Hei &lt;hhei@redhat.com&gt; - 0.2.32-1" date="1765281600">- Update to 0.2.32</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.2.33-1" date="1776254400">- Update to 0.2.33</changelog>
  <changelog author="Joseph Marrero Corchado &lt;jmarrero@redhat.com&gt; - 0.2.32-1" date="1776427200">- Backport https://github.com/coreos/bootupd/pull/1068</changelog>
</package>
<package pkgid="a8e3d3d77b118a0baa7ca3ffb15a8e2d48f8b3b8834ac44774da8bcb430448eb" name="bootupd" arch="x86_64">
  <version epoch="0" ver="0.2.35" rel="1.el10_2"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.2.27-1" date="1739361600">- Update to 0.2.27</changelog>
  <changelog author="Joseph Marrero Corchado &lt;jmarrero@redhat.com&gt; - 0.2.27-2" date="1739361601">- spec: Add BR on git</changelog>
  <changelog author="Huijing Hei &lt;hhei@redhat.com&gt; - 0.2.28-1" date="1750939200">- Update to 0.2.28</changelog>
  <changelog author="Huijing Hei &lt;hhei@redhat.com&gt; - 0.2.28-2" date="1750939201">- Backport the PR that will use an already mounted ESP for installation</changelog>
  <changelog author="Huijing Hei &lt;hhei@redhat.com&gt; - 0.2.29-1" date="1755777600">- Update to 0.2.29</changelog>
  <changelog author="Huijing Hei &lt;hhei@redhat.com&gt; - 0.2.31-1" date="1758888000">- Update to 0.2.31</changelog>
  <changelog author="Huijing Hei &lt;hhei@redhat.com&gt; - 0.2.32-1" date="1765281600">- Update to 0.2.32</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.2.33-1" date="1776254400">- Update to 0.2.33</changelog>
  <changelog author="Joseph Marrero Corchado &lt;jmarrero@redhat.com&gt; - 0.2.32-1" date="1776427200">- Backport https://github.com/coreos/bootupd/pull/1068</changelog>
  <changelog author="Pragyan Poudyal &lt;ppoudyal@redhat.com&gt; - 0.2.35-1" date="1782907200">- Update to v0.2.35</changelog>
</package>
<package pkgid="4ffe6aa9dbf1e23cf233b8570c8b41de668be2f3dddf8e806104eb438f53f50c" name="bpftool" arch="x86_64">
  <version epoch="0" ver="7.7.0" rel="2.el10"/>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 7.5.0-1" date="1736251200">- Initial commit on c10s</changelog>
  <changelog author="Ziqian SUN (Zamir) &lt;zsun@redhat.com&gt; - 7.5.0-2" date="1736510400">- Initial gating test for bpftool</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 7.6.0-1" date="1747742400">- Update to kernel rebase 6.13</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 7.6.0-2" date="1751630400">- Update to kernel rebase 6.14</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 7.6.0-3" date="1755086400">- Make kernel tarball dist independent of %{dist}</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 7.7.0-1" date="1764331200">- Update to kernel rebase 6.17</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 7.7.0-2" date="1771329600">- Fix LLVM feature detection and rebuild with LLVM 21</changelog>
</package>
<package pkgid="f99a420e02e04bab8c6fa12bf8b9ec13f875596ea8d27c309af838c121d124c9" name="bpftrace" arch="x86_64">
  <version epoch="0" ver="0.24.2" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 0.21.1-1" date="1719316800">- Rebased to version 0.21.1
- Resolves: RHEL-36076
- Rebuilt for LLVM 18
- Resolves: RHEL-27729
- Enable gating
- Resolves: RHEL-45249</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 0.21.1-2" date="1730203200">- Rebuild for LLVM 19
- Resolves: RHEL-64926</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.1-3" date="1730203201">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 0.22.1-1" date="1737028800">- Rebase to upstream version 0.22.1 (RHEL-63882)</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 0.22.1-2" date="1739448000">- Enable riscv64</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 0.23.2-1" date="1747915200">- Rebase to upstream version 0.23.2 (RHEL-78919)
- Rebuild for LLVM 20 (RHEL-81774)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 0.23.5-1" date="1750075200">- Rebase to upstream version 0.23.5 which fixes an issue with kstack/ustack on
  s390x (RHEL-96958)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 0.24.1-1" date="1761220800">- Rebase to upstream version 0.24.1 (RHEL-79000)</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 0.24.2-1" date="1768305600">- Rebuild with LLVM 21 (RHEL-108334)
- Rebase to upstream version 0.24.2</changelog>
</package>
<package pkgid="423b2b4818028824c82c1ee87876e3804f50121cf009ecb3c45f867ef2085b85" name="brasero" arch="x86_64">
  <version epoch="0" ver="3.12.3" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.3-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.3-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.3-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.3-8" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.3-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.12.3-10" date="1722859200">- totem-pl-parser won't be in RHEL 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.3-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ff448a11ea68cb263ac0f1b5ea862ef2a32469738b17327496c2b508091be4e1" name="brasero-devel" arch="x86_64">
  <version epoch="0" ver="3.12.3" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.3-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.3-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.3-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.3-8" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.3-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.12.3-10" date="1722859200">- totem-pl-parser won't be in RHEL 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.3-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0d9eec06fc2bd00f45e37f5381143bd6c686d17a6fde371d19d54ca903b2ee45" name="brasero-libs" arch="x86_64">
  <version epoch="0" ver="3.12.3" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.3-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.3-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.3-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.3-8" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.3-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.12.3-10" date="1722859200">- totem-pl-parser won't be in RHEL 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.3-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8ce52df498e244f74ae33c1bdbfd5fea3bde0b8917215bdd8df7ec05e71077f8" name="brcmfmac-firmware" arch="noarch">
  <version epoch="0" ver="20260411" rel="19.5.el10_1"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-19.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128447)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128447</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-19.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-140094)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-140094</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-19.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145532)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145532</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260311-19.4" date="1773230400">- Update linux-firmware to latest upstream (RHEL-154362)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-154362</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260411-19.5" date="1775908800">- Update linux-firmware to latest upstream (RHEL-164389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
Resolves: RHEL-164389</changelog>
</package>
<package pkgid="0fb11d9b7f972d6aa65fb42a4c8203327197192b09805cc77a1897f4b87f0d2e" name="brcmfmac-firmware" arch="noarch">
  <version epoch="0" ver="20260609" rel="23.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250212-14" date="1740484800">- accel: ivpu: Update firmware for NPU (RHEL-38586)
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
</package>
<package pkgid="ed2df9724b0ea8ec1a1344272e3df37c2ad14f98dd0b5de02da004082d3d4d09" name="brcmfmac-firmware" arch="noarch">
  <version epoch="0" ver="20260707" rel="23.1.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream ()
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
</package>
<package pkgid="8d603c6159fada42b83bfcf98a2416dea17c1da4cf93abb736fc6416e275ce0f" name="brcmfmac-firmware" arch="noarch">
  <version epoch="0" ver="20260804" rel="23.2.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream (RHEL-188389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260804-23.2" date="1785844800">- Update linux-firmware to latest upstream (RHEL-214057)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- linux-firmware: Add firmware binary files for new HP project (Messi)
- qcom: Add gpu firmwares for Eliza chipset
- cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
- rtw89: 8922d: add fw 0.35.113.2
- qcom: venus-5.4: fix vp9 decoder assertion failure
- qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
- qcom: Update qdsp6sw firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- intel_vpu: Update NPU firmware
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: Add firmware for new soundwire projects
- rtw88: add firmware v41.0.0 for RTL8723B
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add ADSP firmware for hawi platform
- powervr: add firmware for Imagination Technologies BXM-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform
Resolves: RHEL-214057</changelog>
</package>
<package pkgid="0653119135fc46e7eb4ffd9df64839b401c35a1e17546aead587111ed8274a62" name="brlapi" arch="x86_64">
  <version epoch="0" ver="0.8.5" rel="16.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-7" date="1702900800">- OCaml 5.1.1 + s390x code gen fix for Fedora 40</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-8" date="1702900801">- Bump release and rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 6.6-9" date="1703073600">- Migrate group creation to sysusers</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-10" date="1705492800">- Added SPDX licenses found by ScanCode
- Dropped redundant license tags from subpackages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 6.6-13" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-14" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-15" date="1720094400">- Dropped ucs-miscfixed-fonts requirement, xorg-x11-fonts-misc is enough
  Resolves: RHEL-46310</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-16" date="1730289600">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e1593c2f4ee4c01c9e4c26bca007c223d2716ea3297cd1b70e02725961cc19ae" name="brlapi-devel" arch="x86_64">
  <version epoch="0" ver="0.8.5" rel="16.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-7" date="1702900800">- OCaml 5.1.1 + s390x code gen fix for Fedora 40</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-8" date="1702900801">- Bump release and rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 6.6-9" date="1703073600">- Migrate group creation to sysusers</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-10" date="1705492800">- Added SPDX licenses found by ScanCode
- Dropped redundant license tags from subpackages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 6.6-13" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-14" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-15" date="1720094400">- Dropped ucs-miscfixed-fonts requirement, xorg-x11-fonts-misc is enough
  Resolves: RHEL-46310</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-16" date="1730289600">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5d1797da99175eaf13f14f03e64636c43e25aaabc6c1933f5bc62dd36f107f06" name="brlapi-java" arch="x86_64">
  <version epoch="0" ver="0.8.5" rel="16.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-7" date="1702900800">- OCaml 5.1.1 + s390x code gen fix for Fedora 40</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-8" date="1702900801">- Bump release and rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 6.6-9" date="1703073600">- Migrate group creation to sysusers</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-10" date="1705492800">- Added SPDX licenses found by ScanCode
- Dropped redundant license tags from subpackages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 6.6-13" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-14" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-15" date="1720094400">- Dropped ucs-miscfixed-fonts requirement, xorg-x11-fonts-misc is enough
  Resolves: RHEL-46310</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-16" date="1730289600">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="76d439689fc4bca236b62b503ee6ebbac3fd7caa1180ebbf31f5add436110142" name="brltty" arch="x86_64">
  <version epoch="0" ver="6.6" rel="16.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-7" date="1702900800">- OCaml 5.1.1 + s390x code gen fix for Fedora 40</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-8" date="1702900801">- Bump release and rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 6.6-9" date="1703073600">- Migrate group creation to sysusers</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-10" date="1705492800">- Added SPDX licenses found by ScanCode
- Dropped redundant license tags from subpackages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 6.6-13" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-14" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-15" date="1720094400">- Dropped ucs-miscfixed-fonts requirement, xorg-x11-fonts-misc is enough
  Resolves: RHEL-46310</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-16" date="1730289600">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cd577128c3d6df85a9aec5851a868c9ba8459df9b97742e8f9cbbe0ba98f4792" name="brltty-at-spi2" arch="x86_64">
  <version epoch="0" ver="6.6" rel="16.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-7" date="1702900800">- OCaml 5.1.1 + s390x code gen fix for Fedora 40</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-8" date="1702900801">- Bump release and rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 6.6-9" date="1703073600">- Migrate group creation to sysusers</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-10" date="1705492800">- Added SPDX licenses found by ScanCode
- Dropped redundant license tags from subpackages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 6.6-13" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-14" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-15" date="1720094400">- Dropped ucs-miscfixed-fonts requirement, xorg-x11-fonts-misc is enough
  Resolves: RHEL-46310</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-16" date="1730289600">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3ee5004ca11d9519dca51abcee55d776ac31b0c7f975564f4260e1c75480bbf7" name="brltty-docs" arch="noarch">
  <version epoch="0" ver="6.6" rel="16.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-7" date="1702900800">- OCaml 5.1.1 + s390x code gen fix for Fedora 40</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-8" date="1702900801">- Bump release and rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 6.6-9" date="1703073600">- Migrate group creation to sysusers</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-10" date="1705492800">- Added SPDX licenses found by ScanCode
- Dropped redundant license tags from subpackages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 6.6-13" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-14" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-15" date="1720094400">- Dropped ucs-miscfixed-fonts requirement, xorg-x11-fonts-misc is enough
  Resolves: RHEL-46310</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-16" date="1730289600">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4197f2393b979a528b606516667b3eb2ebce4f22b01f508528be34bfd9eda8db" name="brltty-dracut" arch="x86_64">
  <version epoch="0" ver="6.6" rel="16.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-7" date="1702900800">- OCaml 5.1.1 + s390x code gen fix for Fedora 40</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-8" date="1702900801">- Bump release and rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 6.6-9" date="1703073600">- Migrate group creation to sysusers</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-10" date="1705492800">- Added SPDX licenses found by ScanCode
- Dropped redundant license tags from subpackages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 6.6-13" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-14" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-15" date="1720094400">- Dropped ucs-miscfixed-fonts requirement, xorg-x11-fonts-misc is enough
  Resolves: RHEL-46310</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-16" date="1730289600">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="17d47958ea8746f902675b324f1dab087fff0966ecf863eda4cadf7c57eecd53" name="brltty-espeak-ng" arch="x86_64">
  <version epoch="0" ver="6.6" rel="16.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-7" date="1702900800">- OCaml 5.1.1 + s390x code gen fix for Fedora 40</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-8" date="1702900801">- Bump release and rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 6.6-9" date="1703073600">- Migrate group creation to sysusers</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-10" date="1705492800">- Added SPDX licenses found by ScanCode
- Dropped redundant license tags from subpackages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 6.6-13" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-14" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-15" date="1720094400">- Dropped ucs-miscfixed-fonts requirement, xorg-x11-fonts-misc is enough
  Resolves: RHEL-46310</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-16" date="1730289600">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="79ea13b3b0694796f08fa496131ff876f0e3f09d6df47ff77a2679aa410f51c8" name="brltty-minimal" arch="x86_64">
  <version epoch="0" ver="6.6" rel="16.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-7" date="1702900800">- OCaml 5.1.1 + s390x code gen fix for Fedora 40</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-8" date="1702900801">- Bump release and rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 6.6-9" date="1703073600">- Migrate group creation to sysusers</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-10" date="1705492800">- Added SPDX licenses found by ScanCode
- Dropped redundant license tags from subpackages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 6.6-13" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-14" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-15" date="1720094400">- Dropped ucs-miscfixed-fonts requirement, xorg-x11-fonts-misc is enough
  Resolves: RHEL-46310</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-16" date="1730289600">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b2dce2e366c72f5670a023d8f6fd0598d6ba02c0d9bd3280fcb3514e8c1c2438" name="brltty-xw" arch="x86_64">
  <version epoch="0" ver="6.6" rel="16.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-7" date="1702900800">- OCaml 5.1.1 + s390x code gen fix for Fedora 40</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.6-8" date="1702900801">- Bump release and rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 6.6-9" date="1703073600">- Migrate group creation to sysusers</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-10" date="1705492800">- Added SPDX licenses found by ScanCode
- Dropped redundant license tags from subpackages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 6.6-13" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-14" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.6-15" date="1720094400">- Dropped ucs-miscfixed-fonts requirement, xorg-x11-fonts-misc is enough
  Resolves: RHEL-46310</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.6-16" date="1730289600">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b699d644363a3b0c60db6b55054b5bc50ac08aafeb5c755ec8488eaa47aca1e5" name="brotli" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="7.el10_1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1.1.0-5" date="1726056000">- Check BitMask(n) n value for kBrotliBitMask[n] bounds</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.1.0-7" date="1766059200">- Resolves: RHEL-133984
  CVE-2025-6176 Brotli decompression bomb DoS in scrapy</changelog>
</package>
<package pkgid="b5b7d160c849bad64ab32aea1c9d23d9f79e694a9d585a80eef0bc5856e9e991" name="brotli-devel" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="7.el10_1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1.1.0-5" date="1726056000">- Check BitMask(n) n value for kBrotliBitMask[n] bounds</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.1.0-7" date="1766059200">- Resolves: RHEL-133984
  CVE-2025-6176 Brotli decompression bomb DoS in scrapy</changelog>
</package>
<package pkgid="9687ea0645f8ee14001db834b6352126103f8c78b3b98eae642797fa9499e4fd" name="bsdcat" arch="x86_64">
  <version epoch="0" ver="3.7.7" rel="10.el10_2"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-1" date="1731931200">- Rebase to version 3.7.7
- Fixing SAST issues, accepted by upstream
- Resolves: RHEL-39391 RHEL-67895</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3.7.7-2" date="1741089600">- Fix for CVE-2024-57970
- Resolves: RHEL-79877</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-3" date="1749211200">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-4" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-5" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-6" date="1774353600">- Release bump</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-7" date="1774440000">- Release bump for typo in dist</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-8" date="1775649600">- Resolves: CVE-2026-4424</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-9" date="1782820800">- Resolves: CVE-2026-14164</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-10" date="1784116800">- Related: CVE-2026-14164</changelog>
</package>
<package pkgid="e2856a608d65c1c11912a54cb8e633b888e34ec9fba306ca4d0160abb613d01f" name="bsdcat" arch="x86_64">
  <version epoch="0" ver="3.7.7" rel="8.el10_1"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.2-7" date="1728907200">- Fix CVE-2024-48957
- Resolves: RHEL-62015</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.7.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-1" date="1731931200">- Rebase to version 3.7.7
- Fixing SAST issues, accepted by upstream
- Resolves: RHEL-39391 RHEL-67895</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3.7.7-2" date="1741089600">- Fix for CVE-2024-57970
- Resolves: RHEL-79877</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-3" date="1749211200">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-4" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-5" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-6" date="1774353600">- Release bump</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-7" date="1774440000">- Release bump for typo in dist</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-8" date="1775649600">- Resolves: CVE-2026-4424</changelog>
</package>
<package pkgid="8e816ac1b4da4433489aca2f0b35f91189bd88f89ed7eb350416e370c9ba917f" name="bsdcpio" arch="x86_64">
  <version epoch="0" ver="3.7.7" rel="10.el10_2"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-1" date="1731931200">- Rebase to version 3.7.7
- Fixing SAST issues, accepted by upstream
- Resolves: RHEL-39391 RHEL-67895</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3.7.7-2" date="1741089600">- Fix for CVE-2024-57970
- Resolves: RHEL-79877</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-3" date="1749211200">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-4" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-5" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-6" date="1774353600">- Release bump</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-7" date="1774440000">- Release bump for typo in dist</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-8" date="1775649600">- Resolves: CVE-2026-4424</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-9" date="1782820800">- Resolves: CVE-2026-14164</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-10" date="1784116800">- Related: CVE-2026-14164</changelog>
</package>
<package pkgid="db683878cf9ebac330dddbdcd647f3ec4c5fd15dcd781c33976a174ce8cdefb9" name="bsdcpio" arch="x86_64">
  <version epoch="0" ver="3.7.7" rel="8.el10_1"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.2-7" date="1728907200">- Fix CVE-2024-48957
- Resolves: RHEL-62015</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.7.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-1" date="1731931200">- Rebase to version 3.7.7
- Fixing SAST issues, accepted by upstream
- Resolves: RHEL-39391 RHEL-67895</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3.7.7-2" date="1741089600">- Fix for CVE-2024-57970
- Resolves: RHEL-79877</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-3" date="1749211200">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-4" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-5" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-6" date="1774353600">- Release bump</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-7" date="1774440000">- Release bump for typo in dist</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-8" date="1775649600">- Resolves: CVE-2026-4424</changelog>
</package>
<package pkgid="1f7b7c8a4ba6a45816b25a97c9a89279093d18331de26956e52beb84b903452b" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.7.7" rel="10.el10_2"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-1" date="1731931200">- Rebase to version 3.7.7
- Fixing SAST issues, accepted by upstream
- Resolves: RHEL-39391 RHEL-67895</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3.7.7-2" date="1741089600">- Fix for CVE-2024-57970
- Resolves: RHEL-79877</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-3" date="1749211200">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-4" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-5" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-6" date="1774353600">- Release bump</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-7" date="1774440000">- Release bump for typo in dist</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-8" date="1775649600">- Resolves: CVE-2026-4424</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-9" date="1782820800">- Resolves: CVE-2026-14164</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-10" date="1784116800">- Related: CVE-2026-14164</changelog>
</package>
<package pkgid="369f6bbfa70620f4c95c2a29c2480ca8e8dffd54a70a382090de02d440d3d982" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.7.7" rel="8.el10_1"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.2-7" date="1728907200">- Fix CVE-2024-48957
- Resolves: RHEL-62015</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.7.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-1" date="1731931200">- Rebase to version 3.7.7
- Fixing SAST issues, accepted by upstream
- Resolves: RHEL-39391 RHEL-67895</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3.7.7-2" date="1741089600">- Fix for CVE-2024-57970
- Resolves: RHEL-79877</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-3" date="1749211200">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-4" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-5" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-6" date="1774353600">- Release bump</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-7" date="1774440000">- Release bump for typo in dist</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-8" date="1775649600">- Resolves: CVE-2026-4424</changelog>
</package>
<package pkgid="0b376bd662d329d4992b234e340ebf6e355eda50df4aeeabb4e8bbda1dc6493d" name="bsdunzip" arch="x86_64">
  <version epoch="0" ver="3.7.7" rel="10.el10_2"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-1" date="1731931200">- Rebase to version 3.7.7
- Fixing SAST issues, accepted by upstream
- Resolves: RHEL-39391 RHEL-67895</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3.7.7-2" date="1741089600">- Fix for CVE-2024-57970
- Resolves: RHEL-79877</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-3" date="1749211200">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-4" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-5" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-6" date="1774353600">- Release bump</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-7" date="1774440000">- Release bump for typo in dist</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-8" date="1775649600">- Resolves: CVE-2026-4424</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-9" date="1782820800">- Resolves: CVE-2026-14164</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-10" date="1784116800">- Related: CVE-2026-14164</changelog>
</package>
<package pkgid="e60c72bf8f9a4495fadc9bf8b04a50e5274dac6be084d3ae20282405f1cf7497" name="bsdunzip" arch="x86_64">
  <version epoch="0" ver="3.7.7" rel="8.el10_1"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.2-7" date="1728907200">- Fix CVE-2024-48957
- Resolves: RHEL-62015</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.7.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-1" date="1731931200">- Rebase to version 3.7.7
- Fixing SAST issues, accepted by upstream
- Resolves: RHEL-39391 RHEL-67895</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3.7.7-2" date="1741089600">- Fix for CVE-2024-57970
- Resolves: RHEL-79877</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-3" date="1749211200">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-4" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-5" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-6" date="1774353600">- Release bump</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-7" date="1774440000">- Release bump for typo in dist</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-8" date="1775649600">- Resolves: CVE-2026-4424</changelog>
</package>
<package pkgid="d88a49e679fc25a1a24a083dc0c5544844818f2e04403615ec1cbc9adcd954f4" name="bsf" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="54.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-47" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-48" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.0-49" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-50" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-51" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.0-52" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.0-53" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.0-53" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52687</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.0-54" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2be578d5746cf0fb95da100d63aa6249e59c20c038cb71739e266dfc6a926751" name="bsf-javadoc" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="54.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-47" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-48" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.0-49" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-50" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-51" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.0-52" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.0-53" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.0-53" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52687</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.0-54" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cd78e0ecb6264a4f7f2b81c4ad053f25cbe2bcf7f6b84ec44499c797caabe35e" name="bubblewrap" arch="x86_64">
  <version epoch="0" ver="0.10.0" rel="3.el10"/>
  <changelog author="Debarshi Ray &lt;debarshir@gnome.org&gt; - 0.7.0-3" date="1700136000">- Explicitly enable SELinux to avoid accidents and misunderstanding</changelog>
  <changelog author="Debarshi Ray &lt;debarshir@gnome.org&gt; - 0.7.0-4" date="1700136001">- Use Bash's bash-completion.pc to provide the location for completions</changelog>
  <changelog author="Debarshi Ray &lt;debarshir@gnome.org&gt; - 0.8.0-1" date="1700136002">- Update to 0.8.0 (#2173820)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@redhat.com&gt; - 0.9.0-1" date="1716292800">- Rebase to 0.9.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.10.0-1" date="1725019200">- Update to 0.10.0 (CVE-2024-42472)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.10.0-2" date="1725364800">- Update file gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.10.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="c65cfb36cdcb91d86fdc04f3796f424d49ff9c62061f2447c68e183d854f905e" name="build-helper-maven-plugin" arch="noarch">
  <version epoch="0" ver="3.5.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.0-4" date="1676980800">- Rename package from maven-plugin-build-helper</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.0-1" date="1692273600">- Update to upstream version 3.4.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.5.0-1" date="1702555200">- Update to upstream version 3.5.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5.0-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="df81c1adaf83be6363a30296c5c9d512b9498f5eea3cabe2a757e69787b34b79" name="build-helper-maven-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.5.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.0-4" date="1676980800">- Rename package from maven-plugin-build-helper</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.0-1" date="1692273600">- Update to upstream version 3.4.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.5.0-1" date="1702555200">- Update to upstream version 3.5.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5.0-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="87b28f688f3a15435858e86983d168464a89484fb09337c9e4a8eccce4d76c61" name="buildah" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="1.el10_2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.0-1" date="1753185600">- update to https://github.com/containers/buildah/releases/tag/v1.41.0
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.1-1" date="1754913600">- update to https://github.com/containers/buildah/releases/tag/v1.41.1
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.2-1" date="1755172800">- update to https://github.com/containers/buildah/releases/tag/v1.41.2
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.3-1" date="1755259200">- update to https://github.com/containers/buildah/releases/tag/v1.41.3
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1757678400">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-114411</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770120000">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-68121
- Resolves: RHEL-149240</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- Switch from GnuPG to Sequoia for container image signature verification
- Enable containers_image_sequoia build tag and add podman-sequoia dependency
- Resolves: RHEL-56366</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1775822400">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/c6eb14c)
- fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]"
- Resolves: RHEL-164030</changelog>
</package>
<package pkgid="8a111ef019d61de5704ac6b6940c53e0a30befadbd38bfe1b96d449e6a199c25" name="buildah" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="2.el10_2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.1-1" date="1754913600">- update to https://github.com/containers/buildah/releases/tag/v1.41.1
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.2-1" date="1755172800">- update to https://github.com/containers/buildah/releases/tag/v1.41.2
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.3-1" date="1755259200">- update to https://github.com/containers/buildah/releases/tag/v1.41.3
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1757678400">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-114411</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770120000">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-68121
- Resolves: RHEL-149240</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- Switch from GnuPG to Sequoia for container image signature verification
- Enable containers_image_sequoia build tag and add podman-sequoia dependency
- Resolves: RHEL-56366</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1775822400">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/c6eb14c)
- fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]"
- Resolves: RHEL-164030</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158476</changelog>
</package>
<package pkgid="230e07f937c11b8396adf23c25492628fbf910b60cd5b6c481ddc628e4140828" name="buildah" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="3.el10_2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.2-1" date="1755172800">- update to https://github.com/containers/buildah/releases/tag/v1.41.2
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.3-1" date="1755259200">- update to https://github.com/containers/buildah/releases/tag/v1.41.3
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1757678400">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-114411</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770120000">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-68121
- Resolves: RHEL-149240</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- Switch from GnuPG to Sequoia for container image signature verification
- Enable containers_image_sequoia build tag and add podman-sequoia dependency
- Resolves: RHEL-56366</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1775822400">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/c6eb14c)
- fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]"
- Resolves: RHEL-164030</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158476</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-3" date="1782820800">- bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830
- Resolves: RHEL-186266</changelog>
</package>
<package pkgid="b6a2ddd6c78e1c7f10aaa079c4cdbe89c068ac7ff842c4c5a34917b39237bc05" name="buildah" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="4.el10_2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.3-1" date="1755259200">- update to https://github.com/containers/buildah/releases/tag/v1.41.3
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1757678400">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-114411</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770120000">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-68121
- Resolves: RHEL-149240</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- Switch from GnuPG to Sequoia for container image signature verification
- Enable containers_image_sequoia build tag and add podman-sequoia dependency
- Resolves: RHEL-56366</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1775822400">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/c6eb14c)
- fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]"
- Resolves: RHEL-164030</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158476</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-3" date="1782820800">- bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830
- Resolves: RHEL-186266</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-4" date="1783684800">- rebuild for CVE-2026-39822
- Resolves: RHEL-193643</changelog>
</package>
<package pkgid="59a495329258b8fa65c17377c9b8b320eb147a3e85ee3867cec2ac1f8d47ce08" name="buildah" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="5.el10_2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1757678400">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-114411</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770120000">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-68121
- Resolves: RHEL-149240</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- Switch from GnuPG to Sequoia for container image signature verification
- Enable containers_image_sequoia build tag and add podman-sequoia dependency
- Resolves: RHEL-56366</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1775822400">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/c6eb14c)
- fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]"
- Resolves: RHEL-164030</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158476</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-3" date="1782820800">- bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830
- Resolves: RHEL-186266</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-4" date="1783684800">- rebuild for CVE-2026-39822
- Resolves: RHEL-193643</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-5" date="1786190400">- rebuild for CVE-2026-33810
- Resolves: RHEL-229833</changelog>
</package>
<package pkgid="c8ce07787ce34f15098c4f1cd96c88a7d452fe5902c9ade48df402f978b6e36d" name="buildah-tests" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="1.el10_2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.0-1" date="1753185600">- update to https://github.com/containers/buildah/releases/tag/v1.41.0
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.1-1" date="1754913600">- update to https://github.com/containers/buildah/releases/tag/v1.41.1
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.2-1" date="1755172800">- update to https://github.com/containers/buildah/releases/tag/v1.41.2
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.3-1" date="1755259200">- update to https://github.com/containers/buildah/releases/tag/v1.41.3
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1757678400">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-114411</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770120000">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-68121
- Resolves: RHEL-149240</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- Switch from GnuPG to Sequoia for container image signature verification
- Enable containers_image_sequoia build tag and add podman-sequoia dependency
- Resolves: RHEL-56366</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1775822400">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/c6eb14c)
- fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]"
- Resolves: RHEL-164030</changelog>
</package>
<package pkgid="58c02372a32ea0bb0302d13e30c852cccba4a3c9866b3fe7ad5f717f95ec3f09" name="buildah-tests" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="2.el10_2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.1-1" date="1754913600">- update to https://github.com/containers/buildah/releases/tag/v1.41.1
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.2-1" date="1755172800">- update to https://github.com/containers/buildah/releases/tag/v1.41.2
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.3-1" date="1755259200">- update to https://github.com/containers/buildah/releases/tag/v1.41.3
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1757678400">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-114411</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770120000">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-68121
- Resolves: RHEL-149240</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- Switch from GnuPG to Sequoia for container image signature verification
- Enable containers_image_sequoia build tag and add podman-sequoia dependency
- Resolves: RHEL-56366</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1775822400">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/c6eb14c)
- fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]"
- Resolves: RHEL-164030</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158476</changelog>
</package>
<package pkgid="86f18d171343916d2211ec5e9b6b57e8043a94f2c861eb291551e738eb74ec06" name="buildah-tests" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="3.el10_2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.2-1" date="1755172800">- update to https://github.com/containers/buildah/releases/tag/v1.41.2
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.3-1" date="1755259200">- update to https://github.com/containers/buildah/releases/tag/v1.41.3
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1757678400">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-114411</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770120000">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-68121
- Resolves: RHEL-149240</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- Switch from GnuPG to Sequoia for container image signature verification
- Enable containers_image_sequoia build tag and add podman-sequoia dependency
- Resolves: RHEL-56366</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1775822400">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/c6eb14c)
- fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]"
- Resolves: RHEL-164030</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158476</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-3" date="1782820800">- bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830
- Resolves: RHEL-186266</changelog>
</package>
<package pkgid="57e66e4b1dd6aefe6b27e78ff25b30dae476315208e133760e73f05f4344b651" name="buildah-tests" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="4.el10_2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.3-1" date="1755259200">- update to https://github.com/containers/buildah/releases/tag/v1.41.3
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1757678400">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-114411</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770120000">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-68121
- Resolves: RHEL-149240</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- Switch from GnuPG to Sequoia for container image signature verification
- Enable containers_image_sequoia build tag and add podman-sequoia dependency
- Resolves: RHEL-56366</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1775822400">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/c6eb14c)
- fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]"
- Resolves: RHEL-164030</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158476</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-3" date="1782820800">- bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830
- Resolves: RHEL-186266</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-4" date="1783684800">- rebuild for CVE-2026-39822
- Resolves: RHEL-193643</changelog>
</package>
<package pkgid="f54b8a4cdeccfe86f3519de92d7f6067032820cc10c1c984e1be0137ce9c0d52" name="buildah-tests" arch="x86_64">
  <version epoch="2" ver="1.43.1" rel="5.el10_2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.4-1" date="1757678400">- update to https://github.com/containers/buildah/releases/tag/v1.41.4
- Related: RHEL-114411</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.41.8-1" date="1770120000">- update to https://github.com/containers/buildah/releases/tag/v1.41.8
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-1" date="1770638400">- update to https://github.com/containers/buildah/releases/tag/v1.43.0
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-2" date="1771848000">- Rebuild for new golang to address CVE-2025-68121
- Resolves: RHEL-149240</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.0-3" date="1775563200">- Switch from GnuPG to Sequoia for container image signature verification
- Enable containers_image_sequoia build tag and add podman-sequoia dependency
- Resolves: RHEL-56366</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-1" date="1775822400">- update to the latest content of https://github.com/containers/buildah/tree/release-1.43
  (https://github.com/containers/buildah/commit/c6eb14c)
- fixes "Buildah concurrent bearer token requests [RHEL 10.2] [0day]"
- Resolves: RHEL-164030</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-2" date="1777896000">- Rebuild for CVE-2026-25679
- Resolves: RHEL-158476</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-3" date="1782820800">- bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830
- Resolves: RHEL-186266</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-4" date="1783684800">- rebuild for CVE-2026-39822
- Resolves: RHEL-193643</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.43.1-5" date="1786190400">- rebuild for CVE-2026-33810
- Resolves: RHEL-229833</changelog>
</package>
<package pkgid="d5dc5f866ea1a40acf96bccc27ffd12d490e959f40d7f94edde112b889777ab6" name="butane" arch="x86_64">
  <version epoch="0" ver="0.27.0" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.19.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Yasmin Valim &lt;ydesouza@redhat.com&gt; - 0.22.0-1" date="1727352000">- new version</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Yasmin Valim &lt;ydesouza@redhat.com&gt; - 0.23.0-1" date="1734004800">- new version</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 0.24.0-1" date="1748433600">- new version</changelog>
  <changelog author="Tiago Bueno &lt;tbueno@redhat.com&gt; - 0.25.1-1" date="1759924800">- new version</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 0.26.0-1" date="1768910400">- new version</changelog>
  <changelog author="Yasmin de Souza &lt;ydesouza@redhat.com&gt; - 0.27.0-1" date="1773057600">- new version</changelog>
</package>
<package pkgid="ef5c454ac8480a972c311da2159631a5e43ad3ae9e4a4838da4038a8ba341a91" name="butane-redistributable" arch="noarch">
  <version epoch="0" ver="0.27.0" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.19.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Yasmin Valim &lt;ydesouza@redhat.com&gt; - 0.22.0-1" date="1727352000">- new version</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Yasmin Valim &lt;ydesouza@redhat.com&gt; - 0.23.0-1" date="1734004800">- new version</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 0.24.0-1" date="1748433600">- new version</changelog>
  <changelog author="Tiago Bueno &lt;tbueno@redhat.com&gt; - 0.25.1-1" date="1759924800">- new version</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 0.26.0-1" date="1768910400">- new version</changelog>
  <changelog author="Yasmin de Souza &lt;ydesouza@redhat.com&gt; - 0.27.0-1" date="1773057600">- new version</changelog>
</package>
<package pkgid="fc0f16fc6fa27d545be867cb8c8fef1d71057b112a46d6c1b3d40ec3ad71b1cb" name="byacc" arch="x86_64">
  <version epoch="0" ver="2.0.20230521" rel="7.el10"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.0.20221106-1" date="1669723200">- Rebase to byacc-2.0-20221106 (#2141488)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.20221106-2" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.0.20230219-1" date="1677153600">- Rebase to byacc-2.0.20230219 (#2156901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.0.20230521-1" date="1688040000">- Rebase to byacc-2.0.20230521 (#2208910)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.0.20230521-2" date="1698321600">- Analyse byacc sources for license information
- Migrate License field to SPDX identifiers for
  https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
  (#2222081)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.0.20230521-3" date="1699444800">- Rebuilt to re-trigger automated bodhi (Fedora Updates System) tests</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.20230521-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.20230521-5" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.20230521-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.20230521-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="850dc6737f3bb5cef131d36d447af614a06d67ed9de03358426d9b5cd5197d3f" name="byaccj" arch="x86_64">
  <version epoch="0" ver="1.15" rel="36.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.15-29" date="1673438400">- C99 compatibility fix</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15-30" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15-31" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.15-32" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15-33" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15-34" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.15-35" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.15-36" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2701a09628c717173088fe6e51c95d4f83b66152657c69fab93ef076f1e77293" name="byte-buddy" arch="noarch">
  <version epoch="0" ver="1.14.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-3" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-6" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.2-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.2-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-8" date="1722859200">- Port to OpenJDK 21
- Resolves: RHEL-52717</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-10" date="1731499200">- Rebuild to fix main-class attribute of module-info</changelog>
</package>
<package pkgid="f92a726df12e604847993910c9cfb633f335946dc3733ae48eb4627b54d9ecb2" name="byte-buddy-agent" arch="noarch">
  <version epoch="0" ver="1.14.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-3" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-6" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.2-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.2-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-8" date="1722859200">- Port to OpenJDK 21
- Resolves: RHEL-52717</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-10" date="1731499200">- Rebuild to fix main-class attribute of module-info</changelog>
</package>
<package pkgid="dd4336c8baddbb5ea3b1f98be553d08d6fe7b6d15540b15e56fd5de3afdad9b0" name="byte-buddy-javadoc" arch="noarch">
  <version epoch="0" ver="1.14.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-3" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-6" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.2-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.2-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-8" date="1722859200">- Port to OpenJDK 21
- Resolves: RHEL-52717</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-10" date="1731499200">- Rebuild to fix main-class attribute of module-info</changelog>
</package>
<package pkgid="85fad27d2d1c336c7734a86aa5ab48d578aa41bb72c3d47f4656fb63855beb63" name="byte-buddy-maven-plugin" arch="noarch">
  <version epoch="0" ver="1.14.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-3" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-6" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.2-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.2-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-8" date="1722859200">- Port to OpenJDK 21
- Resolves: RHEL-52717</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-10" date="1731499200">- Rebuild to fix main-class attribute of module-info</changelog>
</package>
<package pkgid="4022b25ea36473ec51826250bab29990c7ac9949b8b76284487a71f3fa1ff2f6" name="byteman" arch="noarch">
  <version epoch="0" ver="4.0.16" rel="19.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.0.16-10" date="1689768000">- Build with Java 17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.16-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.16-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.0.16-13" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.0.16-14" date="1709467200">- Really rebuild with java-21-openjdk as system jdk</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.16-15" date="1718280000">- Bump release.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.16-16" date="1718280001">- Bump release for test run.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.16-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.16-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.16-19" date="1734004800">- Bump release for updated gating tests
  Related: RHEL-70753</changelog>
</package>
<package pkgid="5407155fb0d49163996600cbecb91db2c8f7eec9764f3698cf1896c084d2e394" name="byteman-bmunit" arch="noarch">
  <version epoch="0" ver="4.0.16" rel="19.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.0.16-10" date="1689768000">- Build with Java 17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.16-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.16-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.0.16-13" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.0.16-14" date="1709467200">- Really rebuild with java-21-openjdk as system jdk</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.16-15" date="1718280000">- Bump release.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.16-16" date="1718280001">- Bump release for test run.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.16-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.16-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.16-19" date="1734004800">- Bump release for updated gating tests
  Related: RHEL-70753</changelog>
</package>
<package pkgid="37a8b8edc9cac7d5d2cd56b70cdf938eff7ec5335ae4b5a16da6d6aa35210b1d" name="byteman-dtest" arch="noarch">
  <version epoch="0" ver="4.0.16" rel="19.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.0.16-10" date="1689768000">- Build with Java 17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.16-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.16-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.0.16-13" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.0.16-14" date="1709467200">- Really rebuild with java-21-openjdk as system jdk</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.16-15" date="1718280000">- Bump release.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.16-16" date="1718280001">- Bump release for test run.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.16-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.16-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.16-19" date="1734004800">- Bump release for updated gating tests
  Related: RHEL-70753</changelog>
</package>
<package pkgid="52189de28744899d1cb620969b9a7717252a23990998cabdc52d878931a914b1" name="byteman-javadoc" arch="noarch">
  <version epoch="0" ver="4.0.16" rel="19.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.0.16-10" date="1689768000">- Build with Java 17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.16-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.16-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.0.16-13" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.0.16-14" date="1709467200">- Really rebuild with java-21-openjdk as system jdk</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.16-15" date="1718280000">- Bump release.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.16-16" date="1718280001">- Bump release for test run.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.16-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.16-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.16-19" date="1734004800">- Bump release for updated gating tests
  Related: RHEL-70753</changelog>
</package>
<package pkgid="02ac0b5288b000967abbd916393a63dd25d0f1a1cae5ee2708f3a286cc8554a0" name="byteman-rulecheck-maven-plugin" arch="noarch">
  <version epoch="0" ver="4.0.16" rel="19.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.0.16-10" date="1689768000">- Build with Java 17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.16-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.16-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.0.16-13" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.0.16-14" date="1709467200">- Really rebuild with java-21-openjdk as system jdk</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.16-15" date="1718280000">- Bump release.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.16-16" date="1718280001">- Bump release for test run.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.16-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.16-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.16-19" date="1734004800">- Bump release for updated gating tests
  Related: RHEL-70753</changelog>
</package>
<package pkgid="afa2f24ec9d38bee5640b640b226958fff136af093d6ea24b09eaf413c363e16" name="bzip2" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="25.el10"/>
  <changelog author="Stewart Smith &lt;trawets@amazon.com&gt; - 1.0.8-16" date="1689854400">- gpgverify source tarball</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.8-17" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.8-18" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.8-19" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-20" date="1724068800">- Rebuild with enabled gating
Resolves: RHEL-52100</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.8-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-22" date="1733227200">- Minor spec cleanup
- Add explicit requires for the bzip2 package
  Resolves: RHEL-69797</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-23" date="1733227201">- Fix out of bounds write in bz_decompress
Resolves: CVE-2019-12900</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-24" date="1733227202">- Fix an off by one error in bzip2recover.c
Resolves: RHEL-36503</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-25" date="1734609600">- Revert the changes from 1.0.8-23
Resolves: RHEL-71750</changelog>
</package>
<package pkgid="b8dc5e88f02fa6de637e2c04d5166f75e1349cdd8b7ec6c6f09c1a1dcce42c56" name="bzip2-devel" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="25.el10"/>
  <changelog author="Stewart Smith &lt;trawets@amazon.com&gt; - 1.0.8-16" date="1689854400">- gpgverify source tarball</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.8-17" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.8-18" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.8-19" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-20" date="1724068800">- Rebuild with enabled gating
Resolves: RHEL-52100</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.8-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-22" date="1733227200">- Minor spec cleanup
- Add explicit requires for the bzip2 package
  Resolves: RHEL-69797</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-23" date="1733227201">- Fix out of bounds write in bz_decompress
Resolves: CVE-2019-12900</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-24" date="1733227202">- Fix an off by one error in bzip2recover.c
Resolves: RHEL-36503</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-25" date="1734609600">- Revert the changes from 1.0.8-23
Resolves: RHEL-71750</changelog>
</package>
<package pkgid="b8dfb5a864863fbdf3453a444654b13a0832bc903221480adecb7e65f46c01f7" name="bzip2-libs" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="25.el10"/>
  <changelog author="Stewart Smith &lt;trawets@amazon.com&gt; - 1.0.8-16" date="1689854400">- gpgverify source tarball</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.8-17" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.8-18" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.8-19" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-20" date="1724068800">- Rebuild with enabled gating
Resolves: RHEL-52100</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.8-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-22" date="1733227200">- Minor spec cleanup
- Add explicit requires for the bzip2 package
  Resolves: RHEL-69797</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-23" date="1733227201">- Fix out of bounds write in bz_decompress
Resolves: CVE-2019-12900</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-24" date="1733227202">- Fix an off by one error in bzip2recover.c
Resolves: RHEL-36503</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-25" date="1734609600">- Revert the changes from 1.0.8-23
Resolves: RHEL-71750</changelog>
</package>
<package pkgid="808f13ce3dc7a3706764af31da5b1c840178faa5482683107829e624551f3e02" name="bzip2-static" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="25.el10"/>
  <changelog author="Stewart Smith &lt;trawets@amazon.com&gt; - 1.0.8-16" date="1689854400">- gpgverify source tarball</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.8-17" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.8-18" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.8-19" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-20" date="1724068800">- Rebuild with enabled gating
Resolves: RHEL-52100</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.8-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-22" date="1733227200">- Minor spec cleanup
- Add explicit requires for the bzip2 package
  Resolves: RHEL-69797</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-23" date="1733227201">- Fix out of bounds write in bz_decompress
Resolves: CVE-2019-12900</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-24" date="1733227202">- Fix an off by one error in bzip2recover.c
Resolves: RHEL-36503</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-25" date="1734609600">- Revert the changes from 1.0.8-23
Resolves: RHEL-71750</changelog>
</package>
<package pkgid="6a998fe9f517e668f7033feca4b9b13f5a355980b85aa22a63fd2395f1017357" name="c-ares" arch="x86_64">
  <version epoch="0" ver="1.34.6" rel="1.el10"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 1.25.0-1" date="1704888000">- update to 1.25.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.25.0-4" date="1711454400">- Resolves: RHEL-30025 - Out of bounds read in ares__read_line() [rhel-10.0]</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.25.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.25.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Alejandro L&#xF3;pez &lt;allopez@redhat.com&gt; - 1.34.6-1" date="1765281600">- Update to 1.34.6
  Resolves: RHEL-103761</changelog>
</package>
<package pkgid="672b869823461b71484f317feb434966699ed5433cf7e8dfe37bc59d1b4cc32c" name="c-ares" arch="x86_64">
  <version epoch="0" ver="1.34.6" rel="2.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.25.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Alejandro L&#xF3;pez &lt;allopez@redhat.com&gt; - 1.34.6-1" date="1765281600">- Update to 1.34.6
  Resolves: RHEL-103761</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.34.6-2" date="1783684800">- Fix double-free in process_timeouts() (CVE-2026-33630)
  Resolves: RHEL-192867</changelog>
</package>
<package pkgid="6ce08854c2c6bb1e8cd731e5ca5171d318ff4e20e8c943f44e66c89dacf217a3" name="c-ares-devel" arch="x86_64">
  <version epoch="0" ver="1.34.6" rel="1.el10"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 1.25.0-1" date="1704888000">- update to 1.25.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.25.0-4" date="1711454400">- Resolves: RHEL-30025 - Out of bounds read in ares__read_line() [rhel-10.0]</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.25.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.25.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Alejandro L&#xF3;pez &lt;allopez@redhat.com&gt; - 1.34.6-1" date="1765281600">- Update to 1.34.6
  Resolves: RHEL-103761</changelog>
</package>
<package pkgid="824cbd19b5a628ffea54fa9e6ca81574cbb69df23a1ec9d444a47f803d022c2e" name="c-ares-devel" arch="x86_64">
  <version epoch="0" ver="1.34.6" rel="2.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.25.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Alejandro L&#xF3;pez &lt;allopez@redhat.com&gt; - 1.34.6-1" date="1765281600">- Update to 1.34.6
  Resolves: RHEL-103761</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.34.6-2" date="1783684800">- Fix double-free in process_timeouts() (CVE-2026-33630)
  Resolves: RHEL-192867</changelog>
</package>
<package pkgid="f6e4769b297d2c23b1dc8fd0a1fbec730cde3307d50c415c0274206a944a285a" name="c2esp" arch="x86_64">
  <version epoch="0" ver="2.7" rel="34.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.7-26" date="1670760000">- Port to C99 (#2152430)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7-27" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2.7-28" date="1676462400">- move to libcupsfilters-devel and libppd-devel</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7-29" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2.7-30" date="1690372800">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7-31" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7-32" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7-33" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7-34" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fb3e6f93a2cc5b162f30e4641d937d58fa762ed482795da8ae21972b1f6a2193" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2025.2.80_v9.0.305" rel="102.el10"/>
  <changelog author="Frantisek Krenzelok &lt;fkrenzel@redhat.com&gt; - 2024.2.69_v8.0.303-101.1" date="1724068800">- remove base-ci.* tests from gating.yaml</changelog>
  <changelog author="Frantisek Krenzelok &lt;fkrenzel@redhat.com&gt; - 2024.2.69_v8.0.303-101.1" date="1724760000">- Temporarily generate the directory-hash files in %install ...(next item)
- Add list of ghost files from directory-hash to %files</changelog>
  <changelog author="Frantisek Krenzelok &lt;fkrenzel@redhat.com&gt; - 2024.2.69_v8.0.303-101.1" date="1724760001">- update-ca-trust: return warnings on a unsupported argument instead of error</changelog>
  <changelog author="Frantisek Krenzelok &lt;fkrenzel@redhat.com&gt; - 2024.2.69_v8.0.303-101.2" date="1724846400">- update-ca-trust: copy directory-hash symlinks to /etc/pki/tls/certs
- Remove /etc/pki/tls/cert.pem symlink so that it isn't loaded by default</changelog>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 2024.2.69_v8.0.303-101.3" date="1727438400">- Add missing Requires(post) on findutils for update-ca-trust
- Resolves: RHEL-60723</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2024.2.69_v8.0.303-102.3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Frantisek Krenzelok &lt;fkrenzel@redhat.com&gt; - 2024.2.69_v8.0.303-102.4" date="1742472000">- Remove unused folder /etc/pki/ca-trust/extracted/openssl</changelog>
  <changelog author="Frantisek Krenzelok &lt;fkrenzel@redhat.com&gt; - 2024.2.69_v8.0.303-102.5" date="1755518400">- Bring back openssl trusted format bundle as well (Resolves: RHEL-109484)
- Restored the following symlinks:
	* /etc/pki/tls/cert.pem
	* /etc/pki/tls/certs/ca-certificates.crt
	* /etc/pki/tls/certs/ca-bundle.trust.crt
	* /etc/pki/tls/certs/ca-bundle.crt
	* /etc/ssl/cert.pem
	* /etc/ssl/certs/ca-certificates.crt
	* /etc/ssl/certs/ca-bundle.trust.crt
	* /etc/ssl/certs/ca-bundle.crt
- add libffi</changelog>
  <changelog author="rhel-developer-toolbox &lt;krenzelok.frantisek@gmail.com&gt; - 2025.2.80_v9.0.305-101" date="1760097600">- Update to CKBI 2.80_v9.0.305 from NSS 3.114
-    Adding:
-     # Certificate "TWCA CYBER Root CA"
-     # Certificate "TWCA Global Root CA G2"
-     # Certificate "SecureSign Root CA12"
-     # Certificate "SecureSign Root CA14"
-     # Certificate "SecureSign Root CA15"
-     # Certificate "D-TRUST BR Root CA 2 2023"
-     # Certificate "TrustAsia SMIME ECC Root CA"
-     # Certificate "TrustAsia SMIME RSA Root CA"
-     # Certificate "TrustAsia TLS ECC Root CA"
-     # Certificate "TrustAsia TLS RSA Root CA"
-     # Certificate "D-TRUST EV Root CA 2 2023"
-     # Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
-     # Certificate "SwissSign RSA TLS Root CA 2022 - 1"
-     # Certificate "Sectigo Public Code Signing Root R46"
-     # Certificate "Sectigo Public Code Signing Root E46"</changelog>
  <changelog author="Frantisek Krenzelok &lt;fkrenzel@redhat.com&gt; - 2025.2.80_v9.0.305-102" date="1761739200">- Remove /etc/pki/tls/certs/ca-certificates.crt symlink which was included by mistake</changelog>
</package>
<package pkgid="e2a6a8fc2a6e3a0bd89c86ffa1a6d8f1f6e574c5acefdea7065b84ac77b7c911" name="cachefilesd" arch="x86_64">
  <version epoch="0" ver="0.10.10" rel="20.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.10-15" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 0.10.10-16" date="1696593600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.10-17" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.10-18" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.10.10-19" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.10.10-20" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="586c1c214a13caccbdb3c1500fc842a611537f9e7c978854c814b70b1b28fbe9" name="cairo" arch="x86_64">
  <version epoch="0" ver="1.18.2" rel="2.el10"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 1.17.8-2" date="1677326400">- Rebuild for new freetype-2.13.0</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.17.8-3" date="1678881600">- Fix missing glyphs in ft-font</changelog>
  <changelog author="Scott Talbert &lt;swt@techie.net&gt; - 1.17.8-4" date="1684152000">- Fix crash due to scaled_glyph-&gt;dev_private reuse (#2189228)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.8-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.18.0-1" date="1695816000">- Update to 1.18.0
- Drop the xml surface and cairo-sphinx tool as they've been removed upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.18.2-1" date="1725969600">- Update to 1.18.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.2-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="04ff8d091ecabf7e27aaa45cf8b0328832b9cd11c75f8c0d1e419a0fdabaf49a" name="cairo-devel" arch="x86_64">
  <version epoch="0" ver="1.18.2" rel="2.el10"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 1.17.8-2" date="1677326400">- Rebuild for new freetype-2.13.0</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.17.8-3" date="1678881600">- Fix missing glyphs in ft-font</changelog>
  <changelog author="Scott Talbert &lt;swt@techie.net&gt; - 1.17.8-4" date="1684152000">- Fix crash due to scaled_glyph-&gt;dev_private reuse (#2189228)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.8-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.18.0-1" date="1695816000">- Update to 1.18.0
- Drop the xml surface and cairo-sphinx tool as they've been removed upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.18.2-1" date="1725969600">- Update to 1.18.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.2-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0cc6adf87b8d512a4c32cd520eddc190b6ecb6bff7193947971f43db9c1b9a8a" name="cairo-gobject" arch="x86_64">
  <version epoch="0" ver="1.18.2" rel="2.el10"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 1.17.8-2" date="1677326400">- Rebuild for new freetype-2.13.0</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.17.8-3" date="1678881600">- Fix missing glyphs in ft-font</changelog>
  <changelog author="Scott Talbert &lt;swt@techie.net&gt; - 1.17.8-4" date="1684152000">- Fix crash due to scaled_glyph-&gt;dev_private reuse (#2189228)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.8-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.18.0-1" date="1695816000">- Update to 1.18.0
- Drop the xml surface and cairo-sphinx tool as they've been removed upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.18.2-1" date="1725969600">- Update to 1.18.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.2-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9f9f56257df5e90cdf49b83ca16bc12cedf98900449fb64f0217a47eb0eac959" name="cairo-gobject-devel" arch="x86_64">
  <version epoch="0" ver="1.18.2" rel="2.el10"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 1.17.8-2" date="1677326400">- Rebuild for new freetype-2.13.0</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.17.8-3" date="1678881600">- Fix missing glyphs in ft-font</changelog>
  <changelog author="Scott Talbert &lt;swt@techie.net&gt; - 1.17.8-4" date="1684152000">- Fix crash due to scaled_glyph-&gt;dev_private reuse (#2189228)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.8-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.18.0-1" date="1695816000">- Update to 1.18.0
- Drop the xml surface and cairo-sphinx tool as they've been removed upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.18.2-1" date="1725969600">- Update to 1.18.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.2-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9f8969d31c3f64c7b6b1453610cc4ff29461db5db0aa134c7fb4d703f21d9a08" name="cairo-tools" arch="x86_64">
  <version epoch="0" ver="1.18.2" rel="2.el10"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 1.17.8-2" date="1677326400">- Rebuild for new freetype-2.13.0</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.17.8-3" date="1678881600">- Fix missing glyphs in ft-font</changelog>
  <changelog author="Scott Talbert &lt;swt@techie.net&gt; - 1.17.8-4" date="1684152000">- Fix crash due to scaled_glyph-&gt;dev_private reuse (#2189228)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.8-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.18.0-1" date="1695816000">- Update to 1.18.0
- Drop the xml surface and cairo-sphinx tool as they've been removed upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.18.2-1" date="1725969600">- Update to 1.18.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.2-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="92c459598f61254491cc4584a6ecef9cb537cd6e9d40f6ff6ae9d28bed34ea64" name="cairomm" arch="x86_64">
  <version epoch="0" ver="1.14.5" rel="1.el10"/>
  <changelog author="Rocky Linux Build System (Peridot) &lt;releng@rockylinux.org&gt; - 1.14.5-1.el10" date="1709294400">- local build</changelog>
</package>
<package pkgid="940cc7ee7a31a7d0b93b5058c153e5744c55ed18b6c995fddddb7620871e0ef8" name="cairomm-devel" arch="x86_64">
  <version epoch="0" ver="1.14.5" rel="1.el10"/>
  <changelog author="Rocky Linux Build System (Peridot) &lt;releng@rockylinux.org&gt; - 1.14.5-1.el10" date="1709294400">- local build</changelog>
</package>
<package pkgid="b9dba81ed0296381e6787b76c059be7c0b9cbc2a5bb2decb8e8fa6854efc704f" name="cairomm-doc" arch="noarch">
  <version epoch="0" ver="1.14.5" rel="1.el10"/>
  <changelog author="Rocky Linux Build System (Peridot) &lt;releng@rockylinux.org&gt; - 1.14.5-1.el10" date="1709294400">- local build</changelog>
</package>
<package pkgid="bc6d1c3716adb062addf174cf11659e48a6ede52a1ce7f395fc3c8eda14d2ce9" name="cairomm1.16" arch="x86_64">
  <version epoch="0" ver="1.18.0" rel="6.el10"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.16.2-7" date="1674475200">- Revert "Work around missing dependency on texlive-wasy"</changelog>
  <changelog author="Bj&#xF6;rn Persson &lt;Bjorn@Rombobj&#xF6;rn.se&gt; - 1.16.2-8" date="1686830400">- Removed superfluous processing of the OpenPGP key.</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.16.2-9" date="1687003200">- Use new (rpm 4.17.1+) bcond style</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.2-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.18.0-1" date="1695902400">- Update to 1.18.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.18.0-4" date="1713355200">- gating enabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="b767610b0d1fdeac035ee5d379520eb548a0f8651469bd8cd763c948dd52f7db" name="cairomm1.16-devel" arch="x86_64">
  <version epoch="0" ver="1.18.0" rel="6.el10"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.16.2-7" date="1674475200">- Revert "Work around missing dependency on texlive-wasy"</changelog>
  <changelog author="Bj&#xF6;rn Persson &lt;Bjorn@Rombobj&#xF6;rn.se&gt; - 1.16.2-8" date="1686830400">- Removed superfluous processing of the OpenPGP key.</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.16.2-9" date="1687003200">- Use new (rpm 4.17.1+) bcond style</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.2-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.18.0-1" date="1695902400">- Update to 1.18.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.18.0-4" date="1713355200">- gating enabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="6f90ab6ae5705811a10c244a20b2049d6bc0009fa8d897ea47cb04f9bf9fc1d7" name="cairomm1.16-doc" arch="noarch">
  <version epoch="0" ver="1.18.0" rel="6.el10"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.16.2-7" date="1674475200">- Revert "Work around missing dependency on texlive-wasy"</changelog>
  <changelog author="Bj&#xF6;rn Persson &lt;Bjorn@Rombobj&#xF6;rn.se&gt; - 1.16.2-8" date="1686830400">- Removed superfluous processing of the OpenPGP key.</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.16.2-9" date="1687003200">- Use new (rpm 4.17.1+) bcond style</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.2-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.18.0-1" date="1695902400">- Update to 1.18.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.18.0-4" date="1713355200">- gating enabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="4d762836f321c2bbe0266164d7d851e02132384e7bc0bb86f59440e43d53c77c" name="capnproto" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="1.el10"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.0.1-1" date="1758888000">- Initial commit on c10s</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.0.1-2" date="1758888001">- Enable gating</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.2.0-1" date="1763726400">- Rebase to latest capnproto-1.2.0</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.2.0-3" date="1765540800">- Remove needless test skipping</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-1" date="1765972800">- capnproto-1.3.0 (RHEL-127899)</changelog>
</package>
<package pkgid="422bc222b83179fd5b1423fd4f08072e49019fb36be6dd6c2c774ddf4315e6b8" name="capnproto-devel" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="1.el10"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.0.1-1" date="1758888000">- Initial commit on c10s</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.0.1-2" date="1758888001">- Enable gating</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.2.0-1" date="1763726400">- Rebase to latest capnproto-1.2.0</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.2.0-3" date="1765540800">- Remove needless test skipping</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-1" date="1765972800">- capnproto-1.3.0 (RHEL-127899)</changelog>
</package>
<package pkgid="bd1bd671bdeee64ebac26a489d03876bffaece97c0909b73d6f9118739d65f05" name="capnproto-libs" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="1.el10"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.0.1-1" date="1758888000">- Initial commit on c10s</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.0.1-2" date="1758888001">- Enable gating</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.2.0-1" date="1763726400">- Rebase to latest capnproto-1.2.0</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.2.0-3" date="1765540800">- Remove needless test skipping</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-1" date="1765972800">- capnproto-1.3.0 (RHEL-127899)</changelog>
</package>
<package pkgid="dfd4e3123399740ad69d91c4dc23f9cc515b4a267f79f27b09f7fc85c7b43960" name="capstone" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="8.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 5.0.1-5" date="1726920000">- Rebuilt with java-21-openjdk as default JDK:
  https://issues.redhat.com/browse/RHEL-34597</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 5.0.1-7" date="1773403200">- Fix CVE-2025-67873 (heap buffer overflow)
  Resolves: RHEL-141553
- Fix CVE-2025-68114 (memory corruption)
  Resolves: RHEL-137749</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 5.0.1-8" date="1775044800">- Rebuild for rhel-10.2</changelog>
</package>
<package pkgid="36f4ac283d64450174ac9df7856fc3d4392e28073b1adf424afb69c6a8e01a72" name="capstone-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="8.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 5.0.1-5" date="1726920000">- Rebuilt with java-21-openjdk as default JDK:
  https://issues.redhat.com/browse/RHEL-34597</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 5.0.1-7" date="1773403200">- Fix CVE-2025-67873 (heap buffer overflow)
  Resolves: RHEL-141553
- Fix CVE-2025-68114 (memory corruption)
  Resolves: RHEL-137749</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 5.0.1-8" date="1775044800">- Rebuild for rhel-10.2</changelog>
</package>
<package pkgid="9c009f9d9e566f7670f79ada7406ea28fabedccaf4f9e1ea23cf4a00fd28ff71" name="capstone-java" arch="noarch">
  <version epoch="0" ver="5.0.1" rel="8.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 5.0.1-5" date="1726920000">- Rebuilt with java-21-openjdk as default JDK:
  https://issues.redhat.com/browse/RHEL-34597</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 5.0.1-7" date="1773403200">- Fix CVE-2025-67873 (heap buffer overflow)
  Resolves: RHEL-141553
- Fix CVE-2025-68114 (memory corruption)
  Resolves: RHEL-137749</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 5.0.1-8" date="1775044800">- Rebuild for rhel-10.2</changelog>
</package>
<package pkgid="5c462cec175396b46e05bfbd1215dcf13573e1530dc44443ae72b7d5d38df758" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.92.0" rel="1.el10"/>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.85.0-2" date="1741089600">- Temporarily skip PGO on s390x</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.86.0-1" date="1744113600">- Update to Rust 1.86.0</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.86.0-2" date="1745496000">- Temporarily skip PGO on RHEL ppc64le</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.87.0-1" date="1748520000">- Update to Rust 1.87.0</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.88.0-1" date="1752235200">- Update to Rust 1.88.0</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.89.0-1" date="1757505600">- Update to Rust 1.89.0</changelog>
  <changelog author="Jesus Checa Hidalgo &lt;jchecahi@redhat.com&gt; - 1.89.0-2" date="1757937600">- Add unicode exceptions (rpminspect) for rust 1.89 update</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 1.90.0-1" date="1759233600">- Update to Rust 1.90</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 1.91.0-1" date="1762344000">- Update to Rust 1.91.0</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.92.0-1" date="1767787200">- Update to Rust 1.92.0</changelog>
</package>
<package pkgid="cd466a2ceb8875c53bd6d35b19d78db01282792ed4b8d52edd4b4ea223c55257" name="catatonit" arch="x86_64">
  <version epoch="5" ver="0.2.1" rel="1.el10"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.2.0-1" date="1733832000">- update to https://github.com/openSUSE/catatonit/releases/tag/v0.2.0
- Resolves: RHEL-70589</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.2.0-2" date="1734091200">- Add missing symlink and rebuild
- Resolves: RHEL-71134</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.2.1-1" date="1734350400">- update to https://github.com/openSUSE/catatonit/releases/tag/v0.2.1
- Related: RHEL-58990</changelog>
</package>
<package pkgid="69899884d19bb21a01cecc62bef0a90158514d6cd084236aeeaafb0b117592c9" name="catch1-devel" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.2-12" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Tom Hughes &lt;tom@compton.nu&gt; - 1.12.2-13" date="1677067200">- Drop unnecessary conflict with catch-devel</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.2-14" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.2-15" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.2-16" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.12.2-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 1.12.2-18" date="1723723200">- Rebuild
  Resolves: RHEL-54347</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.12.2-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ff274af4825fd10bdca4e060b2022883a6774485e373701cc2d1ddc16cd18dae" name="cbindgen" arch="x86_64">
  <version epoch="0" ver="0.29.2" rel="1.el10"/>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 0.29.0-1" date="1752062400">- Initial commit on c10s</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 0.29.0-2" date="1752148800">- Initialize gating</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 0.29.2-1" date="1769515200">- Update to 0.29.2</changelog>
</package>
<package pkgid="42a190208601fd9bad954da0c0d1a259a09519e0f57fb2bf8ee35254400bb7ae" name="cdi-api" arch="noarch">
  <version epoch="0" ver="2.0.2" rel="15.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-7" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.2-9" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.2-10" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.2-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.2-14" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.2-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0ee803b9ba8b49e5036de63f397857562e08d63893f28beb8803ff510a3f6f76" name="cdi-api-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.2" rel="15.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-7" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.2-9" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.2-10" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.2-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.2-14" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.2-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="35c28c227f9138f856fec752e69354694663a17c5a10576df3146b3d44b4615e" name="cdrskin" arch="x86_64">
  <version epoch="0" ver="1.5.6" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.4-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.5.6-1" date="1687262400">- Upgrade to 1.5.6 (#2216132)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b9c91f44e43d9d8bd0e638938647d770afa325267642006fce3281155ed812eb" name="centos-release-ceph-squid" arch="noarch">
  <version epoch="0" ver="1.0" rel="2.el10"/>
  <changelog author="Neil Hanlon &lt;neil@shrug.pw&gt; - 1.0-1" date="1757332800">- squid</changelog>
  <changelog author="Neil Hanlon &lt;neil@shrug.pw&gt; - 1.0-2" date="1758024000">- bump from broken repo file somehow</changelog>
</package>
<package pkgid="bfcc2f1a6933871463141dfb7f0c5db24953626569bacec08e56c193f54899b9" name="centos-release-ceph-tentacle" arch="noarch">
  <version epoch="0" ver="1.0" rel="1.el10"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 1.0-1" date="1757937600">- tentacle</changelog>
</package>
<package pkgid="b1b8370f0ee9f8dc1eba5acf98cff34987c50e9ae081491b52b682f053ca8b3e" name="centos-release-kmods" arch="x86_64">
  <version epoch="0" ver="10" rel="14.el10"/>
  <changelog author="Peter Georg &lt;peter.georg@physik.uni-regensburg.de&gt; - 10-10" date="1732276800">- Initial release of common version</changelog>
  <changelog author="Peter Georg &lt;peter.georg@physik.uni-regensburg.de&gt; - 10-11" date="1747224000">- ExclusiveArch: x86_64 aarch64 ppc64le</changelog>
  <changelog author="Peter Georg &lt;peter.georg@physik.uni-regensburg.de&gt; - 10-12" date="1754308800">- Drop Recommends: epel-release</changelog>
  <changelog author="Peter Georg &lt;peter.georg@physik.uni-regensburg.de&gt; - 10-13" date="1757332800">- Do not use $stream to distinguish Enterprise Linux from Stream</changelog>
  <changelog author="Peter Georg &lt;peter.georg@physik.uni-regensburg.de&gt; - 10-14" date="1757332801">- Replace $releasever_major with fixed value for any version</changelog>
</package>
<package pkgid="7259f380e349185404ae7c3cc00eaec698a7ef3b85d3d84df526b0c84b8055a7" name="centos-release-kmods-kernel" arch="x86_64">
  <version epoch="0" ver="10" rel="5.el10"/>
  <changelog author="Peter Georg &lt;peter.georg@physik.uni-regensburg.de&gt; - 10-1" date="1709726400">- Initial release</changelog>
  <changelog author="Peter Georg &lt;peter.georg@physik.uni-regensburg.de&gt; - 10-2" date="1716292800">- Exclude kernel-headers and kernel-cross-headers</changelog>
  <changelog author="Peter Georg &lt;peter.georg@physik.uni-regensburg.de&gt; - 10-3" date="1732276800">- Replace $releasever by $releasever_major
- Replace $releasever_major with fixed value for rhel &lt; 10</changelog>
  <changelog author="Peter Georg &lt;peter.georg@physik.uni-regensburg.de&gt; - 10-4" date="1747224000">- ExclusiveArch: x86_64 aarch64 ppc64le</changelog>
  <changelog author="Peter Georg &lt;peter.georg@physik.uni-regensburg.de&gt; - 10-5" date="1757332800">- Replace $releasever_major with fixed value for any version</changelog>
</package>
<package pkgid="22520230f192a1c129e530b9cb2a56fa7dd9948a409a41f99d42bb2b1ad77100" name="centos-release-nfv-common" arch="noarch">
  <version epoch="0" ver="1" rel="7.el10"/>
  <changelog author="Neil Hanlon &lt;neil@shrug.pw&gt; - 1.7" date="1757332800">- update for 10</changelog>
</package>
<package pkgid="8627541b15b294d01455f4074cc3660a89c32c3d04221fe597d8b05e6c2a4b08" name="centos-release-nfv-openvswitch" arch="noarch">
  <version epoch="0" ver="1" rel="7.el10"/>
  <changelog author="Neil Hanlon &lt;neil@shrug.pw&gt; - 1.7" date="1757332800">- update for 10</changelog>
</package>
<package pkgid="60cdc01104b250d2538fa7ed90dd6f5f83b24bdc8bb71f7c6a5232aa26a75453" name="centos-release-ovirt45" arch="noarch">
  <version epoch="0" ver="10.0" rel="4.el10"/>
  <changelog author="Sandro Bonazzola &lt;sandro.bonazzola@gmail.com&gt; - 10.0-1" date="1744113600">- Initial packaging for CentOS Stream 10</changelog>
  <changelog author="Jean-Louis Dupond &lt;jean-louis@dupond.be&gt; - 10.0-2" date="1760356800">- Add Requirement on EPEL for CentOS Stream 10</changelog>
  <changelog author="Jean-Louis Dupond &lt;jean-louis@dupond.be&gt; - 10.0-3" date="1761048000">- Drop resilientstorage on EL10
- Enable EPEL repository on CentOS Stream 10/EL10 if present</changelog>
  <changelog author="Jean-Louis Dupond &lt;jean-louis@dupond.be&gt; - 10.0-4" date="1767873600">- Use el10 packages on EL10</changelog>
</package>
<package pkgid="b367106c0c64b569377a7c9f3876760db2e2a7b4af7d65d24f37431f8e732881" name="centos-release-ovirt45-testing" arch="noarch">
  <version epoch="0" ver="10.0" rel="4.el10"/>
  <changelog author="Sandro Bonazzola &lt;sandro.bonazzola@gmail.com&gt; - 10.0-1" date="1744113600">- Initial packaging for CentOS Stream 10</changelog>
  <changelog author="Jean-Louis Dupond &lt;jean-louis@dupond.be&gt; - 10.0-2" date="1760356800">- Add Requirement on EPEL for CentOS Stream 10</changelog>
  <changelog author="Jean-Louis Dupond &lt;jean-louis@dupond.be&gt; - 10.0-3" date="1761048000">- Drop resilientstorage on EL10
- Enable EPEL repository on CentOS Stream 10/EL10 if present</changelog>
  <changelog author="Jean-Louis Dupond &lt;jean-louis@dupond.be&gt; - 10.0-4" date="1767873600">- Use el10 packages on EL10</changelog>
</package>
<package pkgid="aa362761030aa561e9c602ef005f8a18c8db27f0c90734672172673743289365" name="centos-release-samba422" arch="noarch">
  <version epoch="0" ver="1.0" rel="1.el10"/>
  <changelog author="Anoop C S &lt;anoopcs@samba.org&gt; - 1.0-1" date="1752580800">- Initial version</changelog>
</package>
<package pkgid="62842ad60eda0a37512152956ae37e25e9774fec2387e703bfdd0eaabb94ad9e" name="centos-release-samba423" arch="noarch">
  <version epoch="0" ver="1.0" rel="1.el10"/>
  <changelog author="Anoop C S &lt;anoopcs@samba.org&gt; - 1.0-1" date="1757678400">- Initial version</changelog>
</package>
<package pkgid="4c26ab6c900bf22b6e79a9f34e7a7b68233806c57382e8ef121597d267696ed4" name="centos-release-storage-common" arch="noarch">
  <version epoch="0" ver="2" rel="6.el10"/>
  <changelog author="Neil Hanlon &lt;neil@rockylinux.org&gt; - 2-6" date="1757332800">- drop nonexistant repo reference</changelog>
</package>
<package pkgid="5ef44c9865999fbce4095ef7becb7b03ef3b643d0b345ab520e89d64baf49c88" name="centos-release-virt-common" arch="noarch">
  <version epoch="0" ver="1" rel="1.el10"/>
  <changelog author="Sandro Bonazzola &lt;sbonazzo@redhat.com&gt; - 0:1-1" date="1719921600">- Packaged for CentOS Stream 10</changelog>
</package>
<package pkgid="590007a7392f0ac213cd5286ffeb80b3096b4e2299268b8caf9e4b4b69d30370" name="cepces" arch="noarch">
  <version epoch="0" ver="0.3.17" rel="1.el10"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.8-2" date="1707134400">- Require selinux package if selinux is enabled</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.8-3" date="1707480000">- Fix installing cepces-selinux</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.8-8" date="1720612800">- Add gating files from c9s</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.9-1" date="1720612801">- Update to version 0.3.9</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.9-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.12-1" date="1763121600">- Update to version 0.3.12
- resolves: RHEL-121729
- Added channel binding support
- resolves: RHEL-103400</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.13-1" date="1765281600">- Update to version 0.3.13
- resolves: RHEL-134736</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.16-1" date="1766404800">- Update to version 0.3.16</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.17-1" date="1769083200">- Update to version 0.3.17
- related: RHEL-121729</changelog>
</package>
<package pkgid="1796e1dbc63b9eb9789b65d6f1c7cd3dc175e9ce54f488634eb3500078214ba4" name="cepces-certmonger" arch="noarch">
  <version epoch="0" ver="0.3.17" rel="1.el10"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.8-2" date="1707134400">- Require selinux package if selinux is enabled</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.8-3" date="1707480000">- Fix installing cepces-selinux</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.8-8" date="1720612800">- Add gating files from c9s</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.9-1" date="1720612801">- Update to version 0.3.9</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.9-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.12-1" date="1763121600">- Update to version 0.3.12
- resolves: RHEL-121729
- Added channel binding support
- resolves: RHEL-103400</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.13-1" date="1765281600">- Update to version 0.3.13
- resolves: RHEL-134736</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.16-1" date="1766404800">- Update to version 0.3.16</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.17-1" date="1769083200">- Update to version 0.3.17
- related: RHEL-121729</changelog>
</package>
<package pkgid="fedc15de20877245854fef44bcb831a393b22aefa42eab2eccaab301c6575629" name="cepces-selinux" arch="noarch">
  <version epoch="0" ver="0.3.17" rel="1.el10"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.8-2" date="1707134400">- Require selinux package if selinux is enabled</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.8-3" date="1707480000">- Fix installing cepces-selinux</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.8-8" date="1720612800">- Add gating files from c9s</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.9-1" date="1720612801">- Update to version 0.3.9</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.9-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.12-1" date="1763121600">- Update to version 0.3.12
- resolves: RHEL-121729
- Added channel binding support
- resolves: RHEL-103400</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.13-1" date="1765281600">- Update to version 0.3.13
- resolves: RHEL-134736</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.16-1" date="1766404800">- Update to version 0.3.16</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.17-1" date="1769083200">- Update to version 0.3.17
- related: RHEL-121729</changelog>
</package>
<package pkgid="98d60d483022603a9d437a5821a3faaf48db238f574271b9dc160677703d7eb7" name="ceph" arch="x86_64">
  <version epoch="2" ver="18.2.1" rel="4.el10"/>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2:18.1.2-0.3" date="1689076800">- Rebuilt for ICU 73.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- with python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.5" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- revert python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.1" date="1690372800">- ceph-18.1.3 RC4</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.2" date="1690977600">- ceph-18.1.3 RC4, rebuild with libarrow-13.0.0</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.0-1" date="1691150400">- ceph-18.2.0 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-1" date="1700049600">- ceph-18.2.1 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-2" date="1702987200">- ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
  https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-3" date="1706097600">- gcc-14</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2:18.2.1-4" date="1709726400">- Add support for riscv64</changelog>
</package>
<package pkgid="2ab0ed3175062580241a4a581b55fc18abd6aeedfb473851a082003c3f9074c9" name="ceph-common" arch="x86_64">
  <version epoch="2" ver="18.2.1" rel="4.el10"/>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2:18.1.2-0.3" date="1689076800">- Rebuilt for ICU 73.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- with python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.5" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- revert python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.1" date="1690372800">- ceph-18.1.3 RC4</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.2" date="1690977600">- ceph-18.1.3 RC4, rebuild with libarrow-13.0.0</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.0-1" date="1691150400">- ceph-18.2.0 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-1" date="1700049600">- ceph-18.2.1 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-2" date="1702987200">- ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
  https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-3" date="1706097600">- gcc-14</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2:18.2.1-4" date="1709726400">- Add support for riscv64</changelog>
</package>
<package pkgid="86f32a29429e797222d671f2b1f7447eb804fe7e573bd02033ecc609faf7d4c7" name="cereal-devel" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-3" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-6" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.2-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.2-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ac0be6af8776bd68995c1e6b2aa47006d9bd5cc44bb4713feaafa04a0fa9237f" name="certmonger" arch="x86_64">
  <version epoch="0" ver="0.79.21" rel="1.el10"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.79.19-1" date="1696939200">- Update to upstream 0.79.19</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.79.19-2" date="1703246400">- Fix C compatibility issues</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.79.19-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.79.19-4" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.79.19-5" date="1708430400">- Update tests to be compatible with OpenSSL 3.2</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.79.20-1" date="1718020800">- Update to upstream 0.79.20</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.79.20-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.79.20-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.79.21-1" date="1759320000">- Update to upstream 0.79.21 (RHEL-113257)</changelog>
</package>
<package pkgid="571bf88e44f1f3ce7bc1ea23f61cd40ff9ef50ff9e9a7ff66a3d741fcf6b31f5" name="cglib" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-9" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-11" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-12" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-13" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.0-15" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-15" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52687</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.0-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6656e4beed912ee95a56f642a440c86788da8f475f2a3f52b2f2d44884acb846" name="cglib-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-9" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-11" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-12" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-13" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.0-15" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-15" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52687</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.0-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7db29f4c75117c62d0487fa5f409e970c6cb082bb5083f333d10279f0bff3b4d" name="chan" arch="x86_64">
  <version epoch="0" ver="0.0.4" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-8" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 0.0.4-9" date="1689163200">- Switch to SPDX license string.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.0.4-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.0.4-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="be8190644bc1bdacc9deef1063ee9a97639fcfd84afb38242e04261f1633a64b" name="chan-devel" arch="x86_64">
  <version epoch="0" ver="0.0.4" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-8" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 0.0.4-9" date="1689163200">- Switch to SPDX license string.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.0.4-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.0.4-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="76be5cfeb5f6d63a31363639d16308881d855fdc1721c579465da5ca4411b951" name="check" arch="x86_64">
  <version epoch="0" ver="0.15.2" rel="17.el10"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.15.2-9" date="1676289600">- Add optional Fedora mingw packages.</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0.15.2-9" date="1689336000">- Update deprecated %patch macro usage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0.15.2-13" date="1716292800">- Fix check-devel for cmake users (rhbz#2161231)
- Simplify conditional logic for mingw</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.15.2-14" date="1717502400">- Remove the CC-BY-NC website from the tarball (#2290306)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.15.2-15" date="1717588800">- Remove the CC-BY-NC index.html file from the tarball (#2290306)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.15.2-16" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.15.2-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="148dc1bf7fa10dd5a1e05bcd0df92dff5fb5ccc59ebf2f6c185ec5c7b57b5aed" name="check-checkmk" arch="noarch">
  <version epoch="0" ver="0.15.2" rel="17.el10"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.15.2-9" date="1676289600">- Add optional Fedora mingw packages.</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0.15.2-9" date="1689336000">- Update deprecated %patch macro usage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0.15.2-13" date="1716292800">- Fix check-devel for cmake users (rhbz#2161231)
- Simplify conditional logic for mingw</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.15.2-14" date="1717502400">- Remove the CC-BY-NC website from the tarball (#2290306)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.15.2-15" date="1717588800">- Remove the CC-BY-NC index.html file from the tarball (#2290306)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.15.2-16" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.15.2-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ebabb4b6429324bfb472786dcefdaa8994f8cb34b188d2c21c09a47468cd555a" name="check-devel" arch="x86_64">
  <version epoch="0" ver="0.15.2" rel="17.el10"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.15.2-9" date="1676289600">- Add optional Fedora mingw packages.</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0.15.2-9" date="1689336000">- Update deprecated %patch macro usage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0.15.2-13" date="1716292800">- Fix check-devel for cmake users (rhbz#2161231)
- Simplify conditional logic for mingw</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.15.2-14" date="1717502400">- Remove the CC-BY-NC website from the tarball (#2290306)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.15.2-15" date="1717588800">- Remove the CC-BY-NC index.html file from the tarball (#2290306)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.15.2-16" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.15.2-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="18bc84fb159e8fa49492665e1a4e48c9367e6f9f818dfd7c5832417879ae0b86" name="check-static" arch="x86_64">
  <version epoch="0" ver="0.15.2" rel="17.el10"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.15.2-9" date="1676289600">- Add optional Fedora mingw packages.</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0.15.2-9" date="1689336000">- Update deprecated %patch macro usage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0.15.2-13" date="1716292800">- Fix check-devel for cmake users (rhbz#2161231)
- Simplify conditional logic for mingw</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.15.2-14" date="1717502400">- Remove the CC-BY-NC website from the tarball (#2290306)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.15.2-15" date="1717588800">- Remove the CC-BY-NC index.html file from the tarball (#2290306)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.15.2-16" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.15.2-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="45380da3919be4c546a49fdedc4eaf7fb543da86d2b7ad2e45ec2cb9061e331d" name="checkpolicy" arch="x86_64">
  <version epoch="0" ver="3.10" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.6-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.7-1" date="1719489600">- SELinux userspace 3.7 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7-2" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.7-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc1.1" date="1732881600">- SELinux userspace 3.8-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc3.1" date="1734523200">- SELinux userspace 3.8-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-1" date="1738324800">- SELinux userspace 3.8 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.9-0.rc2.1.1" date="1751630400">- SELinux userspace 3.9-rc2 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-1" date="1753185600">- SELinux userspace 3.9 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.10-1" date="1770379200">- SELinux userspace 3.10 release</changelog>
</package>
<package pkgid="54eede4b5543590768efe521438d462f62fbdc66e2304bc96323fc73fc4f5111" name="chkconfig" arch="x86_64">
  <version epoch="0" ver="1.30" rel="2.el10"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.22-1" date="1679572800">- migrate to SPDX license
- Translated using Weblate (English (United Kingdom))
- Translated using Weblate (Japanese)
- ci: Add locale linter
- ci: update workflows
- test: fix ShellCheck error[SC2070]
- Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
- releng: Packit remove extra job trigger
- releng: Enable Packit to handle Fedora updates
- releng: Convert to rpmautospec</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.23-1" date="1683201600">- Translated using Weblate (Korean)
- Translated using Weblate (English (United Kingdom))
- alternatives: --keep-foreign incorrectly handles non-existent files
- alternatives: isLink should return 0 in case of lstat error
- Translated using Weblate (Swedish)
- Translated using Weblate (Korean)
- Translated using Weblate (Georgian)
- Translated using Weblate (Finnish)
- Translated using Weblate (Ukrainian)
- Translated using Weblate (Polish)
- Update translation files
- Translated using Weblate (German)
- doc: update translations
- spec: remote changelog</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.24-1" date="1683201601">- ci: fix `NEXT_VERSION` in Makefile
- revert: releng: Enable Packit to handle Fedora updates
- revert: releng: Convert to rpmautospec</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.25-1" date="1690977600">- alternatives: fix possible buffer overrun
- Translated using Weblate (Korean)
- Translated using Weblate (Chinese (Simplified) (zh_CN))</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.26-1" date="1705492800">- fix(test): dot't call `basename` with empty string
- spec: sort BuildRequires alphabetically
- fix(test): remove dangling `rlPhase` fn call
- ci: run tests using Packit and Testing Farm
- build: update `.pot` file
- ci: fix typo in test workflow
- test: add support for running using tmt
- Translated using Weblate (Czech)
- Translated using Weblate (Punjabi)
- build(deps): bump actions/upload-artifact from 3 to 4
- build(deps): bump github/codeql-action from 2 to 3
- leveldb: fix systemdActive()
- build(deps): bump redhat-plumbers-in-action/differential-shellcheck
- Translated using Weblate (Hungarian)
- build(deps): bump actions/checkout from 3 to 4</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.27-1" date="1715688000">- alternatives: properly handle chars with const in normalize_path
- alternatives: use exit in main instead of return for critical failures
- alternatives: fix leak
- alternatives: fix leak
- alternatives: fix possible overrun
- alternatives: fix all the leaks of groups in readConfig
- alternatives: fix all the leaks of read line in readConfig
- alternatives: fix leak
- alternatives: fix memory leak
- alternatives: fix memory leak
- alternatives: initialize parameters in main to NULL
- alternatives: fix memory leak
- Translated using Weblate (Korean)
- Translated using Weblate (English (United Kingdom))
- Translated using Weblate (Finnish)
- Translated using Weblate (Finnish)
- Translated using Weblate (Japanese)
- Translated using Weblate (Swedish)
- Translated using Weblate (Japanese)
- Translated using Weblate (Polish)
- Translated using Weblate (Korean)
- Translated using Weblate (Georgian)
- Update translation files
- Translated using Weblate (Japanese)
- Fix systemd dependency</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.28-1" date="1718971200">- Prepare for bin-sbin merge
- tests: fix integration with github actions</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.29-1" date="1722340800">- add basic mkosi config
- remove not used directory from makefile
- ntsysv: fix leaks
- leveldb: security_context_t is deprecated
- leveldb: fix leak
- leveldb: fix leak
- leveldb: fix leak
- leveldb: fix leak
- leveldb: fix leak
- chkconfig: fix leak
- chkconfig: fix leak
- chkconfig: fix memory leak when deleting a service
- leveldb: add destructors for service
- leveldb: fix memory leak
- leveldb.c: fix memory leak
- chkconfig: fix leak
- leveldb: fix memory leak
- alternatives: ensure the current alt. is freed if parsing fails
- alternatives: ensure the current group is freed
- Translated using Weblate (English (United Kingdom))
- Translated using Weblate (Turkish)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.30-1" date="1723032000">- ostree: move admindir to /etc/alternatives.admindir
- update po/chkconfig.pot</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.30-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="79c5da73c3ff4f1c9f3a15a181a088b28b7847abd545950e966f549afa3121cd" name="chrony" arch="x86_64">
  <version epoch="0" ver="4.8" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.5-4" date="1716897600">- disable nettle support in favor of gnutls (RHEL-38924)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.5-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.5-6" date="1719921600">- fix gnutls build requirement
- fix crash on reload command during start (RHEL-45854)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.6-1" date="1725364800">- update to 4.6 (RHEL-55735)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.6.1-1" date="1730894400">- update to 4.6.1 (RHEL-61876)
- keep PHC refclock reachable when dropping samples due to high delay
  (RHEL-65843)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.6.1-2" date="1749038400">- improve description of refresh directive (RHEL-91788)
- improve logging of selection failures (RHEL-91787 RHEL-91789 RHEL-91791)
- fix sourcedir reloading to not multiply sources (RHEL-95017)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.8-1" date="1763640000">- update to 4.8 (RHEL-112593)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.8-2" date="1763640001">- change default chrony.conf on s390x to use STP refclock (RHEL-62844)</changelog>
</package>
<package pkgid="400a5486e6c022df385c3c86b04aac8dc8308dc9e9ff318787b4dc9f5f894920" name="chrpath" arch="x86_64">
  <version epoch="0" ver="0.16" rel="25.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-19" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.16-20" date="1689163200">- Use SPDX for license field (#2222111)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-21" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-22" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-23" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.16-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.16-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="14c8e2554bbe642b8a7043e1086e959eadb8aaa4c78e26db9943a1fd950b3b6a" name="cifs-utils" arch="x86_64">
  <version epoch="0" ver="7.5" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61731 - Update to version 7.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82681 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;pc@manguebit.org&gt; - 7.4-1" date="1764244800">- resolves: RHEL-131409 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770206400">- resolves: RHEL-146310 - Enable debug logs in cifs.upcall</changelog>
</package>
<package pkgid="7ae547b8edffe6c618e9c890390505d2b5d5a1436116520049202f5aa0805e1a" name="cifs-utils" arch="x86_64">
  <version epoch="0" ver="7.6" rel="1.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61731 - Update to version 7.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82681 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;pc@manguebit.org&gt; - 7.4-1" date="1764244800">- resolves: RHEL-131409 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770206400">- resolves: RHEL-146310 - Enable debug logs in cifs.upcall</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-1" date="1782388800">- Update to version 7.6
- resolves: RHEL-185756 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego</changelog>
</package>
<package pkgid="0be4b8db9a6118a657ecb98f256846ca8e1cd13f5a13b8a8379e46e7b3e7edee" name="cifs-utils" arch="x86_64">
  <version epoch="0" ver="7.6" rel="2.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61731 - Update to version 7.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82681 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;pc@manguebit.org&gt; - 7.4-1" date="1764244800">- resolves: RHEL-131409 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770206400">- resolves: RHEL-146310 - Enable debug logs in cifs.upcall</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-1" date="1782388800">- Update to version 7.6
- resolves: RHEL-185756 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-2" date="1783425600">- resolves: RHEL-192935 - fix krb5 mount regression</changelog>
</package>
<package pkgid="071f349fd3f9cc0a7ee6277894dc621cd61f8511a91ce7f0bb4fcbf44e87a2f1" name="cifs-utils-devel" arch="x86_64">
  <version epoch="0" ver="7.5" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61731 - Update to version 7.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82681 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;pc@manguebit.org&gt; - 7.4-1" date="1764244800">- resolves: RHEL-131409 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770206400">- resolves: RHEL-146310 - Enable debug logs in cifs.upcall</changelog>
</package>
<package pkgid="507b7ff3856f5af50e1a8d9afd59f5ca993cb87ac2518b09d3b26eaffcec9a7a" name="cifs-utils-devel" arch="x86_64">
  <version epoch="0" ver="7.6" rel="1.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61731 - Update to version 7.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82681 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;pc@manguebit.org&gt; - 7.4-1" date="1764244800">- resolves: RHEL-131409 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770206400">- resolves: RHEL-146310 - Enable debug logs in cifs.upcall</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-1" date="1782388800">- Update to version 7.6
- resolves: RHEL-185756 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego</changelog>
</package>
<package pkgid="6452e084a0be737bda4a52bcad55a07cbec07c15c530de24740836c7d3155ea9" name="cifs-utils-devel" arch="x86_64">
  <version epoch="0" ver="7.6" rel="2.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61731 - Update to version 7.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82681 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;pc@manguebit.org&gt; - 7.4-1" date="1764244800">- resolves: RHEL-131409 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770206400">- resolves: RHEL-146310 - Enable debug logs in cifs.upcall</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-1" date="1782388800">- Update to version 7.6
- resolves: RHEL-185756 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-2" date="1783425600">- resolves: RHEL-192935 - fix krb5 mount regression</changelog>
</package>
<package pkgid="58ed7eafaa17c0d02e382b9de47040bd42a7d15499a5dc876a9fb7aa516cc994" name="cifs-utils-info" arch="x86_64">
  <version epoch="0" ver="7.5" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61731 - Update to version 7.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82681 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;pc@manguebit.org&gt; - 7.4-1" date="1764244800">- resolves: RHEL-131409 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770206400">- resolves: RHEL-146310 - Enable debug logs in cifs.upcall</changelog>
</package>
<package pkgid="df91ac95322c658bfc9819c8b63b1045b2db3e7ffa59d0db5160f3563f967386" name="cifs-utils-info" arch="x86_64">
  <version epoch="0" ver="7.6" rel="1.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61731 - Update to version 7.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82681 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;pc@manguebit.org&gt; - 7.4-1" date="1764244800">- resolves: RHEL-131409 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770206400">- resolves: RHEL-146310 - Enable debug logs in cifs.upcall</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-1" date="1782388800">- Update to version 7.6
- resolves: RHEL-185756 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego</changelog>
</package>
<package pkgid="487d680b774637b5cdf93fb00139f0e122a87159309d9edcc26c90a235c1174d" name="cifs-utils-info" arch="x86_64">
  <version epoch="0" ver="7.6" rel="2.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61731 - Update to version 7.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82681 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;pc@manguebit.org&gt; - 7.4-1" date="1764244800">- resolves: RHEL-131409 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770206400">- resolves: RHEL-146310 - Enable debug logs in cifs.upcall</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-1" date="1782388800">- Update to version 7.6
- resolves: RHEL-185756 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-2" date="1783425600">- resolves: RHEL-192935 - fix krb5 mount regression</changelog>
</package>
<package pkgid="d39aa1c5219608b20ee63445fbe6b01e419bb64b6c31c3a63d991165e3eeb27e" name="cim-schema" arch="noarch">
  <version epoch="0" ver="2.54.1" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.54.0-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.54.0-6" date="1680004800">- SPDX migration</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.54.1-1" date="1684497600">- Update to CIM Schema 2.54.1, including experimental classes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.54.1-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.54.1-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.54.1-4" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.54.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.54.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="41d705e8e70cd20d6682af05d9794663cd7a5a663e50fe13f5522b9f7c03d6f6" name="cim-schema-docs" arch="noarch">
  <version epoch="0" ver="2.54.1" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.54.0-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.54.0-6" date="1680004800">- SPDX migration</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.54.1-1" date="1684497600">- Update to CIM Schema 2.54.1, including experimental classes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.54.1-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.54.1-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.54.1-4" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.54.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.54.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="535b6a6ffb5bb9a2c46aaa2169a6f2b35fe20084e2545cdce1ca72fde6059c47" name="cirrus-audio-firmware" arch="noarch">
  <version epoch="0" ver="20260411" rel="19.5.el10_1"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-19.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128447)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128447</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-19.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-140094)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-140094</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-19.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145532)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145532</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260311-19.4" date="1773230400">- Update linux-firmware to latest upstream (RHEL-154362)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-154362</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260411-19.5" date="1775908800">- Update linux-firmware to latest upstream (RHEL-164389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
Resolves: RHEL-164389</changelog>
</package>
<package pkgid="bfabd7052267424df30edd9e2734d5125622169a14a36f0d04b958332359c563" name="cirrus-audio-firmware" arch="noarch">
  <version epoch="0" ver="20260609" rel="23.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250212-14" date="1740484800">- accel: ivpu: Update firmware for NPU (RHEL-38586)
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
</package>
<package pkgid="3446fa87361e917960ef1afa0ad42121248dfcad5ad545a31ccb4e9a661efe2d" name="cirrus-audio-firmware" arch="noarch">
  <version epoch="0" ver="20260707" rel="23.1.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream ()
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
</package>
<package pkgid="68695cfb4ba1cdacd9e60d72b94c9f0f231ff25e1b5f3ab69c62c15dfe876fd8" name="cirrus-audio-firmware" arch="noarch">
  <version epoch="0" ver="20260804" rel="23.2.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream (RHEL-188389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260804-23.2" date="1785844800">- Update linux-firmware to latest upstream (RHEL-214057)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- linux-firmware: Add firmware binary files for new HP project (Messi)
- qcom: Add gpu firmwares for Eliza chipset
- cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
- rtw89: 8922d: add fw 0.35.113.2
- qcom: venus-5.4: fix vp9 decoder assertion failure
- qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
- qcom: Update qdsp6sw firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- intel_vpu: Update NPU firmware
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: Add firmware for new soundwire projects
- rtw88: add firmware v41.0.0 for RTL8723B
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add ADSP firmware for hawi platform
- powervr: add firmware for Imagination Technologies BXM-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform
Resolves: RHEL-214057</changelog>
</package>
<package pkgid="47751288afdacc370d42d56cc048fba9724bfdde8e391e97a38454c85c61bc21" name="cjose" arch="x86_64">
  <version epoch="0" ver="0.6.2.2" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-13" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-14" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.6.2.2-1" date="1690372800">- Rebase to version 0.6.2.2. Solves CVE-2023-37464.</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.6.2.2-2" date="1693569600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2.2-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2.2-4" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.6.2.2-2" date="1711627200">- Add gating tests configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2.2-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2.2-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e533c85f7a36f9b999d84552bcb2241fd0fbdb2b3e8204345b18de2283932d1b" name="cjose-devel" arch="x86_64">
  <version epoch="0" ver="0.6.2.2" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-13" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-14" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.6.2.2-1" date="1690372800">- Rebase to version 0.6.2.2. Solves CVE-2023-37464.</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.6.2.2-2" date="1693569600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2.2-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2.2-4" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.6.2.2-2" date="1711627200">- Add gating tests configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2.2-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2.2-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ff595df1304a1b6e03eeb92667a3fa10a93c9fd45135ba889fc932484457481a" name="cjson" arch="x86_64">
  <version epoch="0" ver="1.7.15" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.14-6" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.14-7" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.7.15-1" date="1677672000">- Update to 1.7.15
- Export also CMake module</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.15-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.15-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.15-4" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="243f8e97f6db762759d6dc0b660c57f6d23ebd7527d2d9b9d2705e9e383eb718" name="cjson-devel" arch="x86_64">
  <version epoch="0" ver="1.7.15" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.14-6" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.14-7" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.7.15-1" date="1677672000">- Update to 1.7.15
- Export also CMake module</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.15-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.15-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.15-4" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="c64d0f6daaf7e84c70e147da1fc20eb4b92fc87301d40ce8a7802e8663592138" name="clang" arch="x86_64">
  <version epoch="0" ver="21.1.8" rel="1.el10"/>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-8" date="1749556800">- Invert symlink direction
- Fix i686 multilib installation (rhbz#2365079)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-9" date="1750075200">- Use libdir suffix in versioned prefix</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-10" date="1750161600">- Fix llvm-config alternatives handling (rhbz#2361779)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.7-1" date="1750334400">- Update to LLVM 20.1.7</changelog>
  <changelog author="Kashyap Chamarthy &lt;kchamart@redhat.com&gt; - 20.1.7-2" date="1750420800">- Add riscv64 enablement bits; thanks: Songsong Zhang
   (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.8-1" date="1752062400">- Update to LLVM 20.1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20.1.8-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 20.1.8-3" date="1753704000">- Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
- Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
- Backport fix for build of highway package on ppc64le (rhbz#2383182)</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; - 21.1.8-1" date="1771502400">- Update to 21.1.8</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 21.1.8-1" date="1771934400">- Ensure riscv64 has reduced debuginfo
- Ensure riscv64 dwz is ok</changelog>
</package>
<package pkgid="835979dc33e7b324fc33847e74ae91645a4ede4f3a0430e12ea7c4d38733f911" name="clang-analyzer" arch="x86_64">
  <version epoch="0" ver="21.1.8" rel="1.el10"/>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-8" date="1749556800">- Invert symlink direction
- Fix i686 multilib installation (rhbz#2365079)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-9" date="1750075200">- Use libdir suffix in versioned prefix</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-10" date="1750161600">- Fix llvm-config alternatives handling (rhbz#2361779)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.7-1" date="1750334400">- Update to LLVM 20.1.7</changelog>
  <changelog author="Kashyap Chamarthy &lt;kchamart@redhat.com&gt; - 20.1.7-2" date="1750420800">- Add riscv64 enablement bits; thanks: Songsong Zhang
   (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.8-1" date="1752062400">- Update to LLVM 20.1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20.1.8-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 20.1.8-3" date="1753704000">- Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
- Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
- Backport fix for build of highway package on ppc64le (rhbz#2383182)</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; - 21.1.8-1" date="1771502400">- Update to 21.1.8</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 21.1.8-1" date="1771934400">- Ensure riscv64 has reduced debuginfo
- Ensure riscv64 dwz is ok</changelog>
</package>
<package pkgid="b12c9d695ed3526a47f0c87e4f1ba1561247c2b147f594247fea4c5d38cb02fb" name="clang-devel" arch="x86_64">
  <version epoch="0" ver="21.1.8" rel="1.el10"/>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-8" date="1749556800">- Invert symlink direction
- Fix i686 multilib installation (rhbz#2365079)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-9" date="1750075200">- Use libdir suffix in versioned prefix</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-10" date="1750161600">- Fix llvm-config alternatives handling (rhbz#2361779)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.7-1" date="1750334400">- Update to LLVM 20.1.7</changelog>
  <changelog author="Kashyap Chamarthy &lt;kchamart@redhat.com&gt; - 20.1.7-2" date="1750420800">- Add riscv64 enablement bits; thanks: Songsong Zhang
   (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.8-1" date="1752062400">- Update to LLVM 20.1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20.1.8-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 20.1.8-3" date="1753704000">- Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
- Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
- Backport fix for build of highway package on ppc64le (rhbz#2383182)</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; - 21.1.8-1" date="1771502400">- Update to 21.1.8</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 21.1.8-1" date="1771934400">- Ensure riscv64 has reduced debuginfo
- Ensure riscv64 dwz is ok</changelog>
</package>
<package pkgid="7a37c942c580e7eecba79c28a824e61c3cbd317dbec94e649cdce900b03b1953" name="clang-libs" arch="x86_64">
  <version epoch="0" ver="21.1.8" rel="1.el10"/>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-8" date="1749556800">- Invert symlink direction
- Fix i686 multilib installation (rhbz#2365079)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-9" date="1750075200">- Use libdir suffix in versioned prefix</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-10" date="1750161600">- Fix llvm-config alternatives handling (rhbz#2361779)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.7-1" date="1750334400">- Update to LLVM 20.1.7</changelog>
  <changelog author="Kashyap Chamarthy &lt;kchamart@redhat.com&gt; - 20.1.7-2" date="1750420800">- Add riscv64 enablement bits; thanks: Songsong Zhang
   (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.8-1" date="1752062400">- Update to LLVM 20.1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20.1.8-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 20.1.8-3" date="1753704000">- Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
- Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
- Backport fix for build of highway package on ppc64le (rhbz#2383182)</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; - 21.1.8-1" date="1771502400">- Update to 21.1.8</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 21.1.8-1" date="1771934400">- Ensure riscv64 has reduced debuginfo
- Ensure riscv64 dwz is ok</changelog>
</package>
<package pkgid="c4e6d4619e7d813aec1d8172f994df205676fc9b661be3f066fc0029bff77c14" name="clang-resource-filesystem" arch="x86_64">
  <version epoch="0" ver="21.1.8" rel="1.el10"/>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-8" date="1749556800">- Invert symlink direction
- Fix i686 multilib installation (rhbz#2365079)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-9" date="1750075200">- Use libdir suffix in versioned prefix</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-10" date="1750161600">- Fix llvm-config alternatives handling (rhbz#2361779)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.7-1" date="1750334400">- Update to LLVM 20.1.7</changelog>
  <changelog author="Kashyap Chamarthy &lt;kchamart@redhat.com&gt; - 20.1.7-2" date="1750420800">- Add riscv64 enablement bits; thanks: Songsong Zhang
   (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.8-1" date="1752062400">- Update to LLVM 20.1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20.1.8-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 20.1.8-3" date="1753704000">- Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
- Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
- Backport fix for build of highway package on ppc64le (rhbz#2383182)</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; - 21.1.8-1" date="1771502400">- Update to 21.1.8</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 21.1.8-1" date="1771934400">- Ensure riscv64 has reduced debuginfo
- Ensure riscv64 dwz is ok</changelog>
</package>
<package pkgid="8b80c01d8d434c58287cc70341c6f8d45a92b35dd7ec10978eef529b9c61823d" name="clang-tools-extra" arch="x86_64">
  <version epoch="0" ver="21.1.8" rel="1.el10"/>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-8" date="1749556800">- Invert symlink direction
- Fix i686 multilib installation (rhbz#2365079)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-9" date="1750075200">- Use libdir suffix in versioned prefix</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-10" date="1750161600">- Fix llvm-config alternatives handling (rhbz#2361779)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.7-1" date="1750334400">- Update to LLVM 20.1.7</changelog>
  <changelog author="Kashyap Chamarthy &lt;kchamart@redhat.com&gt; - 20.1.7-2" date="1750420800">- Add riscv64 enablement bits; thanks: Songsong Zhang
   (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.8-1" date="1752062400">- Update to LLVM 20.1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20.1.8-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 20.1.8-3" date="1753704000">- Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
- Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
- Backport fix for build of highway package on ppc64le (rhbz#2383182)</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; - 21.1.8-1" date="1771502400">- Update to 21.1.8</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 21.1.8-1" date="1771934400">- Ensure riscv64 has reduced debuginfo
- Ensure riscv64 dwz is ok</changelog>
</package>
<package pkgid="e50c9c4e7cd1f6b8e32cedb1c33821bd0e96c4008076c1631a04879fb5093fa5" name="clang-tools-extra-devel" arch="x86_64">
  <version epoch="0" ver="21.1.8" rel="1.el10"/>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-8" date="1749556800">- Invert symlink direction
- Fix i686 multilib installation (rhbz#2365079)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-9" date="1750075200">- Use libdir suffix in versioned prefix</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-10" date="1750161600">- Fix llvm-config alternatives handling (rhbz#2361779)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.7-1" date="1750334400">- Update to LLVM 20.1.7</changelog>
  <changelog author="Kashyap Chamarthy &lt;kchamart@redhat.com&gt; - 20.1.7-2" date="1750420800">- Add riscv64 enablement bits; thanks: Songsong Zhang
   (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.8-1" date="1752062400">- Update to LLVM 20.1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20.1.8-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 20.1.8-3" date="1753704000">- Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
- Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
- Backport fix for build of highway package on ppc64le (rhbz#2383182)</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; - 21.1.8-1" date="1771502400">- Update to 21.1.8</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 21.1.8-1" date="1771934400">- Ensure riscv64 has reduced debuginfo
- Ensure riscv64 dwz is ok</changelog>
</package>
<package pkgid="ace32376f782f16ebe7f68aa12249fb6204ef0c743bae63ec307cf795ac8499a" name="classloader-leak-test-framework" arch="noarch">
  <version epoch="0" ver="2.7.0" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-4" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.0-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.7.0-9" date="1723204800">- Rebuild without generated Requires</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2c7ce9eb1192415fe6ebbe52e72266c0206540e0963ed0104df4769736aa429c" name="classloader-leak-test-framework-javadoc" arch="noarch">
  <version epoch="0" ver="2.7.0" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-4" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.0-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.7.0-9" date="1723204800">- Rebuild without generated Requires</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6c1c7e45f41bb70faaeb7af00196ca0cd11cce5dee14aa6ef1ac482c94c97750" name="cldr-emoji-annotation" arch="noarch">
  <version epoch="0" ver="46" rel="1.el10"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1:45-5" date="1725192000">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1:45-6" date="1726488000">- Fix a forbidden code point, 0x202E</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:45-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1:46-1" date="1730980800">- Bump to release-46</changelog>
</package>
<package pkgid="12887b0cd77c4938a39b306c86fd6cdb8e00ca26c052f22361c65439fd038196" name="cldr-emoji-annotation-devel" arch="noarch">
  <version epoch="0" ver="46" rel="1.el10"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1:45-5" date="1725192000">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1:45-6" date="1726488000">- Fix a forbidden code point, 0x202E</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:45-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1:46-1" date="1730980800">- Bump to release-46</changelog>
</package>
<package pkgid="ef6ed72fedfe69113474eb8f2e4615a3ed3554dc81837860ca70c17e35def6a8" name="cldr-emoji-annotation-dtd" arch="noarch">
  <version epoch="0" ver="46" rel="1.el10"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1:45-5" date="1725192000">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1:45-6" date="1726488000">- Fix a forbidden code point, 0x202E</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:45-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1:46-1" date="1730980800">- Bump to release-46</changelog>
</package>
<package pkgid="90564aa1c7bec6b2732d068c8cb5039ae80fdc0589321b9c719957d06c7d2f4c" name="clevis" arch="x86_64">
  <version epoch="0" ver="21" rel="9.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-1" date="1727352000">- Rebase to clevis-21 upstream version</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-2" date="1727784000">- Fix clevis v21 tang functionality at boot time</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-3" date="1728475200">- Fix clevis v21 tang functionality at boot time</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-4" date="1729252800">- Split PKCS#11 files into clevis-pin-pkcs11 package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 21-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-6" date="1730808000">- TPM2 use first PCR algorithm bank supported by TPM</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-7" date="1732276800">- Include tpm2_getcap as dracut required binary</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-8" date="1736424000">- Include socat, openssl as PKCS#11 pin requirements</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-9" date="1767873600">- Add clevis user to tss group via sysusers</changelog>
</package>
<package pkgid="990497e89103693f20e5f22f414ac0fd1678b6b717cc8a778e261d0635be5486" name="clevis-dracut" arch="x86_64">
  <version epoch="0" ver="21" rel="9.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-1" date="1727352000">- Rebase to clevis-21 upstream version</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-2" date="1727784000">- Fix clevis v21 tang functionality at boot time</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-3" date="1728475200">- Fix clevis v21 tang functionality at boot time</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-4" date="1729252800">- Split PKCS#11 files into clevis-pin-pkcs11 package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 21-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-6" date="1730808000">- TPM2 use first PCR algorithm bank supported by TPM</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-7" date="1732276800">- Include tpm2_getcap as dracut required binary</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-8" date="1736424000">- Include socat, openssl as PKCS#11 pin requirements</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-9" date="1767873600">- Add clevis user to tss group via sysusers</changelog>
</package>
<package pkgid="6e49db791865b14b08439eacdf9fb908b696c09b1cffa5631487cc54913000a1" name="clevis-luks" arch="x86_64">
  <version epoch="0" ver="21" rel="9.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-1" date="1727352000">- Rebase to clevis-21 upstream version</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-2" date="1727784000">- Fix clevis v21 tang functionality at boot time</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-3" date="1728475200">- Fix clevis v21 tang functionality at boot time</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-4" date="1729252800">- Split PKCS#11 files into clevis-pin-pkcs11 package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 21-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-6" date="1730808000">- TPM2 use first PCR algorithm bank supported by TPM</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-7" date="1732276800">- Include tpm2_getcap as dracut required binary</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-8" date="1736424000">- Include socat, openssl as PKCS#11 pin requirements</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-9" date="1767873600">- Add clevis user to tss group via sysusers</changelog>
</package>
<package pkgid="2082d15305d116c02ff24356465e8956d88439059b075593ba6f9700ed55ee03" name="clevis-pin-pkcs11" arch="x86_64">
  <version epoch="0" ver="21" rel="9.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-1" date="1727352000">- Rebase to clevis-21 upstream version</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-2" date="1727784000">- Fix clevis v21 tang functionality at boot time</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-3" date="1728475200">- Fix clevis v21 tang functionality at boot time</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-4" date="1729252800">- Split PKCS#11 files into clevis-pin-pkcs11 package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 21-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-6" date="1730808000">- TPM2 use first PCR algorithm bank supported by TPM</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-7" date="1732276800">- Include tpm2_getcap as dracut required binary</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-8" date="1736424000">- Include socat, openssl as PKCS#11 pin requirements</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-9" date="1767873600">- Add clevis user to tss group via sysusers</changelog>
</package>
<package pkgid="693079b4a306d73d12e64e4dd2e909219d108b356da85095bc165897dc2d0613" name="clevis-pin-tpm2" arch="x86_64">
  <version epoch="0" ver="0.5.3" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.3-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.3-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.5.3-5" date="1706875200">- Update Rust macro usage</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.3-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.3-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 0.5.3-8" date="1738670400">- Package rebuild to retrieve latest rust-openssl version
  Resolves: RHEL-77723</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 0.5.3-9" date="1768305600">- Add JSON schema validation to reject unknown fields
  Resolves: RHEL-138591</changelog>
</package>
<package pkgid="06ce2ff3fac4255eb98fc43fb3633260020facf78f4ebffb7769ddcf1a06acda" name="clevis-pin-trustee" arch="x86_64">
  <version epoch="0" ver="0.1.0" rel="4.el10"/>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 0.1.0-1" date="1770120000">- Initial commit on c10s</changelog>
  <changelog author="Adam Prikryl &lt;aprikryl@redhat.com&gt; - 0.1.0-2" date="1770120001">- Enable gating for c10s</changelog>
  <changelog author="Adam Prikryl &lt;aprikryl@redhat.com&gt; - 0.1.0-3" date="1770120002">- Fix summary in ci_tests.fmf</changelog>
  <changelog author="Adam Prikryl &lt;aprikryl@redhat.com&gt; - 0.1.0-4" date="1770811200">- ci_tests.fmf plan update for gating testing</changelog>
</package>
<package pkgid="a7c4a4a3a0b9f91f25b44f60092a7c9488c1a3e37e1ba1d120363d720acf7475" name="clevis-systemd" arch="x86_64">
  <version epoch="0" ver="21" rel="9.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-1" date="1727352000">- Rebase to clevis-21 upstream version</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-2" date="1727784000">- Fix clevis v21 tang functionality at boot time</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-3" date="1728475200">- Fix clevis v21 tang functionality at boot time</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-4" date="1729252800">- Split PKCS#11 files into clevis-pin-pkcs11 package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 21-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-6" date="1730808000">- TPM2 use first PCR algorithm bank supported by TPM</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-7" date="1732276800">- Include tpm2_getcap as dracut required binary</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-8" date="1736424000">- Include socat, openssl as PKCS#11 pin requirements</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-9" date="1767873600">- Add clevis user to tss group via sysusers</changelog>
</package>
<package pkgid="988be2b490b52ae8c1759682e357fb9aae3921a6233a36cc9cdd1ef222c9e579" name="clevis-udisks2" arch="x86_64">
  <version epoch="0" ver="21" rel="9.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-1" date="1727352000">- Rebase to clevis-21 upstream version</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-2" date="1727784000">- Fix clevis v21 tang functionality at boot time</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-3" date="1728475200">- Fix clevis v21 tang functionality at boot time</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-4" date="1729252800">- Split PKCS#11 files into clevis-pin-pkcs11 package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 21-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-6" date="1730808000">- TPM2 use first PCR algorithm bank supported by TPM</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-7" date="1732276800">- Include tpm2_getcap as dracut required binary</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-8" date="1736424000">- Include socat, openssl as PKCS#11 pin requirements</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 21-9" date="1767873600">- Add clevis user to tss group via sysusers</changelog>
</package>
<package pkgid="ce0220083c1c429d2a47194c52adb1358a62d650168c3934ed9b23023029ba87" name="clippy" arch="x86_64">
  <version epoch="0" ver="1.92.0" rel="1.el10"/>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.85.0-2" date="1741089600">- Temporarily skip PGO on s390x</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.86.0-1" date="1744113600">- Update to Rust 1.86.0</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.86.0-2" date="1745496000">- Temporarily skip PGO on RHEL ppc64le</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.87.0-1" date="1748520000">- Update to Rust 1.87.0</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.88.0-1" date="1752235200">- Update to Rust 1.88.0</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.89.0-1" date="1757505600">- Update to Rust 1.89.0</changelog>
  <changelog author="Jesus Checa Hidalgo &lt;jchecahi@redhat.com&gt; - 1.89.0-2" date="1757937600">- Add unicode exceptions (rpminspect) for rust 1.89 update</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 1.90.0-1" date="1759233600">- Update to Rust 1.90</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 1.91.0-1" date="1762344000">- Update to Rust 1.91.0</changelog>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 1.92.0-1" date="1767787200">- Update to Rust 1.92.0</changelog>
</package>
<package pkgid="78dbdf26f1f388b8470b32f274df2d2fc80c91f3f8fb3db202f6ee5b0fc5c166" name="cloud-init" arch="noarch">
  <version epoch="0" ver="24.4" rel="7.el10.0.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 24.1.4-20" date="1731326400">- ci-Remove-python3-jsonschema-dependency.patch [RHEL-65849]
- Resolves: RHEL-65849
  ([RHEL-10] Drop cloud-init dependency on python-jsonschema)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 24.1.4-21" date="1731931200">- ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65769]
- Resolves: RHEL-65769
  ([RHEL-10] Prevent NM from handling DNS when network interfaces have DNS config)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 24.4-1" date="1736164800">- Rebase to 24.4 [RHEL-66254]
- Resolves: RHEL-66254
  ([RHEL-10] Rebase cloud-init to 24.4 version)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 24.4-2" date="1738756800">- Fix config missed on rebase [RHEL-77206]
- Resolves: RHEL-77206
  (cloud-init has reacquired a dependency on python-jsonschema)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 24.4-3" date="1739793600">- ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-73667]
- ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-79727]
- Resolves: RHEL-73667
  (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [rhel-10])
- Resolves: RHEL-79727
  ([c10s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 24.4-4" date="1742299200">- ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81896]
- Resolves: RHEL-81896
  (DataSourceNoCloudNet network configuration is ineffective [rhel-10])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 24.4-5" date="1747051200">- ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88659]
- Resolves: RHEL-88659
  (cloudinit backport optimization features on Alibaba Cloud)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 24.4-6" date="1751630400">- ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100617]
- ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100617]
- Resolves: RHEL-100617
  (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-10.1])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 24.4-7" date="1765368000">- ci-downstream-Do-not-override-changes-in-disable-sshd-k.patch [RHEL-128097]
- Resolves: RHEL-128097
  ([rhel-10] cloud-init upgrade is overwriting modifications in disable-sshd-keygen-if-cloud-init-active.conf)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 24.4-7.0.1" date="1765540800">- Apply Rocky Linux fixes</changelog>
</package>
<package pkgid="40d07bb774287bcd5d0f670e4d07d23d07ed2f19df37eea780ccb39425915221" name="cloud-init" arch="noarch">
  <version epoch="0" ver="24.4" rel="7.el10_2.1.rocky.0.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 24.1.4-21" date="1731931200">- ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65769]
- Resolves: RHEL-65769
  ([RHEL-10] Prevent NM from handling DNS when network interfaces have DNS config)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 24.4-1" date="1736164800">- Rebase to 24.4 [RHEL-66254]
- Resolves: RHEL-66254
  ([RHEL-10] Rebase cloud-init to 24.4 version)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 24.4-2" date="1738756800">- Fix config missed on rebase [RHEL-77206]
- Resolves: RHEL-77206
  (cloud-init has reacquired a dependency on python-jsonschema)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 24.4-3" date="1739793600">- ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-73667]
- ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-79727]
- Resolves: RHEL-73667
  (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [rhel-10])
- Resolves: RHEL-79727
  ([c10s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 24.4-4" date="1742299200">- ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81896]
- Resolves: RHEL-81896
  (DataSourceNoCloudNet network configuration is ineffective [rhel-10])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 24.4-5" date="1747051200">- ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88659]
- Resolves: RHEL-88659
  (cloudinit backport optimization features on Alibaba Cloud)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 24.4-6" date="1751630400">- ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100617]
- ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100617]
- Resolves: RHEL-100617
  (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-10.1])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 24.4-7" date="1765368000">- ci-downstream-Do-not-override-changes-in-disable-sshd-k.patch [RHEL-128097]
- Resolves: RHEL-128097
  ([rhel-10] cloud-init upgrade is overwriting modifications in disable-sshd-keygen-if-cloud-init-active.conf)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 24.4-7.el10_2.1" date="1775563200">- ci-fix-Pass-interface-string-to-get_newest_lease-6648.patch [RHEL-159033]
- ci-fix-cloudstack-Improve-domain-name-DHCP-lease-lookup.patch [RHEL-159033]
- ci-downstream-fix-test_cloudstack.py-since-pytest-fixtu.patch [RHEL-159033]
- Resolves: RHEL-159033
  ([GSS][Secure Support] [RHEL-10] cloud-init requests lease before DHCP can provide one [rhel-10.2.z])</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 24.4-7.1.rocky.0.1" date="1781179200">- Apply Rocky Linux fixes</changelog>
</package>
<package pkgid="51392204a00f1f68a55e9d9c19af6699a351e48031f1d3bc2eb451f21644389e" name="cloud-utils" arch="noarch">
  <version epoch="0" ver="0.33" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.33-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.33-9" date="1718193600">- cu-Drop-obsolete-gdisk-soft-dependency.patch [RHEL-36095]
- Resolves: RHEL-36095
  (Remove cloud-utils-growpart dependency on obsolete gdisk)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.33-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.33-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dd93e9eeae247d55a0c924d9d184762eb6cf2b02fa35ed64d87bb7ac9d9c2b9c" name="cloud-utils-cloud-localds" arch="noarch">
  <version epoch="0" ver="0.33" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.33-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.33-9" date="1718193600">- cu-Drop-obsolete-gdisk-soft-dependency.patch [RHEL-36095]
- Resolves: RHEL-36095
  (Remove cloud-utils-growpart dependency on obsolete gdisk)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.33-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.33-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4b166682f4b82d3f4449145733f8282aa199afea9fdeca8f584956c0ecacc084" name="cloud-utils-ec2metadata" arch="noarch">
  <version epoch="0" ver="0.33" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.33-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.33-9" date="1718193600">- cu-Drop-obsolete-gdisk-soft-dependency.patch [RHEL-36095]
- Resolves: RHEL-36095
  (Remove cloud-utils-growpart dependency on obsolete gdisk)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.33-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.33-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ee3fecfc410f8817ce7f47cd5112b3c77ece96cf1df45c14c94662a2d5142ba9" name="cloud-utils-growpart" arch="noarch">
  <version epoch="0" ver="0.33" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.33-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.33-9" date="1718193600">- cu-Drop-obsolete-gdisk-soft-dependency.patch [RHEL-36095]
- Resolves: RHEL-36095
  (Remove cloud-utils-growpart dependency on obsolete gdisk)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.33-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.33-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="aa69c806cb4abdb2823674542889f23468651ccb669b3067333149175124f003" name="cloud-utils-mount-image-callback" arch="noarch">
  <version epoch="0" ver="0.33" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.33-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.33-9" date="1718193600">- cu-Drop-obsolete-gdisk-soft-dependency.patch [RHEL-36095]
- Resolves: RHEL-36095
  (Remove cloud-utils-growpart dependency on obsolete gdisk)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.33-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.33-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9d71cbab79b353cb4acd45713be5aee9fbd8efc0620dcba0a1ba881374b78b6e" name="cloud-utils-resize-part-image" arch="noarch">
  <version epoch="0" ver="0.33" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.33-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.33-9" date="1718193600">- cu-Drop-obsolete-gdisk-soft-dependency.patch [RHEL-36095]
- Resolves: RHEL-36095
  (Remove cloud-utils-growpart dependency on obsolete gdisk)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.33-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.33-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fae72b218d0b7a864c041921ac4282b9ab478178da8de0f4e7c91e7db7af631d" name="cloud-utils-vcs-run" arch="noarch">
  <version epoch="0" ver="0.33" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.33-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.33-9" date="1718193600">- cu-Drop-obsolete-gdisk-soft-dependency.patch [RHEL-36095]
- Resolves: RHEL-36095
  (Remove cloud-utils-growpart dependency on obsolete gdisk)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.33-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.33-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="24ebeea719f257d0625724f74bcc8ae249413c57e55d26a0462a6f0f7e480e4d" name="cloud-utils-write-mime-multipart" arch="noarch">
  <version epoch="0" ver="0.33" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.33-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.33-9" date="1718193600">- cu-Drop-obsolete-gdisk-soft-dependency.patch [RHEL-36095]
- Resolves: RHEL-36095
  (Remove cloud-utils-growpart dependency on obsolete gdisk)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.33-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.33-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="46feb3841f2b43ecadb82c83cab7dab1d7a048cc4041b8794b552c9adba47fe9" name="cmake" arch="x86_64">
  <version epoch="0" ver="3.31.8" rel="1.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 3.28.0~rc3-2" date="1700740800">- Improve C compatibility of LoadCommand tests</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0~rc3-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0~rc3-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Frantisek Zatloukal &lt;fzatlouk@redhat.com&gt; - 3.28.2-1" date="1706788800">- cmake-3.28.2 (fixes RHBZ#2261037 and RHBZ#2243343)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.30.5-1" date="1730203201">- Update version to 3.30.5</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.30.5-2" date="1730808000">- Fix conflicting license files in cmake and cmake-doc</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.30.5-3" date="1743768000">- macros: Fix missing asterisk in ctest macro</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.31.8-1" date="1757160000">- cmake-3.31.8</changelog>
</package>
<package pkgid="a7170d886b12bf05c7523dd886a0a3f2b4efed4f263139efc881ac1c355c46cb" name="cmake-data" arch="noarch">
  <version epoch="0" ver="3.31.8" rel="1.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 3.28.0~rc3-2" date="1700740800">- Improve C compatibility of LoadCommand tests</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0~rc3-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0~rc3-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Frantisek Zatloukal &lt;fzatlouk@redhat.com&gt; - 3.28.2-1" date="1706788800">- cmake-3.28.2 (fixes RHBZ#2261037 and RHBZ#2243343)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.30.5-1" date="1730203201">- Update version to 3.30.5</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.30.5-2" date="1730808000">- Fix conflicting license files in cmake and cmake-doc</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.30.5-3" date="1743768000">- macros: Fix missing asterisk in ctest macro</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.31.8-1" date="1757160000">- cmake-3.31.8</changelog>
</package>
<package pkgid="8133880cf2af983f4a120308275b1729ade843e0fde4914b59e34eb846a6aee6" name="cmake-doc" arch="noarch">
  <version epoch="0" ver="3.31.8" rel="1.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 3.28.0~rc3-2" date="1700740800">- Improve C compatibility of LoadCommand tests</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0~rc3-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0~rc3-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Frantisek Zatloukal &lt;fzatlouk@redhat.com&gt; - 3.28.2-1" date="1706788800">- cmake-3.28.2 (fixes RHBZ#2261037 and RHBZ#2243343)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.30.5-1" date="1730203201">- Update version to 3.30.5</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.30.5-2" date="1730808000">- Fix conflicting license files in cmake and cmake-doc</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.30.5-3" date="1743768000">- macros: Fix missing asterisk in ctest macro</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.31.8-1" date="1757160000">- cmake-3.31.8</changelog>
</package>
<package pkgid="3f80becc46df2aad49e42a3d6ba4fcdfde26c73ea07a620df9c7b299694f8920" name="cmake-filesystem" arch="x86_64">
  <version epoch="0" ver="3.31.8" rel="1.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 3.28.0~rc3-2" date="1700740800">- Improve C compatibility of LoadCommand tests</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0~rc3-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0~rc3-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Frantisek Zatloukal &lt;fzatlouk@redhat.com&gt; - 3.28.2-1" date="1706788800">- cmake-3.28.2 (fixes RHBZ#2261037 and RHBZ#2243343)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.30.5-1" date="1730203201">- Update version to 3.30.5</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.30.5-2" date="1730808000">- Fix conflicting license files in cmake and cmake-doc</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.30.5-3" date="1743768000">- macros: Fix missing asterisk in ctest macro</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.31.8-1" date="1757160000">- cmake-3.31.8</changelog>
</package>
<package pkgid="3a18957992a99c505dc5b4bf0cb94fef6886aae584397e8eaf229aa0e152b407" name="cmake-gui" arch="x86_64">
  <version epoch="0" ver="3.31.8" rel="1.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 3.28.0~rc3-2" date="1700740800">- Improve C compatibility of LoadCommand tests</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0~rc3-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0~rc3-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Frantisek Zatloukal &lt;fzatlouk@redhat.com&gt; - 3.28.2-1" date="1706788800">- cmake-3.28.2 (fixes RHBZ#2261037 and RHBZ#2243343)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.30.5-1" date="1730203201">- Update version to 3.30.5</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.30.5-2" date="1730808000">- Fix conflicting license files in cmake and cmake-doc</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.30.5-3" date="1743768000">- macros: Fix missing asterisk in ctest macro</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.31.8-1" date="1757160000">- cmake-3.31.8</changelog>
</package>
<package pkgid="1cebce3199e2045a627a2f868cdf56322363792acbbd9e252c5330b73c2498c5" name="cmake-rpm-macros" arch="noarch">
  <version epoch="0" ver="3.31.8" rel="1.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 3.28.0~rc3-2" date="1700740800">- Improve C compatibility of LoadCommand tests</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0~rc3-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0~rc3-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Frantisek Zatloukal &lt;fzatlouk@redhat.com&gt; - 3.28.2-1" date="1706788800">- cmake-3.28.2 (fixes RHBZ#2261037 and RHBZ#2243343)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.30.5-1" date="1730203201">- Update version to 3.30.5</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.30.5-2" date="1730808000">- Fix conflicting license files in cmake and cmake-doc</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.30.5-3" date="1743768000">- macros: Fix missing asterisk in ctest macro</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 3.31.8-1" date="1757160000">- cmake-3.31.8</changelog>
</package>
<package pkgid="37fac41c4d942fb982e89a22d2a596e1631e544531debd2b8ccd4f90929c88be" name="cmocka-doc" arch="noarch">
  <version epoch="0" ver="1.1.7" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-13" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.7-1" date="1677585600">- Update to version 1.1.7
  * Update ignore list for source tarball generation
  * Added new assert macros to compare 2 double given an epsilon
  * Added meson build system
  * Added header with version to TAP13 output
  * Fixed issues with MSVC
  * Fixed TAP output for skipped tests
  * Fixed issue with fail_msg
  * CMake generated configs for find_package(cmocka)
  * Documentation improvements</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.7-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.7-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.7-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.7-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.7-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="41f5863faf0212b88fd371f927ea01aea9ca74eb46430d4945f12c94bb45e2b4" name="cockpit" arch="x86_64">
  <version epoch="0" ver="356" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 349-1" date="1760529600">- Package manifests: Add `any` test
- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356-1.rocky.0.1" date="1771329600">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="b7a677c14fdf5f6532325229f1f9c94d360e8d4109e275b01dbb8b21157cd37b" name="cockpit" arch="x86_64">
  <version epoch="0" ver="356.2" rel="1.el10_2.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Tomas Matus &lt;tmatus@redhat.com&gt; - 356.1-1" date="1776081600">- ws: Prevent remote code execution with SSH argument injection (RHEL-158306)
- node: update lodash dependency (RHEL-164067)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356.2-1.rocky.0.1" date="1779969600">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="87d5f669e67c591ebc4ed2853d93d88beb2969ed954d8889cce13c357bda5b6b" name="cockpit-bridge" arch="noarch">
  <version epoch="0" ver="356" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 349-1" date="1760529600">- Package manifests: Add `any` test
- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356-1.rocky.0.1" date="1771329600">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="99ed1aa31aa35e1b55441397b221e0ebdddccd57ab97b8272db4dff6668c3a80" name="cockpit-bridge" arch="noarch">
  <version epoch="0" ver="356.2" rel="1.el10_2.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Tomas Matus &lt;tmatus@redhat.com&gt; - 356.1-1" date="1776081600">- ws: Prevent remote code execution with SSH argument injection (RHEL-158306)
- node: update lodash dependency (RHEL-164067)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356.2-1.rocky.0.1" date="1779969600">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="ee27944d7fc957561fd02ccc1a4b6aa4bec289b89e467b4b054bb51661827b9b" name="cockpit-doc" arch="noarch">
  <version epoch="0" ver="356" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 349-1" date="1760529600">- Package manifests: Add `any` test
- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356-1.rocky.0.1" date="1771329600">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="12774df6685d3ea16bbd18c1f0080b4a14bf0c9c602b5983db9187d6e9591186" name="cockpit-doc" arch="noarch">
  <version epoch="0" ver="356.2" rel="1.el10_2.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Tomas Matus &lt;tmatus@redhat.com&gt; - 356.1-1" date="1776081600">- ws: Prevent remote code execution with SSH argument injection (RHEL-158306)
- node: update lodash dependency (RHEL-164067)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356.2-1.rocky.0.1" date="1779969600">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="a6f1ce23167078b4944df1691c1357a7bd13ab58b06812e00c6b377ac749ad62" name="cockpit-files" arch="noarch">
  <version epoch="0" ver="36" rel="1.el10"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 29-1" date="1759406400">- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 30-1" date="1760529600">- Translations and dependency updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 31.1-1" date="1761912000">- don't initialise a git repo in gating tests (fixes fedora gating)</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 32-1" date="1762948800">- Performance and stability improvements</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 33-1" date="1764244800">- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 34-1" date="1765368000">- Bug fixes and translation updates</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 34-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 34-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 35-1" date="1769601600">- Packaging fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 36-1" date="1770811200">- Convert license headers to SPDX format</changelog>
</package>
<package pkgid="65a7b5f6b26f299b17f3ddc91704d2938541617ebdf25bd6ca6fe4babce8f85c" name="cockpit-ha-cluster" arch="noarch">
  <version epoch="0" ver="0.12.2" rel="3.el10_2.1"/>
  <changelog author="Michal Posp&#xED;&#x161;il &lt;mpospisi@redhat.com&gt; - 0.12.0-3" date="1739534400">- Fixed restarting bundles
  Resolves: RHEL-79033
- Fixed deletion of misconfigured bundles
  Resolves: RHEL-79090
- Fixed filtering of resource clones in web console
  Resolves: RHEL-78654
- Updated bundled rubygem rack
  Resolves: RHEL-79676</changelog>
  <changelog author="Guoguo &lt;i@qwq.trade&gt; - 0.12.0-4" date="1741953600">- Add riscv64</changelog>
  <changelog author="Michal Posp&#xED;&#x161;il &lt;mpospisi@redhat.com&gt; - 0.12.0-5" date="1747224000">- Rebased pcs to the latest sources (see CHANGELOG.md)
  Resolves: RHEL-7681, RHEL-21050, RHEL-22423, RHEL-35407, RHEL-44347, RHEL-63186, RHEL-66607, RHEL-76176, RHEL-81938
- Rebased HA Cluster Management add-on to the latest sources
  Resolves: RHEL-30686, RHEL-30695, RHEL-30698, RHEL-79314, RHEL-84143, RHEL-85195
- The upstream version of HA Cluster Management add-on can now be queried through RPM - see bundled(pcs-web-ui)
  Resolves: RHEL-86227
- Updated bundled rubygems: backports, childprocess, ffi, puma, rack, rack-protection, rack-session, rack-test, sinatra, tilt
- Updated bundled Python dependency dacite</changelog>
  <changelog author="Michal Posp&#xED;&#x161;il &lt;mpospisi@redhat.com&gt; - 0.12.1-1" date="1751889600">- Rebased pcs to the latest sources (see CHANGELOG.md)
  Resolves: RHEL-77193, RHEL-92043, RHEL-92883, RHEL-93757
- Updated HA Cluster Management add-on to 0.1.23 (see CHANGELOG_WUI.md)
  Resolves: RHEL-30671, RHEL-84139, RHEL-99800
- There is now a changelog for the HA Cluster Management add-on
  Resolves: RHEL-86232
- Fixed directory permissions for RHEL Image Mode
  Resolves: RHEL-96074
- Updated bundled rubygem rack
- Updated bundled Python dependency pycurl</changelog>
  <changelog author="Michal Posp&#xED;&#x161;il &lt;mpospisi@redhat.com&gt; - 0.12.1-2" date="1756296000">- Remove BuildRequires: python3-wheel when using setuptools 71+</changelog>
  <changelog author="Michal Posp&#xED;&#x161;il &lt;mpospisi@redhat.com&gt; - 0.12.1-3" date="1763035200">- Rebased pcs to the latest sources (see CHANGELOG.md)
  Resolves: RHEL-7670, RHEL-21879, RHEL-73527, RHEL-76157, RHEL-76162, RHEL-79044, RHEL-111451, RHEL-126839
- Rebased HA Cluster Management add-on to the latest sources (see CHANGELOG_WUI.md)
  Resolves: RHEL-84112, RHEL-84113, RHEL-84135, RHEL-104371
- Modified Provides for bundled components
  Resolves: RHEL-114214
- Updated bundled rubygems: backports, ethon, mustermann, nio4r, puma, rack, rack-protection, sinatra, tilt
  Resolves: RHEL-120935, RHEL-121028, RHEL-123635, RHEL-123649, RHEL-124930</changelog>
  <changelog author="Michal Posp&#xED;&#x161;il &lt;mpospisi@redhat.com&gt; - 0.12.2-1" date="1767700800">- Rebased pcs to the latest sources (see CHANGELOG.md)
  Resolves: RHEL-7673, RHEL-47300, RHEL-84120, RHEL-114418 (copy from the changelog)
- Updated HA Cluster Management add-on to 0.1.24 (see CHANGELOG_WUI.md)
  Resolves: RHEL-132569</changelog>
  <changelog author="Michal Posp&#xED;&#x161;il &lt;mpospisi@redhat.com&gt; - 0.12.2-2" date="1767787200">- Fixed HA Cluster Management add-on source file
  Resolves: RHEL-132569</changelog>
  <changelog author="Michal Posp&#xED;&#x161;il &lt;mpospisi@redhat.com&gt; - 0.12.2-3" date="1771329600">- Fixed CVE-2025-13465 by updating pcs-web-ui to 0.1.24.2
  Resolves: RHEL-144191</changelog>
  <changelog author="Michal Posp&#xED;&#x161;il &lt;mpospisi@redhat.com&gt; - 0.12.2-3.el10_2.1" date="1776427200">- Fixed CVE-2026-4800 by updating HA Cluster Management add-on to 0.1.24.3
  Resolves: RHEL-164079</changelog>
</package>
<package pkgid="5dda79c5c7dba769583d5d04f45ecbd02f0ed3e8cf936e9561c64a28052ef3cf" name="cockpit-image-builder" arch="noarch">
  <version epoch="0" ver="94" rel="1.el10"/>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 76-1" date="1756900800">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 77-1" date="1758110400">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 78-1" date="1759838400">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 80-1" date="1761566400">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 81-1" date="1761739200">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 83-1" date="1763726400">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 86-1" date="1765368000">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 92-1" date="1770984000">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 93-1" date="1771329600">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 94-1" date="1771848000">- New upstream release</changelog>
</package>
<package pkgid="86763aada9ca1c83e778b94f0cce0ae1fa27943d9b665aee57ba4b6e4bc6cc2b" name="cockpit-image-builder" arch="noarch">
  <version epoch="0" ver="94.3" rel="1.el10_2"/>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 80-1" date="1761566400">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 81-1" date="1761739200">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 83-1" date="1763726400">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 86-1" date="1765368000">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 92-1" date="1770984000">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 93-1" date="1771329600">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 94-1" date="1771848000">- New upstream release</changelog>
  <changelog author="Lucas Garfield &lt;lucas@redhat.com&gt; - 94.1-1" date="1780401600">- Resolve CVE-2025-13465 and CVE-2026-4800</changelog>
  <changelog author="Sanne Raymaekers &lt;sraymaek@redhat.com&gt; - 94.2-1" date="1780747200">- New upstream release</changelog>
  <changelog author="Sanne Raymaekers &lt;sraymaek@redhat.com&gt; - 94.3-1" date="1780747201">- New upstream release</changelog>
</package>
<package pkgid="bee60999e7d2ff464676a9a1bebebc90c6fcc803e2a718b6706511db9608939d" name="cockpit-machines" arch="noarch">
  <version epoch="0" ver="348" rel="1.el10"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 341-1" date="1759406400">- Improved UX for Disks and Network interface tables
- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 342-1" date="1760529600">- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 343-1" date="1761825600">- Memory usage now shows numbers reported by the guest (RHEL-116731)</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 344-1" date="1762948800">- Port forwarding for user session VMs
- "Shutdown and restart" action
- Faster startup</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 345-1" date="1764158400">- New virtual machines don't get SPICE graphics anymore
- Support for network port forwarding
- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 346-1" date="1765368000">- Performance improvements
- Translation updates</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 346-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 346-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 347-1" date="1769601600">- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 348-1" date="1770811200">- Convert license headers to SPDX format</changelog>
</package>
<package pkgid="78afbfb699e764588ed93f0d221b60d6c135500e3cf5abc918701262ac4a6798" name="cockpit-ostree" arch="noarch">
  <version epoch="1" ver="222" rel="1.el10"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1:215-1" date="1759406400">- Site-specific branding support
- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1:216-1" date="1760529600">- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1:217-1" date="1761739200">- Translations and dependency updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1:218-1" date="1762948800">- Performance and stability improvements</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1:219-1" date="1764158400">- Translation and dependency updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1:220-1" date="1765368000">- Dependency updates</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:220-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:220-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1:221-1" date="1769601600">- Packaging fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1:222-1" date="1770811200">- Convert license headers to SPDX format</changelog>
</package>
<package pkgid="6f8ec7a462db754d5473aee68e10ef594fe30970a5944834132b0cb16e096672" name="cockpit-packagekit" arch="noarch">
  <version epoch="0" ver="356" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 349-1" date="1760529600">- Package manifests: Add `any` test
- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356-1.rocky.0.1" date="1771329600">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="21e7bae5c695cb339ecb8887204fa2f5bde2d66713f2b4961522465b04873a63" name="cockpit-packagekit" arch="noarch">
  <version epoch="0" ver="356.2" rel="1.el10_2.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Tomas Matus &lt;tmatus@redhat.com&gt; - 356.1-1" date="1776081600">- ws: Prevent remote code execution with SSH argument injection (RHEL-158306)
- node: update lodash dependency (RHEL-164067)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356.2-1.rocky.0.1" date="1779969600">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="bd2b5c51a8a0c208f6898b09c10a2a1afb61d71c85d6635df8085d959a677596" name="cockpit-podman" arch="noarch">
  <version epoch="0" ver="121" rel="1.el10"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 114-1" date="1759406400">- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 115-1" date="1760529600">- List stopped quadlets
- Translations and dependency updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 116-1" date="1761739200">- Support stopping/starting/restart quadlets</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 117-1" date="1762948800">- Performance and stability improvements</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 118-1" date="1764158400">- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 119.1-1" date="1765368000">- Release automation bugfix</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 119.1-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 119.1-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 120-1" date="1769601600">- Packaging fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 121-1" date="1770811200">- Convert license headers to SPDX format</changelog>
</package>
<package pkgid="480630cdab33573c07800e9ed06157200901e90238bc5f3ee8a06c92ca9b961c" name="cockpit-session-recording" arch="noarch">
  <version epoch="0" ver="20" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 15-1" date="1706788800">- Config: Update to authselect with-tlog feature
- stylelint: handle stylelint-scss deprecation
- Add ruff configuration
- package.json: drop flowtype plugin
- package.json: drop po2json
- package.json: document the required nodejs version
- fmf: Plumb through $TEST_* variables for unexpected messages
- tests: Use mc for testPlayBinary
- package.json: drop deprecated eslint-plugin-standard
- Revert "build: add support for /pybridge scenario"
- Player: Stop making the Terminal object state
- build.js: support flags
- packaging: Update spec License: to SPDX format
- build.js: Fix LINT env variable check
- Tests: Allow charset journal messages
- Update to the new root creation function
- package.json: Bump stylelint to 15
- test: add check for sssd config id_provider proxy
- Tests: Allow invalid non-UTF8 journal messages
- Add xterm-canvas-addon dependency for rendering
- Minor Eslint fixes
- Tests: Update data list to PF5 for testAppMenu
- Update org.cockpit-project.session-recording.metainfo.xml
- Makefile: bump our test/common dependency
- patternfly-5-overrides should be auto-imported by the page.scss file
- Drop obsolete pf-m-redhat-font class</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 16-1" date="1707220800">- Config: Add sssd-proxy requirement</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 16-3" date="1719835200">- Bump release to validate gating</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 17-1" date="1731067200">- Rebase to upstream release 17
- Config: Use authselect enable-feature when possible
- Test: Move from CDP to BiDi
- Replace jQuery extend() with standard JS spread
- Convert to TypeScript
- Convert Application to a functional component
- package.json: Drop date-fns
- Various test fixes and build related fixes</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 20-1" date="1750161600">- Rebase to upstream release 20</changelog>
</package>
<package pkgid="d64e4d0695472b040c93e884f1d431ab9477a1ac6c3bc06f865842aa9e235267" name="cockpit-storaged" arch="noarch">
  <version epoch="0" ver="356" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 349-1" date="1760529600">- Package manifests: Add `any` test
- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356-1.rocky.0.1" date="1771329600">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="d58a9c5c791c7f67d546c31077238efbfb33efba645d5ac5787e2e0cc99cb2a6" name="cockpit-storaged" arch="noarch">
  <version epoch="0" ver="356.2" rel="1.el10_2.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Tomas Matus &lt;tmatus@redhat.com&gt; - 356.1-1" date="1776081600">- ws: Prevent remote code execution with SSH argument injection (RHEL-158306)
- node: update lodash dependency (RHEL-164067)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356.2-1.rocky.0.1" date="1779969600">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="aab34286ba00e32d6a27a73e6bb741b40e9e74f3b93be512fae392f87336f16f" name="cockpit-system" arch="noarch">
  <version epoch="0" ver="356" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 349-1" date="1760529600">- Package manifests: Add `any` test
- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356-1.rocky.0.1" date="1771329600">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="f8cb732105c318296799e7ba2118104cd465855e410afd1bf9b2db63b8fc2e27" name="cockpit-system" arch="noarch">
  <version epoch="0" ver="356.2" rel="1.el10_2.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Tomas Matus &lt;tmatus@redhat.com&gt; - 356.1-1" date="1776081600">- ws: Prevent remote code execution with SSH argument injection (RHEL-158306)
- node: update lodash dependency (RHEL-164067)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356.2-1.rocky.0.1" date="1779969600">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="464ab24b383e4a290647b83a38ab0e5c1e3735d4b02cc7154c31bc96ae68d85c" name="cockpit-ws" arch="x86_64">
  <version epoch="0" ver="356" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 349-1" date="1760529600">- Package manifests: Add `any` test
- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356-1.rocky.0.1" date="1771329600">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="4841934e037c1a09cba4c5932a3b7828079aff5d06e7001b7fe3ac1205694ee5" name="cockpit-ws" arch="x86_64">
  <version epoch="0" ver="356.2" rel="1.el10_2.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Tomas Matus &lt;tmatus@redhat.com&gt; - 356.1-1" date="1776081600">- ws: Prevent remote code execution with SSH argument injection (RHEL-158306)
- node: update lodash dependency (RHEL-164067)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356.2-1.rocky.0.1" date="1779969600">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="2c745d0826512ddd9e6e258c33dd77b0060478f9da2bdee862bb1a90a02e8e4b" name="cockpit-ws-selinux" arch="x86_64">
  <version epoch="0" ver="356" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 349-1" date="1760529600">- Package manifests: Add `any` test
- Bug fixes and translation updates</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356-1.rocky.0.1" date="1771329600">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="619db7f8c346d6e160f4ca64448dad34549559b1cf13f888d729da7b2a138bf4" name="cockpit-ws-selinux" arch="x86_64">
  <version epoch="0" ver="356.2" rel="1.el10_2.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 350-1" date="1761739200">- networking: fix renaming of bridges and other groups (RHEL-117883)
- bridge: fix OpenSSH_10.2p1 host key detection</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 351-1" date="1762948800">- Firewall ports can be deleted individually</changelog>
  <changelog author="Jelle van der Waa &lt;jelle@vdwaa.nl&gt; - 353.1-1" date="1765800000">- Release workflow fixes</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 354-1" date="1767787200">- Convert documentation to AsciiDoc
- Work around Firefox 146/147 bug (rhbz#2422331)
- Bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 354-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 355-1" date="1769688000">- ws: Remove obsolete pam_cockpit_cert module
- shell: add StartTransientUnit as a sudo alternative</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 356-1" date="1770811200">- systemd: Allow editing timers created by Cockpit
- Convert license headers to SPDX format</changelog>
  <changelog author="Tomas Matus &lt;tmatus@redhat.com&gt; - 356.1-1" date="1776081600">- ws: Prevent remote code execution with SSH argument injection (RHEL-158306)
- node: update lodash dependency (RHEL-164067)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 356.2-1.rocky.0.1" date="1779969600">- Remove requires/recommends on subscription manager</changelog>
</package>
<package pkgid="2e0456869315beabe82e76fa9bca64f8bb41a969515183f363a134df0e14fd3a" name="color-filesystem" arch="noarch">
  <version epoch="0" ver="1" rel="35.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1-30" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1-31" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1-32" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1-33" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1-34" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1-35" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="04e5d68437e745f6cecc6f19cb36c8b251ecd81a8eaa8e48076863a0ad28ab66" name="colord" arch="x86_64">
  <version epoch="0" ver="1.4.7" rel="6.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.4.6-7" date="1692360000">- Rebuild for glib2 symbol export fix (#2232723)</changelog>
  <changelog author="Daan De Meyer &lt;daan.j.demeyer@gmail.com&gt; - 1.4.6-8" date="1696161600">- Provide a sysusers.d file to get user() and group() provides</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.6-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.4.6-10" date="1705924800">- Fix mass-rebuild failure</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.4.7-1" date="1705924801">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.7-2" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.4.7-3" date="1706529600">- Backport a patch to fix ProtectSystem=strict</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.4.7-4" date="1713355200">- gating enabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.7-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.7-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="90644932440cab6e42264090d421ff8a8be11021e927e0b0ee71ff84b86eb376" name="colord-devel" arch="x86_64">
  <version epoch="0" ver="1.4.7" rel="6.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.4.6-7" date="1692360000">- Rebuild for glib2 symbol export fix (#2232723)</changelog>
  <changelog author="Daan De Meyer &lt;daan.j.demeyer@gmail.com&gt; - 1.4.6-8" date="1696161600">- Provide a sysusers.d file to get user() and group() provides</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.6-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.4.6-10" date="1705924800">- Fix mass-rebuild failure</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.4.7-1" date="1705924801">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.7-2" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.4.7-3" date="1706529600">- Backport a patch to fix ProtectSystem=strict</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.4.7-4" date="1713355200">- gating enabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.7-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.7-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="59a68f4ee4451ae6f833affe2714936fe3bf91ed956452ef5540d22dfac4af90" name="colord-devel-docs" arch="noarch">
  <version epoch="0" ver="1.4.7" rel="6.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.4.6-7" date="1692360000">- Rebuild for glib2 symbol export fix (#2232723)</changelog>
  <changelog author="Daan De Meyer &lt;daan.j.demeyer@gmail.com&gt; - 1.4.6-8" date="1696161600">- Provide a sysusers.d file to get user() and group() provides</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.6-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.4.6-10" date="1705924800">- Fix mass-rebuild failure</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.4.7-1" date="1705924801">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.7-2" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.4.7-3" date="1706529600">- Backport a patch to fix ProtectSystem=strict</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.4.7-4" date="1713355200">- gating enabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.7-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.7-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="2ec24e48bfc868e1aeb193a0204ebf2a2b5b51cff1b4d6c394798a4c61cd25f8" name="colord-extra-profiles" arch="noarch">
  <version epoch="0" ver="1.4.7" rel="6.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.4.6-7" date="1692360000">- Rebuild for glib2 symbol export fix (#2232723)</changelog>
  <changelog author="Daan De Meyer &lt;daan.j.demeyer@gmail.com&gt; - 1.4.6-8" date="1696161600">- Provide a sysusers.d file to get user() and group() provides</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.6-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.4.6-10" date="1705924800">- Fix mass-rebuild failure</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.4.7-1" date="1705924801">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.7-2" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.4.7-3" date="1706529600">- Backport a patch to fix ProtectSystem=strict</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.4.7-4" date="1713355200">- gating enabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.7-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.7-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="44eef0fba0e8287af177076c19543cb5cc45ea74853ba651b7361d73038621a2" name="colord-gtk" arch="x86_64">
  <version epoch="0" ver="0.3.1" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.3.0-4" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.3.1-1" date="1706184000">- New upstream version</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.3.1-3" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="0c95521d47fe4b59df4b960c6b3224b52338f384a83de8865a6deb04c5ed1be6" name="colord-gtk-devel" arch="x86_64">
  <version epoch="0" ver="0.3.1" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.3.0-4" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.3.1-1" date="1706184000">- New upstream version</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.3.1-3" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="388e3b77187fa4bd0e5f40dbabd0ad3086b95423ddce58d1436176f688757dc3" name="colord-gtk4" arch="x86_64">
  <version epoch="0" ver="0.3.1" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.3.0-4" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.3.1-1" date="1706184000">- New upstream version</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.3.1-3" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="a3d1c6533c163e9918235cf57d6c4b285c4645a74396192def27459475c2ddb6" name="colord-gtk4-devel" arch="x86_64">
  <version epoch="0" ver="0.3.1" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.3.0-4" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.3.1-1" date="1706184000">- New upstream version</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.3.1-3" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="7d9930e13f9f3b5049cd93c24cf5f15f51b6788f20f508bab7eb6fc6c0d52270" name="colord-libs" arch="x86_64">
  <version epoch="0" ver="1.4.7" rel="6.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.4.6-7" date="1692360000">- Rebuild for glib2 symbol export fix (#2232723)</changelog>
  <changelog author="Daan De Meyer &lt;daan.j.demeyer@gmail.com&gt; - 1.4.6-8" date="1696161600">- Provide a sysusers.d file to get user() and group() provides</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.6-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.4.6-10" date="1705924800">- Fix mass-rebuild failure</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.4.7-1" date="1705924801">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.7-2" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.4.7-3" date="1706529600">- Backport a patch to fix ProtectSystem=strict</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.4.7-4" date="1713355200">- gating enabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.7-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.7-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="98bf53aeafd923ace1149ec864c366707e468ca7e3d08da3f21823d9bb7fd950" name="colord-tests" arch="x86_64">
  <version epoch="0" ver="1.4.7" rel="6.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.4.6-7" date="1692360000">- Rebuild for glib2 symbol export fix (#2232723)</changelog>
  <changelog author="Daan De Meyer &lt;daan.j.demeyer@gmail.com&gt; - 1.4.6-8" date="1696161600">- Provide a sysusers.d file to get user() and group() provides</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.6-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.4.6-10" date="1705924800">- Fix mass-rebuild failure</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.4.7-1" date="1705924801">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.7-2" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.4.7-3" date="1706529600">- Backport a patch to fix ProtectSystem=strict</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.4.7-4" date="1713355200">- gating enabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.7-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.7-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="cf23563960627b4386d7ae6ff2006aadd3377740b10d74820363e2b81078168a" name="compat-golang-github-cpuguy83-md2man-2-devel" arch="noarch">
  <version epoch="0" ver="2.0.3" rel="9.el10"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2.0.3-7" date="1730289600">- don't build devel and compat packages
- Resolves: RHEL-65307</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2.0.3-8" date="1730980800">- re-add -devel and compat
- Resolves: RHEL-65351</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2.0.3-9" date="1744027200">- add Provides: golang(github.com/russross/blackfriday/v2)
- Resolves: RHEL-86199</changelog>
</package>
<package pkgid="094b95a108bad59c43101657a256a5588b2db8e3aedbaf17d029f618384ee0ee" name="compat-libpthread-nonshared" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="ff21daf923fd392206cfb400ce481039ff60c5efa133d1744f5e0f0f4ff4a84a" name="compat-libpthread-nonshared" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="23d8358d8eb811a015c56ff4699b6e090ce3ad7c0b8185ed7aa0fde8644a502f" name="compat-libpthread-nonshared" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="e3995e371793b6ff510fca4667ac2136d8cabed88a0b369ef3220c09f84ea4ae" name="compat-libpthread-nonshared" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="dd781a8f8ee7845336687b871bcbd0eb94689dc863916566ceddaff44a7e4004" name="compiler-rt" arch="x86_64">
  <version epoch="0" ver="21.1.8" rel="1.el10"/>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-8" date="1749556800">- Invert symlink direction
- Fix i686 multilib installation (rhbz#2365079)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-9" date="1750075200">- Use libdir suffix in versioned prefix</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-10" date="1750161600">- Fix llvm-config alternatives handling (rhbz#2361779)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.7-1" date="1750334400">- Update to LLVM 20.1.7</changelog>
  <changelog author="Kashyap Chamarthy &lt;kchamart@redhat.com&gt; - 20.1.7-2" date="1750420800">- Add riscv64 enablement bits; thanks: Songsong Zhang
   (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.8-1" date="1752062400">- Update to LLVM 20.1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20.1.8-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 20.1.8-3" date="1753704000">- Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
- Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
- Backport fix for build of highway package on ppc64le (rhbz#2383182)</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; - 21.1.8-1" date="1771502400">- Update to 21.1.8</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 21.1.8-1" date="1771934400">- Ensure riscv64 has reduced debuginfo
- Ensure riscv64 dwz is ok</changelog>
</package>
<package pkgid="672f6722fcf93aab33e27efa1d7f55c0443c6d6236b1b46519c7bd0670fd480d" name="composefs" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="1.el10"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 1.0.4-1" date="1719489600">- Update to 1.0.4</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.5-1" date="1724068800">- composefs-1.0.5-1.el10
- update to https://github.com/containers/composefs/releases/tag/v1.0.5
- Related: RHEL-34195</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.6-1" date="1727352000">- update to the latest upstream release
  https://github.com/containers/composefs/releases/tag/v1.0.6 Related:
  RHEL-60292</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.7-1" date="1731499200">- composefs-1.0.7-1.el10
- update to https://github.com/containers/composefs/releases/tag/v1.0.7
- Related: RHEL-60292</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 1.0.7-2" date="1733572800">- Fix build
- Related: RHEL-60292</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 1.0.8-1" date="1735905600">- Update to https://github.com/containers/composefs/releases/tag/v1.0.8</changelog>
</package>
<package pkgid="7b2c58ef21d3e6317706395245cdacfbd6bb898fad36d69c2f81463291b87252" name="composefs-devel" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="1.el10"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 1.0.4-1" date="1719489600">- Update to 1.0.4</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.5-1" date="1724068800">- composefs-1.0.5-1.el10
- update to https://github.com/containers/composefs/releases/tag/v1.0.5
- Related: RHEL-34195</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.6-1" date="1727352000">- update to the latest upstream release
  https://github.com/containers/composefs/releases/tag/v1.0.6 Related:
  RHEL-60292</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.7-1" date="1731499200">- composefs-1.0.7-1.el10
- update to https://github.com/containers/composefs/releases/tag/v1.0.7
- Related: RHEL-60292</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 1.0.7-2" date="1733572800">- Fix build
- Related: RHEL-60292</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 1.0.8-1" date="1735905600">- Update to https://github.com/containers/composefs/releases/tag/v1.0.8</changelog>
</package>
<package pkgid="75c5a491fb0e10a1e80066d2eccfa4bf991da8874ce378d6034f093a5494de33" name="composefs-libs" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="1.el10"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 1.0.4-1" date="1719489600">- Update to 1.0.4</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.5-1" date="1724068800">- composefs-1.0.5-1.el10
- update to https://github.com/containers/composefs/releases/tag/v1.0.5
- Related: RHEL-34195</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.6-1" date="1727352000">- update to the latest upstream release
  https://github.com/containers/composefs/releases/tag/v1.0.6 Related:
  RHEL-60292</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.7-1" date="1731499200">- composefs-1.0.7-1.el10
- update to https://github.com/containers/composefs/releases/tag/v1.0.7
- Related: RHEL-60292</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 1.0.7-2" date="1733572800">- Fix build
- Related: RHEL-60292</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 1.0.8-1" date="1735905600">- Update to https://github.com/containers/composefs/releases/tag/v1.0.8</changelog>
</package>
<package pkgid="be0dd6c7b1d83c197387078c9ef03a4a73f460b431b54de20803fa188db4e748" name="conmon" arch="x86_64">
  <version epoch="3" ver="2.2.1" rel="2.el10"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 3:2.1.12-4" date="1737115200">- Fix spec file, remove crio
- Related: RHEL-58990</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:2.1.13-1" date="1740571200">- update to https://github.com/containers/conmon/releases/tag/v2.1.13
- Resolves: RHEL-80818</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:2.2.0-1" date="1770120000">- update to https://github.com/containers/conmon/releases/tag/v2.2.0
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:2.2.1-1" date="1770897600">- update to https://github.com/containers/conmon/releases/tag/v2.2.1
- enable RELRO
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:2.2.1-2" date="1771243200">- use proper macros in spec file and simplify
- Related: RHEL-111917</changelog>
</package>
<package pkgid="e745a4b7ebc163e189f02093d10795bbafa20a576a56c0ccf23a56921528f7f7" name="conntrack-tools" arch="x86_64">
  <version epoch="0" ver="1.4.8" rel="4.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.4.7-5" date="1705492800">- Backport upstream patch to fix GCC 14 compatibility issues</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.7-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.7-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.7-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.8-1" date="1719316800">- Rebase to version 1.4.8 + fixes from upstream</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.8-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.8-3" date="1731672000">- Backport fixes from upstream</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.4.8-4" date="1757419200">- nfct: helper: Extend error message for EBUSY</changelog>
</package>
<package pkgid="ad0d93149c9b37fce517217b2c41d22570e9c2309408957f8384eb5392107c85" name="console-login-helper-messages" arch="noarch">
  <version epoch="0" ver="0.21.3" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.3-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Dusty Mabe &lt;dusty@dustymabe.com&gt; - 0.21.3-5" date="1685620800">- Switch License tags to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.3-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.3-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.3-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.3-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.3-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="93c374088ff7ca8cdbd1c0c20b41eed962c5d8ba1b5de57c374acf5938ca4ab0" name="console-login-helper-messages-issuegen" arch="noarch">
  <version epoch="0" ver="0.21.3" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.3-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Dusty Mabe &lt;dusty@dustymabe.com&gt; - 0.21.3-5" date="1685620800">- Switch License tags to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.3-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.3-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.3-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.3-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.3-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ef01bdad0eff8a3be93a83ab7c2dd661d042dc7ce382f8a14df89d4bcfc30d34" name="console-login-helper-messages-motdgen" arch="noarch">
  <version epoch="0" ver="0.21.3" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.3-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Dusty Mabe &lt;dusty@dustymabe.com&gt; - 0.21.3-5" date="1685620800">- Switch License tags to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.3-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.3-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.3-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.3-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.3-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b9064c2fa4e39a876c9b0ca88d9c13873b2834e79d91247cbf2a643d2500e0e1" name="console-login-helper-messages-profile" arch="noarch">
  <version epoch="0" ver="0.21.3" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.3-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Dusty Mabe &lt;dusty@dustymabe.com&gt; - 0.21.3-5" date="1685620800">- Switch License tags to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.3-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.3-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.3-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.3-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.3-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="463c7babfeb4cd8fd2d2f9999a0f61b4fc06b8b2066f6c3494e46492d48eac47" name="console-setup" arch="noarch">
  <version epoch="0" ver="1.224" rel="3.el10"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.220-1" date="1684238400">- Update to latest upstream version
  Resolves: #2196018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.221-1" date="1685016000">- Update to latest upstream version
  Resolves: #2208916</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.222-1" date="1687521600">- Update to latest upstream version
  Resolves: #2216578</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.222-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.223-1" date="1698235200">- Update to latest upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.223-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.223-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.224-1" date="1706443200">- Update to latest upstream version</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.224-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.224-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="413350fc466d619a4a2831e6b01175cf752525e240e60509f122ff6b59059a1d" name="container-selinux" arch="noarch">
  <version epoch="4" ver="2.246.0" rel="1.el10"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:2.236.0-1" date="1741953600">- update to https://github.com/containers/container-selinux/releases/tag/v2.236.0
- Resolves: RHEL-80476</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:2.237.0-1" date="1746014400">- update to https://github.com/containers/container-selinux/releases/tag/v2.237.0
- Resolves: RHEL-85671</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:2.238.0-1" date="1748865600">- update to https://github.com/containers/container-selinux/releases/tag/v2.238.0
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:2.239.0-1" date="1752494400">- update to https://github.com/containers/container-selinux/releases/tag/v2.239.0
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:2.240.0-1" date="1754913600">- update to https://github.com/containers/container-selinux/releases/tag/v2.240.0
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:2.241.0-1" date="1756468800">- update to https://github.com/containers/container-selinux/releases/tag/v2.241.0
- Resolves: RHEL-111947</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:2.242.0-1" date="1757678400">- update to https://github.com/containers/container-selinux/releases/tag/v2.242.0
- Related: RHEL-111917</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:2.244.0-1" date="1765454400">- update to https://github.com/containers/container-selinux/releases/tag/v2.244.0
- Resolves: RHEL-111947</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:2.245.0-1" date="1770120000">- update to https://github.com/containers/container-selinux/releases/tag/v2.245.0
- Related: RHEL-122178</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4:2.246.0-1" date="1771502400">- update to https://github.com/containers/container-selinux/releases/tag/v2.246.0
- Resolves: RHEL-143694</changelog>
</package>
<package pkgid="2499cd1089755b9c3109d2616ea89375cf5f74ff76c6f7f8bd7ff548885e37bd" name="container-tools" arch="noarch">
  <version epoch="0" ver="1" rel="17.el10"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1-14" date="1701864000">- rebuild with updated dependencies:
  [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
  aardvark-dns and netavark 1.9.0
- Related: Jira:RHEL-2112</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1-15" date="1747396800">- build for RHEL10
- Resolves: RHEL-92028</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1-16" date="1747656000">- amend dependencies for RHEL10
- Resolves: RHEL-92028</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1-17" date="1761566400">- Fix typo in the Summary
- Resolves: RHEL-122178</changelog>
</package>
<package pkgid="9922fc161c3defcaaed9e1dc4bc9e7b76ef551cb93dad52cf1b04f9674df21e2" name="container-tools-tests" arch="noarch">
  <version epoch="0" ver="1" rel="17.el10"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1-14" date="1701864000">- rebuild with updated dependencies:
  [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
  aardvark-dns and netavark 1.9.0
- Related: Jira:RHEL-2112</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1-15" date="1747396800">- build for RHEL10
- Resolves: RHEL-92028</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1-16" date="1747656000">- amend dependencies for RHEL10
- Resolves: RHEL-92028</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1-17" date="1761566400">- Fix typo in the Summary
- Resolves: RHEL-122178</changelog>
</package>
<package pkgid="a8e534c856a375f53fe692d8bd1299f6cd321178edbb5efd41b55cb167a06b7d" name="containers-common" arch="noarch">
  <version epoch="6" ver="5.8" rel="2.el10"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.62.0-1" date="1739448000">- update vendored components
- Related: RHEL-58990</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 5:0.62.0-2" date="1749384000">- fetch TMT podman revdep tests from podman dist-git
- needs at least podman 5.4.0-7.el10
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.63.0-1" date="1749643200">- update vendored components
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.63.1-2" date="1754913600">- update shortnames from Pyxis
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.63.1-3" date="1755000000">- remove the ugly installation hack in tests
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.64.0-4" date="1755518400">- update vendored components for 10.1
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.64.0-5" date="1758801600">- Update rhel-shortnames-overrides to include complete list of UBI/RHEL images
- Related: RHEL-111917</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.64.2-6" date="1770292800">- update shortnames and vendored components for RHEL-10.2
- Resolves: RHEL-146877</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.64.2-7" date="1770292801">- do not allow the shortname to contain registry
- Resolves: RHEL-147179</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8-2" date="1771070400">- Convert to unified source - container-libs
- Related: RHEL-111917</changelog>
</package>
<package pkgid="001db82bc2a8a107cf55cfb4abeee70768bfe9575f4219449901fe74f01d5344" name="containers-common-extra" arch="noarch">
  <version epoch="6" ver="5.8" rel="2.el10"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.62.0-1" date="1739448000">- update vendored components
- Related: RHEL-58990</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 5:0.62.0-2" date="1749384000">- fetch TMT podman revdep tests from podman dist-git
- needs at least podman 5.4.0-7.el10
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.63.0-1" date="1749643200">- update vendored components
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.63.1-2" date="1754913600">- update shortnames from Pyxis
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.63.1-3" date="1755000000">- remove the ugly installation hack in tests
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.64.0-4" date="1755518400">- update vendored components for 10.1
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.64.0-5" date="1758801600">- Update rhel-shortnames-overrides to include complete list of UBI/RHEL images
- Related: RHEL-111917</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.64.2-6" date="1770292800">- update shortnames and vendored components for RHEL-10.2
- Resolves: RHEL-146877</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 5:0.64.2-7" date="1770292801">- do not allow the shortname to contain registry
- Resolves: RHEL-147179</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:5.8-2" date="1771070400">- Convert to unified source - container-libs
- Related: RHEL-111917</changelog>
</package>
<package pkgid="393369a8ec006477563847f5b7aeae13ad40e28864eb1b47c315d8a720fa74cd" name="convmv" arch="noarch">
  <version epoch="0" ver="2.05" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.05-11" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.05-12" date="1687521600">- Migrate to SPDX license expression</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.05-13" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.05-14" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.05-15" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.05-16" date="1716811200">- Correct the SPDX license expression</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.05-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.05-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="84318a1394fa277d4256f1e45b4e88bb6c9537ce2c9df87071b33aeecb23cdf1" name="coreos-installer" arch="x86_64">
  <version epoch="0" ver="0.26.0" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.22.1-1" date="1721995200">- New upstream release</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 0.22.1-2" date="1722427200">- Rebuild for correct jira, resolves RHEL-52233</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 0.23.0-1" date="1731585600">- new version</changelog>
  <changelog author="Joel Capitao &lt;jcapitao@redhat.com&gt; - 0.24.0-1" date="1744804800">- Update to latest upstream</changelog>
  <changelog author="Aashish Radhakrishnan - 0.25.0-1" date="1761307200">- New upstream release</changelog>
  <changelog author="Yasmin de Souza &lt;ydesouza@redhat.com&gt; - 0.26.0-1" date="1773144000">- new version</changelog>
</package>
<package pkgid="addb5fcc9dfd9fe0bdbdb27d6ea2132f45cfe952a729ae51001dd3c26984da49" name="coreos-installer-bootinfra" arch="x86_64">
  <version epoch="0" ver="0.26.0" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.22.1-1" date="1721995200">- New upstream release</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 0.22.1-2" date="1722427200">- Rebuild for correct jira, resolves RHEL-52233</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 0.23.0-1" date="1731585600">- new version</changelog>
  <changelog author="Joel Capitao &lt;jcapitao@redhat.com&gt; - 0.24.0-1" date="1744804800">- Update to latest upstream</changelog>
  <changelog author="Aashish Radhakrishnan - 0.25.0-1" date="1761307200">- New upstream release</changelog>
  <changelog author="Yasmin de Souza &lt;ydesouza@redhat.com&gt; - 0.26.0-1" date="1773144000">- new version</changelog>
</package>
<package pkgid="b129c2bc4873878a0d5b6d1fcffdbb4a346b12a58a8f6a0f13e7abf350d5ec40" name="coreos-installer-dracut" arch="x86_64">
  <version epoch="0" ver="0.26.0" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.22.1-1" date="1721995200">- New upstream release</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 0.22.1-2" date="1722427200">- Rebuild for correct jira, resolves RHEL-52233</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 0.23.0-1" date="1731585600">- new version</changelog>
  <changelog author="Joel Capitao &lt;jcapitao@redhat.com&gt; - 0.24.0-1" date="1744804800">- Update to latest upstream</changelog>
  <changelog author="Aashish Radhakrishnan - 0.25.0-1" date="1761307200">- New upstream release</changelog>
  <changelog author="Yasmin de Souza &lt;ydesouza@redhat.com&gt; - 0.26.0-1" date="1773144000">- new version</changelog>
</package>
<package pkgid="ff53eca368b27d5d8f317da0fbc9b00265d1e613a04ed113a9693d12804c1c5e" name="coreutils" arch="x86_64">
  <version epoch="0" ver="9.5" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.4-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.4-6" date="1706529600">- fix tail on kernels with 64k page sizes (RHEL-22866)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.4-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-1" date="1720094400">- rebase to latest upstream version
- sync i18n patch with SUSE (Kudos to Berny Völker!)
- add some test dependencies to execute additional part of the upstream test-suite
- enable LTO on ppc64le (RHEL-39977)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-2" date="1721044800">- fix fold exit code for non-existent files (RHEL-46722)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-3" date="1727438400">- fix fold -b with UTF-8 locale (RHEL-60295)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-4" date="1727956800">- fix typo in ls -k info page (RHEL-60268)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.5-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-6" date="1732622400">- Fix affinity mask handling in nproc for large CPU counts (RHEL-68961)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-7" date="1768478400">- fold: fix processing of malformed UTF-8 sequences (RHEL-140116)</changelog>
</package>
<package pkgid="d07a0860eaf00ba2274d8c3d0ab913ea9bc3bfc1a0eb55b102c6b84156bba6dd" name="coreutils" arch="x86_64">
  <version epoch="0" ver="9.5" rel="8.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.4-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-1" date="1720094400">- rebase to latest upstream version
- sync i18n patch with SUSE (Kudos to Berny Völker!)
- add some test dependencies to execute additional part of the upstream test-suite
- enable LTO on ppc64le (RHEL-39977)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-2" date="1721044800">- fix fold exit code for non-existent files (RHEL-46722)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-3" date="1727438400">- fix fold -b with UTF-8 locale (RHEL-60295)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-4" date="1727956800">- fix typo in ls -k info page (RHEL-60268)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.5-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-6" date="1732622400">- Fix affinity mask handling in nproc for large CPU counts (RHEL-68961)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-7" date="1768478400">- fold: fix processing of malformed UTF-8 sequences (RHEL-140116)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-8" date="1780401600">- CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification (RHEL-180649)</changelog>
</package>
<package pkgid="4b0fced9d09bfb2b67062f0ec39ecbe4d21f7f55d1f111fffccf12138c4e598a" name="coreutils-common" arch="x86_64">
  <version epoch="0" ver="9.5" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.4-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.4-6" date="1706529600">- fix tail on kernels with 64k page sizes (RHEL-22866)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.4-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-1" date="1720094400">- rebase to latest upstream version
- sync i18n patch with SUSE (Kudos to Berny Völker!)
- add some test dependencies to execute additional part of the upstream test-suite
- enable LTO on ppc64le (RHEL-39977)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-2" date="1721044800">- fix fold exit code for non-existent files (RHEL-46722)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-3" date="1727438400">- fix fold -b with UTF-8 locale (RHEL-60295)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-4" date="1727956800">- fix typo in ls -k info page (RHEL-60268)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.5-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-6" date="1732622400">- Fix affinity mask handling in nproc for large CPU counts (RHEL-68961)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-7" date="1768478400">- fold: fix processing of malformed UTF-8 sequences (RHEL-140116)</changelog>
</package>
<package pkgid="34227d6c104472d97e8442b78f6aef84dc3a22261d101a57f20d83fffee4e037" name="coreutils-common" arch="x86_64">
  <version epoch="0" ver="9.5" rel="8.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.4-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-1" date="1720094400">- rebase to latest upstream version
- sync i18n patch with SUSE (Kudos to Berny Völker!)
- add some test dependencies to execute additional part of the upstream test-suite
- enable LTO on ppc64le (RHEL-39977)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-2" date="1721044800">- fix fold exit code for non-existent files (RHEL-46722)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-3" date="1727438400">- fix fold -b with UTF-8 locale (RHEL-60295)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-4" date="1727956800">- fix typo in ls -k info page (RHEL-60268)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.5-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-6" date="1732622400">- Fix affinity mask handling in nproc for large CPU counts (RHEL-68961)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-7" date="1768478400">- fold: fix processing of malformed UTF-8 sequences (RHEL-140116)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-8" date="1780401600">- CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification (RHEL-180649)</changelog>
</package>
<package pkgid="075960b887c126f688c995d32d2362a44914ee68fb1cb8c4762c6b3fefb33e13" name="coreutils-single" arch="x86_64">
  <version epoch="0" ver="9.5" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.4-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.4-6" date="1706529600">- fix tail on kernels with 64k page sizes (RHEL-22866)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.4-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-1" date="1720094400">- rebase to latest upstream version
- sync i18n patch with SUSE (Kudos to Berny Völker!)
- add some test dependencies to execute additional part of the upstream test-suite
- enable LTO on ppc64le (RHEL-39977)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-2" date="1721044800">- fix fold exit code for non-existent files (RHEL-46722)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-3" date="1727438400">- fix fold -b with UTF-8 locale (RHEL-60295)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-4" date="1727956800">- fix typo in ls -k info page (RHEL-60268)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.5-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-6" date="1732622400">- Fix affinity mask handling in nproc for large CPU counts (RHEL-68961)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-7" date="1768478400">- fold: fix processing of malformed UTF-8 sequences (RHEL-140116)</changelog>
</package>
<package pkgid="fd28b4cc46c9457c73b1290ad69697d334e5a2c3344c7ada5f0118c5b0fc3285" name="coreutils-single" arch="x86_64">
  <version epoch="0" ver="9.5" rel="8.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.4-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-1" date="1720094400">- rebase to latest upstream version
- sync i18n patch with SUSE (Kudos to Berny Völker!)
- add some test dependencies to execute additional part of the upstream test-suite
- enable LTO on ppc64le (RHEL-39977)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-2" date="1721044800">- fix fold exit code for non-existent files (RHEL-46722)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-3" date="1727438400">- fix fold -b with UTF-8 locale (RHEL-60295)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-4" date="1727956800">- fix typo in ls -k info page (RHEL-60268)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.5-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-6" date="1732622400">- Fix affinity mask handling in nproc for large CPU counts (RHEL-68961)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-7" date="1768478400">- fold: fix processing of malformed UTF-8 sequences (RHEL-140116)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 9.5-8" date="1780401600">- CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification (RHEL-180649)</changelog>
</package>
<package pkgid="797634e4392ea2e19aa09f197543b0fa20fccd69c10bc3e34b2743a9c2ec6ad3" name="corosync" arch="x86_64">
  <version epoch="0" ver="3.1.10" rel="1.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.9-1" date="1731672000">- Resolves: RHEL-65701

- New upstream release (RHEL-65701)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.9-1.1" date="1743163200">- Resolves: RHEL-84612

- totemsrp: Check size of orf_token msg (fixes CVE-2025-30472)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.9-2" date="1750075200">- Resolves: RHEL-96073

- exec: Add support for env STATE_DIRECTORY
- init: Use LogsDirectory in systemd unit file</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.10-1" date="1763467200">- Resolves: RHEL-122945

- New upstream release (RHEL-122945)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.10-1.1" date="1775736000">- Resolves: RHEL-163802
- Resolves: RHEL-163823

- totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
- totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)</changelog>
</package>
<package pkgid="c4614a9869127f53c938b146ca8f2d4c37af3b2b6b7329843c0b4a358a837b67" name="corosync-qdevice" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.3-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.3-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.3-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.3-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.0.3-8" date="1739880000">- Resolves: RHEL-80063

- Add support for sysusers.d functionality (RHEL-80063)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.0.4-1" date="1764072000">- Resolves: RHEL-123651
- Resolves: RHEL-122739

- New upstream release (RHEL-123651)
- Support for running corosync-qnetd-tool and corosync-qdevice-tool
  as a non-root user (RHEL-122739)</changelog>
</package>
<package pkgid="8b8036ea8e93651076f483a9288d5f5c10f1a7f500944a781c450dc4705e624b" name="corosync-qdevice-devel" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.3-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.3-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.3-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.3-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.0.3-8" date="1739880000">- Resolves: RHEL-80063

- Add support for sysusers.d functionality (RHEL-80063)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.0.4-1" date="1764072000">- Resolves: RHEL-123651
- Resolves: RHEL-122739

- New upstream release (RHEL-123651)
- Support for running corosync-qnetd-tool and corosync-qdevice-tool
  as a non-root user (RHEL-122739)</changelog>
</package>
<package pkgid="15eb2c365ef630f6d6a62cffeff65f4f90595b3ddd3680f607b0f741502c1bfb" name="corosync-qnetd" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.3-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.3-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.3-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.3-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.0.3-8" date="1739880000">- Resolves: RHEL-80063

- Add support for sysusers.d functionality (RHEL-80063)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.0.4-1" date="1764072000">- Resolves: RHEL-123651
- Resolves: RHEL-122739

- New upstream release (RHEL-123651)
- Support for running corosync-qnetd-tool and corosync-qdevice-tool
  as a non-root user (RHEL-122739)</changelog>
</package>
<package pkgid="19692e3e309ca5a873c50fcc6a5b12c965b0b5aa8c0bdf376d4f7e0cebd3c042" name="corosync-vqsim" arch="x86_64">
  <version epoch="0" ver="3.1.10" rel="1.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.9-1" date="1731672000">- Resolves: RHEL-65701

- New upstream release (RHEL-65701)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.9-1.1" date="1743163200">- Resolves: RHEL-84612

- totemsrp: Check size of orf_token msg (fixes CVE-2025-30472)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.9-2" date="1750075200">- Resolves: RHEL-96073

- exec: Add support for env STATE_DIRECTORY
- init: Use LogsDirectory in systemd unit file</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.10-1" date="1763467200">- Resolves: RHEL-122945

- New upstream release (RHEL-122945)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.10-1.1" date="1775736000">- Resolves: RHEL-163802
- Resolves: RHEL-163823

- totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
- totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)</changelog>
</package>
<package pkgid="dd0d1248d70f34f4932babe5c36c5b0f9b3774420d43375c46a357c381c4fea8" name="corosynclib" arch="x86_64">
  <version epoch="0" ver="3.1.10" rel="1.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.9-1" date="1731672000">- Resolves: RHEL-65701

- New upstream release (RHEL-65701)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.9-1.1" date="1743163200">- Resolves: RHEL-84612

- totemsrp: Check size of orf_token msg (fixes CVE-2025-30472)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.9-2" date="1750075200">- Resolves: RHEL-96073

- exec: Add support for env STATE_DIRECTORY
- init: Use LogsDirectory in systemd unit file</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.10-1" date="1763467200">- Resolves: RHEL-122945

- New upstream release (RHEL-122945)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.10-1.1" date="1775736000">- Resolves: RHEL-163802
- Resolves: RHEL-163823

- totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
- totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)</changelog>
</package>
<package pkgid="9fcd89c9c118e568fd52d67b44b7fb11b22e8111c7b39ec56c0a28b560b2e93b" name="corosynclib-devel" arch="x86_64">
  <version epoch="0" ver="3.1.10" rel="1.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.9-1" date="1731672000">- Resolves: RHEL-65701

- New upstream release (RHEL-65701)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.9-1.1" date="1743163200">- Resolves: RHEL-84612

- totemsrp: Check size of orf_token msg (fixes CVE-2025-30472)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.9-2" date="1750075200">- Resolves: RHEL-96073

- exec: Add support for env STATE_DIRECTORY
- init: Use LogsDirectory in systemd unit file</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.10-1" date="1763467200">- Resolves: RHEL-122945

- New upstream release (RHEL-122945)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.1.10-1.1" date="1775736000">- Resolves: RHEL-163802
- Resolves: RHEL-163823

- totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
- totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)</changelog>
</package>
<package pkgid="ffd887348d611f779ae02cef89d7e1cae53adfe7901d31840bb9d5730915bb5a" name="cpio" arch="x86_64">
  <version epoch="0" ver="2.15" rel="3.el10"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 2.14-1" date="1684238400">- Rebase to version 2.14
- Resolves #1188590 CVE-2015-1197</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 2.14-2" date="1685361600">- Release bump</changelog>
  <changelog author="Stewart Smith &lt;trawets@amazon.com&gt; - 2.14-3" date="1689508800">- gpg verify source tarball</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.14-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.14-5" date="1700049600">- Backport upstream patch for C99 compatibility issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.14-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.14-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 2.15-1" date="1706097601">- Rebase to version 2.15</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.15-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.15-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="eb54c6ea8f749dc825b2c39ee0dbe66f10e02492e6425359f32c64114cb1dbd7" name="cpp" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="dc78e073ea37de83f7fa14b83bad66131a10275b28128200edf5877af2f61f23" name="cppunit" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="23.el10"/>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.15.1-14" date="1670587200">- tests: Fix fmf plan deprecated attributes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.1-15" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.1-16" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mattia Verga &lt;mattia.verga@proton.me&gt; - 1.15.1-17" date="1692878400">- Backport patch to run tests in deterministic order</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.1-18" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.1-19" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 1.15.1-20" date="1714737600">- tests: Fix TMT dependencies</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 1.15.1-21" date="1714737601">- tests: Remove unused remnants of Beaker</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.15.1-22" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.15.1-23" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="60cdba0c2e53a5dab0b1fb8492cd846f3f32c1f1731796c0df72e998eb64a2c2" name="cppunit-devel" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="23.el10"/>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.15.1-14" date="1670587200">- tests: Fix fmf plan deprecated attributes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.1-15" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.1-16" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mattia Verga &lt;mattia.verga@proton.me&gt; - 1.15.1-17" date="1692878400">- Backport patch to run tests in deterministic order</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.1-18" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.1-19" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 1.15.1-20" date="1714737600">- tests: Fix TMT dependencies</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 1.15.1-21" date="1714737601">- tests: Remove unused remnants of Beaker</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.15.1-22" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.15.1-23" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="d35d9f507794399c65ce165583e5032799e5855e795e88ce48b8c72fe2bb4054" name="cppunit-doc" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="23.el10"/>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.15.1-14" date="1670587200">- tests: Fix fmf plan deprecated attributes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.1-15" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.1-16" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mattia Verga &lt;mattia.verga@proton.me&gt; - 1.15.1-17" date="1692878400">- Backport patch to run tests in deterministic order</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.1-18" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.1-19" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 1.15.1-20" date="1714737600">- tests: Fix TMT dependencies</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 1.15.1-21" date="1714737601">- tests: Remove unused remnants of Beaker</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.15.1-22" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.15.1-23" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="dde81ec954f9893964555d586c05d47c3fa210fe26df9a3446119a8d8afdd7fd" name="cracklib" arch="x86_64">
  <version epoch="0" ver="2.9.11" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.7-31" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Wouters &lt;paul.wouters@aiven.io - 2.9.11-1" date="1688731200">- Resolves: rhbz#2123955 cracklib-2.9.11 is available
- Remove old patches, port remaining patches to 2.9.11
- Use man pages from doc/ instead of pulling them from debian</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.11-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 2.9.11-3" date="1691150400">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.11-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.11-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.9.11-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Veronika Hanulikova &lt;vhanulik@redhat.com&gt; - 2.9.11-7" date="1722340800">- Add missing man page for create-cracklib-dict (RHEL-39972)
- Preserve special characters in cracklib-format (RHEL-39972)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.9.11-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="16718e067dc8a593e4bbfa96c28a2281fa3dfee61b0a9ec2a2d2e02fd2da17d0" name="cracklib-devel" arch="x86_64">
  <version epoch="0" ver="2.9.11" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.7-31" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Wouters &lt;paul.wouters@aiven.io - 2.9.11-1" date="1688731200">- Resolves: rhbz#2123955 cracklib-2.9.11 is available
- Remove old patches, port remaining patches to 2.9.11
- Use man pages from doc/ instead of pulling them from debian</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.11-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 2.9.11-3" date="1691150400">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.11-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.11-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.9.11-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Veronika Hanulikova &lt;vhanulik@redhat.com&gt; - 2.9.11-7" date="1722340800">- Add missing man page for create-cracklib-dict (RHEL-39972)
- Preserve special characters in cracklib-format (RHEL-39972)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.9.11-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2b5356fc405cb6d6637d15c5548997e70098a00e646ec6de010c1f2aab206a22" name="cracklib-dicts" arch="x86_64">
  <version epoch="0" ver="2.9.11" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.7-31" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Wouters &lt;paul.wouters@aiven.io - 2.9.11-1" date="1688731200">- Resolves: rhbz#2123955 cracklib-2.9.11 is available
- Remove old patches, port remaining patches to 2.9.11
- Use man pages from doc/ instead of pulling them from debian</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.11-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 2.9.11-3" date="1691150400">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.11-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.11-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.9.11-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Veronika Hanulikova &lt;vhanulik@redhat.com&gt; - 2.9.11-7" date="1722340800">- Add missing man page for create-cracklib-dict (RHEL-39972)
- Preserve special characters in cracklib-format (RHEL-39972)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.9.11-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="46980f6743755ef57fe82ff09bd04fc2088039fb8e983a02500ef537922830c7" name="crash" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.0.5-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 8.0.5-4" date="1720008000">- Rebase to upstream crash 8.0.5 ce4ddc742fbdd</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 8.0.5-5" date="1723032000">- Rebase to upstream crash 8.0.5 f615f8fab7bf3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.0.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 8.0.6-1" date="1732017600">- Rebase to upstream crash 8.0.6</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 9.0.0-1" date="1746446400">- Rebase to upstream crash 9.0.0</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 9.0.0-2" date="1751457600">- Rebase to upstream crash 7e8a2796580</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 9.0.0-3" date="1753444800">- Rebase to upstream crash 2c69f93e59c</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 9.0.0-4" date="1754481600">- Rebase to upstream crash 62486400d35</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 9.0.1-1" date="1763985600">- Rebase to upstream crash 9.0.1</changelog>
</package>
<package pkgid="eda35175f54a6bb1b56442eca7d8c12a66d574f06cf3b182c2ad2d698b032120" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.0.5-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 8.0.5-4" date="1720008000">- Rebase to upstream crash 8.0.5 ce4ddc742fbdd</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 8.0.5-5" date="1723032000">- Rebase to upstream crash 8.0.5 f615f8fab7bf3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.0.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 8.0.6-1" date="1732017600">- Rebase to upstream crash 8.0.6</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 9.0.0-1" date="1746446400">- Rebase to upstream crash 9.0.0</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 9.0.0-2" date="1751457600">- Rebase to upstream crash 7e8a2796580</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 9.0.0-3" date="1753444800">- Rebase to upstream crash 2c69f93e59c</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 9.0.0-4" date="1754481600">- Rebase to upstream crash 62486400d35</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 9.0.1-1" date="1763985600">- Rebase to upstream crash 9.0.1</changelog>
</package>
<package pkgid="14c3f695f0aae52aa6eb8fc75284ea2e05a6d05f698f9a8003f3ee50871f9306" name="crash-gcore-command" arch="x86_64">
  <version epoch="0" ver="1.6.4" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="HATAYAMA Daisuke &lt;d.hatayama@fujitsu.com&gt; - 1.6.4-3" date="1694520000">- Migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 1.6.4-6" date="1713960000">- Fix the hardening issue "FAIL: bind-now test because not linked with -Wl,-z,now"
- add gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.4-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.4-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 1.6.4-9" date="1746446400">- rebase to latest upstream e03ff7341a</changelog>
</package>
<package pkgid="98059fd9c0889a61c37a32620ed97a357483008045758efc5966b60db044c69b" name="crash-trace-command" arch="x86_64">
  <version epoch="0" ver="3.0" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="HATAYAMA Daisuke &lt;d.hatayama@fujitsu.com&gt; - 3.0-8" date="1694520000">- Migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0-10" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 3.0-11" date="1713960000">- Fix the hardening issue "FAIL: bind-now test because not linked with -Wl,-z,now"
- add gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 3.0-13" date="1720612800">- trace: Support module memory layout change on Linux 6.4</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="313eba2fec76e5472d6079f3e9e240d69386860f2e7aaccd821eaf0a7d7ccf9c" name="createrepo_c" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="4.el10"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.0.2-3" date="1700827200">- Restore compatiblity with libxml2-2.12.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jan Kolarik &lt;jkolarik@redhat.com&gt; - 1.0.3-1" date="1706270400">- Update to 1.0.3
- Set compression level 10 for zstd and zck
- Introduce new --no-pretty option to reduce metadata size
- Use gzip compression by default when --compatibility is specified
- Default changelog limit restored for --compatibility
- Use epoch-friendly sub-package interdependencies
- Enable sqlite shared cache on connection level
- Fix const-correctness with libxml2-2.12.0
- Allow specifying zck compression only</changelog>
  <changelog author="Jan Kolarik &lt;jkolarik@redhat.com&gt; - 1.0.4-1" date="1708430400">- Update to 1.0.4 (RHEL-38831)
- Extend the --compatibility flag to cover other defaults
- mergerepo_c and modifyrepo_c now make "pretty" indented xml
- Fix building due to bash-completion repackaging</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.1.1-1" date="1716897600">- 1.1.1 bump (RHEL-38831)
- Package Python examples</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.1.2-1" date="1716984000">- 1.1.2 bump (RHEL-38831)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.1.2-3" date="1719921600">- Fix a file descriptor and a memory leak in an error path of
  cr_detect_compression() (RHEL-45645)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1c3bcebd554039239b9941c0bad7a2d1c33c6ba07c417867ada0453a80ee14e7" name="createrepo_c-devel" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="4.el10"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.0.2-3" date="1700827200">- Restore compatiblity with libxml2-2.12.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jan Kolarik &lt;jkolarik@redhat.com&gt; - 1.0.3-1" date="1706270400">- Update to 1.0.3
- Set compression level 10 for zstd and zck
- Introduce new --no-pretty option to reduce metadata size
- Use gzip compression by default when --compatibility is specified
- Default changelog limit restored for --compatibility
- Use epoch-friendly sub-package interdependencies
- Enable sqlite shared cache on connection level
- Fix const-correctness with libxml2-2.12.0
- Allow specifying zck compression only</changelog>
  <changelog author="Jan Kolarik &lt;jkolarik@redhat.com&gt; - 1.0.4-1" date="1708430400">- Update to 1.0.4 (RHEL-38831)
- Extend the --compatibility flag to cover other defaults
- mergerepo_c and modifyrepo_c now make "pretty" indented xml
- Fix building due to bash-completion repackaging</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.1.1-1" date="1716897600">- 1.1.1 bump (RHEL-38831)
- Package Python examples</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.1.2-1" date="1716984000">- 1.1.2 bump (RHEL-38831)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.1.2-3" date="1719921600">- Fix a file descriptor and a memory leak in an error path of
  cr_detect_compression() (RHEL-45645)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c069f6eb4527dfc23e6a69b6f0d1888470419d528103d1c8c0accdfd55bf311a" name="createrepo_c-libs" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="4.el10"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.0.2-3" date="1700827200">- Restore compatiblity with libxml2-2.12.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jan Kolarik &lt;jkolarik@redhat.com&gt; - 1.0.3-1" date="1706270400">- Update to 1.0.3
- Set compression level 10 for zstd and zck
- Introduce new --no-pretty option to reduce metadata size
- Use gzip compression by default when --compatibility is specified
- Default changelog limit restored for --compatibility
- Use epoch-friendly sub-package interdependencies
- Enable sqlite shared cache on connection level
- Fix const-correctness with libxml2-2.12.0
- Allow specifying zck compression only</changelog>
  <changelog author="Jan Kolarik &lt;jkolarik@redhat.com&gt; - 1.0.4-1" date="1708430400">- Update to 1.0.4 (RHEL-38831)
- Extend the --compatibility flag to cover other defaults
- mergerepo_c and modifyrepo_c now make "pretty" indented xml
- Fix building due to bash-completion repackaging</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.1.1-1" date="1716897600">- 1.1.1 bump (RHEL-38831)
- Package Python examples</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.1.2-1" date="1716984000">- 1.1.2 bump (RHEL-38831)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.1.2-3" date="1719921600">- Fix a file descriptor and a memory leak in an error path of
  cr_detect_compression() (RHEL-45645)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d92d3ad0b1d60a4f04202f1b2eeedd6080e3f508ee988a6d246b5b79f8167b43" name="crit" arch="x86_64">
  <version epoch="0" ver="4.2" rel="1.el10"/>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 3.19-2" date="1701172800">- Fix test setup</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.19-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.19-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-7" date="1733832000">- Switch network locking backend default to nftables</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-8" date="1738670400">- Adapt patches to patches merged upstream
- Fix running on aarch64</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-9" date="1738929600">- Fix VDSO compile error on s390x</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.1-1" date="1747051200">- Update to 4.1</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.2-1" date="1763467200">- Update to 4.2</changelog>
</package>
<package pkgid="6a5dfb902e4d198562058bb06c31e2b1d99a17ef9ed59823b78d967d1b0d7464" name="crit" arch="x86_64">
  <version epoch="0" ver="4.2" rel="2.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.19-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-7" date="1733832000">- Switch network locking backend default to nftables</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-8" date="1738670400">- Adapt patches to patches merged upstream
- Fix running on aarch64</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-9" date="1738929600">- Fix VDSO compile error on s390x</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.1-1" date="1747051200">- Update to 4.1</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.2-1" date="1763467200">- Update to 4.2</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.2-2" date="1784721600">- Handle rseq in generic compel code (checkpoint-restore/criu#3097)</changelog>
</package>
<package pkgid="fbc46c4b732971cdc4eec7d48f96f192151e0c743bfbb7eee0173ec388671265" name="criu" arch="x86_64">
  <version epoch="0" ver="4.2" rel="1.el10"/>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 3.19-2" date="1701172800">- Fix test setup</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.19-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.19-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-7" date="1733832000">- Switch network locking backend default to nftables</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-8" date="1738670400">- Adapt patches to patches merged upstream
- Fix running on aarch64</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-9" date="1738929600">- Fix VDSO compile error on s390x</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.1-1" date="1747051200">- Update to 4.1</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.2-1" date="1763467200">- Update to 4.2</changelog>
</package>
<package pkgid="52a3594f403eefa25bd9d0a557843b80754ce2eb73de2148744baf3674614f3f" name="criu" arch="x86_64">
  <version epoch="0" ver="4.2" rel="2.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.19-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-7" date="1733832000">- Switch network locking backend default to nftables</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-8" date="1738670400">- Adapt patches to patches merged upstream
- Fix running on aarch64</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-9" date="1738929600">- Fix VDSO compile error on s390x</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.1-1" date="1747051200">- Update to 4.1</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.2-1" date="1763467200">- Update to 4.2</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.2-2" date="1784721600">- Handle rseq in generic compel code (checkpoint-restore/criu#3097)</changelog>
</package>
<package pkgid="06d4cc77d1bf3bbec08259063cc5e2be6701a9cb2c8b6db39091dacd55c9fdde" name="criu-devel" arch="x86_64">
  <version epoch="0" ver="4.2" rel="1.el10"/>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 3.19-2" date="1701172800">- Fix test setup</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.19-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.19-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-7" date="1733832000">- Switch network locking backend default to nftables</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-8" date="1738670400">- Adapt patches to patches merged upstream
- Fix running on aarch64</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-9" date="1738929600">- Fix VDSO compile error on s390x</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.1-1" date="1747051200">- Update to 4.1</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.2-1" date="1763467200">- Update to 4.2</changelog>
</package>
<package pkgid="eaaae2c7b5c2cdbf99ff702cd9067adcf80b0813681e0a00515d609b6c4f3817" name="criu-devel" arch="x86_64">
  <version epoch="0" ver="4.2" rel="2.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.19-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-7" date="1733832000">- Switch network locking backend default to nftables</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-8" date="1738670400">- Adapt patches to patches merged upstream
- Fix running on aarch64</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-9" date="1738929600">- Fix VDSO compile error on s390x</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.1-1" date="1747051200">- Update to 4.1</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.2-1" date="1763467200">- Update to 4.2</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.2-2" date="1784721600">- Handle rseq in generic compel code (checkpoint-restore/criu#3097)</changelog>
</package>
<package pkgid="5368935447ba075a3c80c7153c375c959aea6586cf6f2b4ddf1207b657782e3f" name="criu-libs" arch="x86_64">
  <version epoch="0" ver="4.2" rel="1.el10"/>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 3.19-2" date="1701172800">- Fix test setup</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.19-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.19-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-7" date="1733832000">- Switch network locking backend default to nftables</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-8" date="1738670400">- Adapt patches to patches merged upstream
- Fix running on aarch64</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-9" date="1738929600">- Fix VDSO compile error on s390x</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.1-1" date="1747051200">- Update to 4.1</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.2-1" date="1763467200">- Update to 4.2</changelog>
</package>
<package pkgid="bff6d781328a976c33d16a87cefc8531520806b34203a66867ffbe82a3625ade" name="criu-libs" arch="x86_64">
  <version epoch="0" ver="4.2" rel="2.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.19-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-7" date="1733832000">- Switch network locking backend default to nftables</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-8" date="1738670400">- Adapt patches to patches merged upstream
- Fix running on aarch64</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-9" date="1738929600">- Fix VDSO compile error on s390x</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.1-1" date="1747051200">- Update to 4.1</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.2-1" date="1763467200">- Update to 4.2</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.2-2" date="1784721600">- Handle rseq in generic compel code (checkpoint-restore/criu#3097)</changelog>
</package>
<package pkgid="9d988ac2a4eb0e77ac2542d28358a21a5482cdb0ebb04d81b11031dd1013cc51" name="criu-ns" arch="x86_64">
  <version epoch="0" ver="4.2" rel="1.el10"/>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 3.19-2" date="1701172800">- Fix test setup</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.19-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.19-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-7" date="1733832000">- Switch network locking backend default to nftables</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-8" date="1738670400">- Adapt patches to patches merged upstream
- Fix running on aarch64</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-9" date="1738929600">- Fix VDSO compile error on s390x</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.1-1" date="1747051200">- Update to 4.1</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.2-1" date="1763467200">- Update to 4.2</changelog>
</package>
<package pkgid="02073a262a34c05f6c97b96c8de5b2040167eacfc9b1561292ea2e39c44ec065" name="criu-ns" arch="x86_64">
  <version epoch="0" ver="4.2" rel="2.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.19-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-7" date="1733832000">- Switch network locking backend default to nftables</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-8" date="1738670400">- Adapt patches to patches merged upstream
- Fix running on aarch64</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.19-9" date="1738929600">- Fix VDSO compile error on s390x</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.1-1" date="1747051200">- Update to 4.1</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.2-1" date="1763467200">- Update to 4.2</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 4.2-2" date="1784721600">- Handle rseq in generic compel code (checkpoint-restore/criu#3097)</changelog>
</package>
<package pkgid="30551dfcf038c248ba5ec4df10912e4cf530cdfe0f4151979d68cd14640c0293" name="cronie" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="14.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Heger &lt;jheger@redhat.com&gt; - 1.7.0-6" date="1722513600">- Setup gating for c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-8" date="1730894400">- Resolve RHEL SAST issues</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-9" date="1733918400">- Reintroduce file existence check and fix timestamp file permissions</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-10" date="1745409600">- Fix range parsing</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-11" date="1747224000">- Move parsing code before separator check</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-12" date="1755000000">- Crontab fix backup failure</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-13" date="1765972800">- Forward XDG_SESSION_CLASS to PAM for session classification</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-14" date="1768392000">- Fix MAILFROM envelope address handling</changelog>
</package>
<package pkgid="ae3c4e236c2f8fddf26a1df46cec8159ae7dbcc88b33d4ded19c86eba9657e7d" name="cronie-anacron" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="14.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Heger &lt;jheger@redhat.com&gt; - 1.7.0-6" date="1722513600">- Setup gating for c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-8" date="1730894400">- Resolve RHEL SAST issues</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-9" date="1733918400">- Reintroduce file existence check and fix timestamp file permissions</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-10" date="1745409600">- Fix range parsing</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-11" date="1747224000">- Move parsing code before separator check</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-12" date="1755000000">- Crontab fix backup failure</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-13" date="1765972800">- Forward XDG_SESSION_CLASS to PAM for session classification</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-14" date="1768392000">- Fix MAILFROM envelope address handling</changelog>
</package>
<package pkgid="dd9d1f40037e47f481745d73d8a7c979392a708ffd56b5136c6d468ff7efeafb" name="cronie-noanacron" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="14.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Heger &lt;jheger@redhat.com&gt; - 1.7.0-6" date="1722513600">- Setup gating for c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-8" date="1730894400">- Resolve RHEL SAST issues</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-9" date="1733918400">- Reintroduce file existence check and fix timestamp file permissions</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-10" date="1745409600">- Fix range parsing</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-11" date="1747224000">- Move parsing code before separator check</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-12" date="1755000000">- Crontab fix backup failure</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-13" date="1765972800">- Forward XDG_SESSION_CLASS to PAM for session classification</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.7.0-14" date="1768392000">- Fix MAILFROM envelope address handling</changelog>
</package>
<package pkgid="aa77e829dc174a3c17e97dd91a07aafcf1c6974f4011663e8b69962feb3010a8" name="crontabs" arch="noarch">
  <version epoch="0" ver="1.11^20190603git9e74f2d" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11-29.20190603git" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11-30.20190603git" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.11-30.20190603git" date="1694520000">- Migrated to SPDX license field.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11^20190603git9e74f2d-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11^20190603git9e74f2d-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11^20190603git9e74f2d-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Heger &lt;jheger@redhat.com&gt; - 1.11^20190603git9e74f2d-5" date="1727092800">- Setup gating for c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11^20190603git9e74f2d-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="d7a7a410ed7f4b6f812d6843d48046992e75e9ce1a86c0233a9798bcc55a8421" name="cross-binutils-aarch64" arch="x86_64">
  <version epoch="0" ver="2.41" rel="63.el10"/>
  <changelog author="Andrea Bolognani  &lt;abologna@redhat.com&gt; - 2.41-54" date="1743595200">- Fix BuildRequires for non-gold architectures.  (RHEL-85855)
- Fix RISC-V ld testsuite failures (thanks Nick Clifton).  (RHEL-85855)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-55" date="1744718400">- Adds z17 as a cpu name for the s390x architecture.  (RHEL-87215)</changelog>
  <changelog author="Andrea Bolognani  &lt;abologna@redhat.com&gt; - 2.41-56" date="1745841600">- Add basic support for RISC-V 64-bit EFI objects.  (RHEL-88815)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-57" date="1751284800">- Add fix for CVE-2025-5244.  (RHEL-100417)
- USe correct fix for CVE-2025-5702.  (RHEL-100159)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-58" date="1754481600">- Remove workaround for CVE-2025-5702.  (RHEL-100159)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-59" date="1762257600">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-125205)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-60" date="1762776000">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-126877)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-61" date="1765886400">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-132254)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-62" date="1768824000">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-142279)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-63" date="1769428800">- Run linker tests for cross binutils.  Compare the native and cross results.  (RHEL-117111)</changelog>
</package>
<package pkgid="f7a880ac9227e00c131082e0291d85cacedb7769f13f7d7ef1a4de5afad57963" name="cross-binutils-ppc64le" arch="x86_64">
  <version epoch="0" ver="2.41" rel="63.el10"/>
  <changelog author="Andrea Bolognani  &lt;abologna@redhat.com&gt; - 2.41-54" date="1743595200">- Fix BuildRequires for non-gold architectures.  (RHEL-85855)
- Fix RISC-V ld testsuite failures (thanks Nick Clifton).  (RHEL-85855)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-55" date="1744718400">- Adds z17 as a cpu name for the s390x architecture.  (RHEL-87215)</changelog>
  <changelog author="Andrea Bolognani  &lt;abologna@redhat.com&gt; - 2.41-56" date="1745841600">- Add basic support for RISC-V 64-bit EFI objects.  (RHEL-88815)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-57" date="1751284800">- Add fix for CVE-2025-5244.  (RHEL-100417)
- USe correct fix for CVE-2025-5702.  (RHEL-100159)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-58" date="1754481600">- Remove workaround for CVE-2025-5702.  (RHEL-100159)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-59" date="1762257600">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-125205)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-60" date="1762776000">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-126877)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-61" date="1765886400">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-132254)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-62" date="1768824000">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-142279)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-63" date="1769428800">- Run linker tests for cross binutils.  Compare the native and cross results.  (RHEL-117111)</changelog>
</package>
<package pkgid="4f801afe673186dfda463faf04a05d26047ddc78b57326db0a2912e4e117d5f5" name="cross-binutils-s390x" arch="x86_64">
  <version epoch="0" ver="2.41" rel="63.el10"/>
  <changelog author="Andrea Bolognani  &lt;abologna@redhat.com&gt; - 2.41-54" date="1743595200">- Fix BuildRequires for non-gold architectures.  (RHEL-85855)
- Fix RISC-V ld testsuite failures (thanks Nick Clifton).  (RHEL-85855)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-55" date="1744718400">- Adds z17 as a cpu name for the s390x architecture.  (RHEL-87215)</changelog>
  <changelog author="Andrea Bolognani  &lt;abologna@redhat.com&gt; - 2.41-56" date="1745841600">- Add basic support for RISC-V 64-bit EFI objects.  (RHEL-88815)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-57" date="1751284800">- Add fix for CVE-2025-5244.  (RHEL-100417)
- USe correct fix for CVE-2025-5702.  (RHEL-100159)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-58" date="1754481600">- Remove workaround for CVE-2025-5702.  (RHEL-100159)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-59" date="1762257600">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-125205)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-60" date="1762776000">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-126877)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-61" date="1765886400">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-132254)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-62" date="1768824000">- Fix a potential illegal memory access when copying a corrupt input file.  (RHEL-142279)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.41-63" date="1769428800">- Run linker tests for cross binutils.  Compare the native and cross results.  (RHEL-117111)</changelog>
</package>
<package pkgid="7afac62c44253a6f068bc39fe2575c3155176e0109f62b20654a2a452871ae58" name="cross-gcc-aarch64" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="29c5361381160389a585c10a303af288c0d646d07c6b822912a6ba5ddd1669e5" name="cross-gcc-c++-aarch64" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="24d02bbc1ef19c6a751e530bb5bd6352f2df67ec707afe7c50b173f9118328e1" name="cross-gcc-c++-ppc64le" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="dc117823d6d77005fb0b81f387b9eb9a14636906c2e3768b532447a306e24ab6" name="cross-gcc-c++-s390x" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="a7e2a47f1c8959b94572a14684be22c68ab67868346d9f2ea425aff3bea06ae4" name="cross-gcc-plugin-aarch64" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="ac83f0ff4db3c2cf5721aded0cf6d0144fb77a17b0308c3c653f626cbc57f2db" name="cross-gcc-plugin-ppc64le" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="0d671c3c855f47ddf1a4fd5504d66ee8ccf79b02359c6d408867187e5328e9c7" name="cross-gcc-plugin-s390x" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="ae89a0a07794048cd4db3d968fcd26e547991de98cb1aee9dba5957d1ced94f6" name="cross-gcc-ppc64le" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="e7edc391162bcaf8a881ab69b77393f48c3eea629569a3cf28179a955c7723a3" name="cross-gcc-s390x" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="7bc4bbcfc0bfd1aa4017164619a8fc89e17241252359d0b2f0e35132d753979a" name="crun" arch="x86_64">
  <version epoch="0" ver="1.27" rel="2.el10_2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.20-2" date="1742299200">- fix gating.yaml
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.21-1" date="1743595200">- update to https://github.com/containers/crun/releases/tag/1.21
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.22-1" date="1751544000">- update to https://github.com/containers/crun/releases/tag/1.22
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.23-1" date="1753704000">- update to https://github.com/containers/crun/releases/tag/1.23
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.23.1-1" date="1754308800">- update to https://github.com/containers/crun/releases/tag/1.23.1
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.24-1" date="1758024000">- update to https://github.com/containers/crun/releases/tag/1.24
- Related: RHEL-111917</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.25.1-1" date="1765281600">- update to https://github.com/containers/crun/releases/tag/1.25.1
- Resolves: RHEL-116095</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.26-1" date="1768996800">- update to https://github.com/containers/crun/releases/tag/1.26
- Resolves: RHEL-114419</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.27-1" date="1774872000">- update to https://github.com/containers/crun/releases/tag/1.27
- fixes CVE-2026-30892 crun: crun: Privilege escalation due to incorrect parsing of the `--user` option [rhel-10.2]
- Resolves: RHEL-161418</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.27-2" date="1776081600">- enable krun handler for crun on RHEL 10
- Resolves: RHEL-161090</changelog>
</package>
<package pkgid="2925caffe538e7259513f59aeeb51e4989c28582cb39e66bfa569a2f3bebb83e" name="crun-krun" arch="x86_64">
  <version epoch="0" ver="1.27" rel="2.el10_2"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.20-2" date="1742299200">- fix gating.yaml
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.21-1" date="1743595200">- update to https://github.com/containers/crun/releases/tag/1.21
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.22-1" date="1751544000">- update to https://github.com/containers/crun/releases/tag/1.22
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.23-1" date="1753704000">- update to https://github.com/containers/crun/releases/tag/1.23
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.23.1-1" date="1754308800">- update to https://github.com/containers/crun/releases/tag/1.23.1
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.24-1" date="1758024000">- update to https://github.com/containers/crun/releases/tag/1.24
- Related: RHEL-111917</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.25.1-1" date="1765281600">- update to https://github.com/containers/crun/releases/tag/1.25.1
- Resolves: RHEL-116095</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.26-1" date="1768996800">- update to https://github.com/containers/crun/releases/tag/1.26
- Resolves: RHEL-114419</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.27-1" date="1774872000">- update to https://github.com/containers/crun/releases/tag/1.27
- fixes CVE-2026-30892 crun: crun: Privilege escalation due to incorrect parsing of the `--user` option [rhel-10.2]
- Resolves: RHEL-161418</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.27-2" date="1776081600">- enable krun handler for crun on RHEL 10
- Resolves: RHEL-161090</changelog>
</package>
<package pkgid="c4a8a9c965973257d6f0009369d6f9f0b23453658b1fb824f810276134ce207a" name="crypto-policies" arch="noarch">
  <version epoch="0" ver="20260216" rel="1.git0e54016.el10"/>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250424-1.git9267dee" date="1745496000">- LEGACY/DEFAULT/FUTURE: enable hybrid ML-KEM and pure ML-DSA
- drop crypto-policies-pq-preview subpackage, TEST-PQ goes into main one
- NO-PQ: introduce
- openssl: fix enabling integrity-only ciphersuites (still need min_rsa_size=0)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250424-2.git9267dee" date="1745668800">- add Provides: crypto-policies-pq-preview to ease transition
- require openssl 3.5 outright</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250602-1.gita6d4d0c" date="1748865600">- openssl: fix mistakes in integrity-only cipher definitions
- FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
- AD-SUPPORT-LEGACY: resurrect subpolicy as present in RHEL-9</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250714-1.git95bf40e" date="1752494400">-  sequoia: add sha3, x25519, ed25519, x448, ed448, but not for rpm-sequoia
-  sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...
-  sequoia: Add PQC algorithm
-  sequoia: Do not include EdDSA in FIPS policy
-  sequoia: Generate AEAD policy
-  openssl: send one PQ and one classic key_share; prioritize PQ groups
-  FIPS: deprioritize X25519-MLKEM768 over P256-MLKEM768 for openssl...
-  python, policies, tests: alias X25519-MLKEM768 to MLKEM768-X25519
-  gnutls: enable ML-DSA, for both secure-sig and secure-sig-for-cert</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250804-1.git2ca4115" date="1754308800">- nss: enable mlkem1024secp384r1, rename mlkem768secp256r1
- nss: enable ML-DSA</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250905-1.gitc7eb7b2" date="1757073600">- rpm-sequoia: enable MLDSA65-ED25519 and MLDSA87-ED448 in all policies
- rpm-sequoia: force enable all PQ algorithms for now</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 20250905-2.gitc7eb7b2" date="1758801600">- add Obsoletes: crypto-policies-pq-preview to ease transition
  Resolves: RHEL-113008</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20251126-1.git918f03d" date="1764158400">- openssl: let TLS 1.3 brainpool groups get used for key shares
- openssh: support mlkem768nistp256-sha256 and mlkem1024nistp384-sha384
- FUTURE: disable non-PQ groups, keep ML-KEM only
- sequoia: register "eddsa" as an alias to EDDSA-ED25519</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20251127-1.git27c2902" date="1764244800">- FUTURE: disable kex other than KEM-ECDH</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20260216-1.git0e54016" date="1771243200">- FIPS: allow NIST hybrid kexes for openssh
- libssh: enable NIST ML-KEM hybrids
- libssh: add mlkem768x25519-sha256</changelog>
</package>
<package pkgid="e1fdcaa6d8dfad283883441c88cae7da33a894ce5ce11eb57e6423b3812a0d5f" name="crypto-policies" arch="noarch">
  <version epoch="0" ver="20260216" rel="1.git0e54016.el10_2.2"/>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250602-1.gita6d4d0c" date="1748865600">- openssl: fix mistakes in integrity-only cipher definitions
- FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
- AD-SUPPORT-LEGACY: resurrect subpolicy as present in RHEL-9</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250714-1.git95bf40e" date="1752494400">-  sequoia: add sha3, x25519, ed25519, x448, ed448, but not for rpm-sequoia
-  sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...
-  sequoia: Add PQC algorithm
-  sequoia: Do not include EdDSA in FIPS policy
-  sequoia: Generate AEAD policy
-  openssl: send one PQ and one classic key_share; prioritize PQ groups
-  FIPS: deprioritize X25519-MLKEM768 over P256-MLKEM768 for openssl...
-  python, policies, tests: alias X25519-MLKEM768 to MLKEM768-X25519
-  gnutls: enable ML-DSA, for both secure-sig and secure-sig-for-cert</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250804-1.git2ca4115" date="1754308800">- nss: enable mlkem1024secp384r1, rename mlkem768secp256r1
- nss: enable ML-DSA</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250905-1.gitc7eb7b2" date="1757073600">- rpm-sequoia: enable MLDSA65-ED25519 and MLDSA87-ED448 in all policies
- rpm-sequoia: force enable all PQ algorithms for now</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 20250905-2.gitc7eb7b2" date="1758801600">- add Obsoletes: crypto-policies-pq-preview to ease transition
  Resolves: RHEL-113008</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20251126-1.git918f03d" date="1764158400">- openssl: let TLS 1.3 brainpool groups get used for key shares
- openssh: support mlkem768nistp256-sha256 and mlkem1024nistp384-sha384
- FUTURE: disable non-PQ groups, keep ML-KEM only
- sequoia: register "eddsa" as an alias to EDDSA-ED25519</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20251127-1.git27c2902" date="1764244800">- FUTURE: disable kex other than KEM-ECDH</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20260216-1.git0e54016" date="1771243200">- FIPS: allow NIST hybrid kexes for openssh
- libssh: enable NIST ML-KEM hybrids
- libssh: add mlkem768x25519-sha256</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20260216-1.git0e54016.1" date="1785499200">- FIPS:OSPP: disable CBC and enable TLS 1.3</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20260216-1.git0e54016.2" date="1786449600">- FIPS:OSPP: reenable non-TLS CBC</changelog>
</package>
<package pkgid="7a902aa3f50479174280f543b171a89ee02bf69d4b2fceab2d52344a59fd4e3a" name="crypto-policies-scripts" arch="noarch">
  <version epoch="0" ver="20260216" rel="1.git0e54016.el10"/>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250424-1.git9267dee" date="1745496000">- LEGACY/DEFAULT/FUTURE: enable hybrid ML-KEM and pure ML-DSA
- drop crypto-policies-pq-preview subpackage, TEST-PQ goes into main one
- NO-PQ: introduce
- openssl: fix enabling integrity-only ciphersuites (still need min_rsa_size=0)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250424-2.git9267dee" date="1745668800">- add Provides: crypto-policies-pq-preview to ease transition
- require openssl 3.5 outright</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250602-1.gita6d4d0c" date="1748865600">- openssl: fix mistakes in integrity-only cipher definitions
- FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
- AD-SUPPORT-LEGACY: resurrect subpolicy as present in RHEL-9</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250714-1.git95bf40e" date="1752494400">-  sequoia: add sha3, x25519, ed25519, x448, ed448, but not for rpm-sequoia
-  sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...
-  sequoia: Add PQC algorithm
-  sequoia: Do not include EdDSA in FIPS policy
-  sequoia: Generate AEAD policy
-  openssl: send one PQ and one classic key_share; prioritize PQ groups
-  FIPS: deprioritize X25519-MLKEM768 over P256-MLKEM768 for openssl...
-  python, policies, tests: alias X25519-MLKEM768 to MLKEM768-X25519
-  gnutls: enable ML-DSA, for both secure-sig and secure-sig-for-cert</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250804-1.git2ca4115" date="1754308800">- nss: enable mlkem1024secp384r1, rename mlkem768secp256r1
- nss: enable ML-DSA</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250905-1.gitc7eb7b2" date="1757073600">- rpm-sequoia: enable MLDSA65-ED25519 and MLDSA87-ED448 in all policies
- rpm-sequoia: force enable all PQ algorithms for now</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 20250905-2.gitc7eb7b2" date="1758801600">- add Obsoletes: crypto-policies-pq-preview to ease transition
  Resolves: RHEL-113008</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20251126-1.git918f03d" date="1764158400">- openssl: let TLS 1.3 brainpool groups get used for key shares
- openssh: support mlkem768nistp256-sha256 and mlkem1024nistp384-sha384
- FUTURE: disable non-PQ groups, keep ML-KEM only
- sequoia: register "eddsa" as an alias to EDDSA-ED25519</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20251127-1.git27c2902" date="1764244800">- FUTURE: disable kex other than KEM-ECDH</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20260216-1.git0e54016" date="1771243200">- FIPS: allow NIST hybrid kexes for openssh
- libssh: enable NIST ML-KEM hybrids
- libssh: add mlkem768x25519-sha256</changelog>
</package>
<package pkgid="9b08f571c2de907330a419b29bd1208db652dab50344084f425d5c6d860e60eb" name="crypto-policies-scripts" arch="noarch">
  <version epoch="0" ver="20260216" rel="1.git0e54016.el10_2.2"/>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250602-1.gita6d4d0c" date="1748865600">- openssl: fix mistakes in integrity-only cipher definitions
- FIPS: enable hybrid ML-KEM (TLS only) and pure ML-DSA
- AD-SUPPORT-LEGACY: resurrect subpolicy as present in RHEL-9</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250714-1.git95bf40e" date="1752494400">-  sequoia: add sha3, x25519, ed25519, x448, ed448, but not for rpm-sequoia
-  sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...
-  sequoia: Add PQC algorithm
-  sequoia: Do not include EdDSA in FIPS policy
-  sequoia: Generate AEAD policy
-  openssl: send one PQ and one classic key_share; prioritize PQ groups
-  FIPS: deprioritize X25519-MLKEM768 over P256-MLKEM768 for openssl...
-  python, policies, tests: alias X25519-MLKEM768 to MLKEM768-X25519
-  gnutls: enable ML-DSA, for both secure-sig and secure-sig-for-cert</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250804-1.git2ca4115" date="1754308800">- nss: enable mlkem1024secp384r1, rename mlkem768secp256r1
- nss: enable ML-DSA</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20250905-1.gitc7eb7b2" date="1757073600">- rpm-sequoia: enable MLDSA65-ED25519 and MLDSA87-ED448 in all policies
- rpm-sequoia: force enable all PQ algorithms for now</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 20250905-2.gitc7eb7b2" date="1758801600">- add Obsoletes: crypto-policies-pq-preview to ease transition
  Resolves: RHEL-113008</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20251126-1.git918f03d" date="1764158400">- openssl: let TLS 1.3 brainpool groups get used for key shares
- openssh: support mlkem768nistp256-sha256 and mlkem1024nistp384-sha384
- FUTURE: disable non-PQ groups, keep ML-KEM only
- sequoia: register "eddsa" as an alias to EDDSA-ED25519</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20251127-1.git27c2902" date="1764244800">- FUTURE: disable kex other than KEM-ECDH</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20260216-1.git0e54016" date="1771243200">- FIPS: allow NIST hybrid kexes for openssh
- libssh: enable NIST ML-KEM hybrids
- libssh: add mlkem768x25519-sha256</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20260216-1.git0e54016.1" date="1785499200">- FIPS:OSPP: disable CBC and enable TLS 1.3</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 20260216-1.git0e54016.2" date="1786449600">- FIPS:OSPP: reenable non-TLS CBC</changelog>
</package>
<package pkgid="1f014fc88299ac181e8e61843496dd644f7bb33490009c8884ffba69e386e06f" name="cryptsetup" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="2.el10"/>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.0-1" date="1706097600">- Update to cryptsetup 2.7.0.</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.0-2" date="1707480000">- Rebuild for OpenSSL Argon2 implementation (OpenSSL 3.2)
- patch: Do not compile unused internal argon2 implementation</changelog>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-1" date="1714478400">- Update to cryptsetup 2.7.2
- Resolves: RHEL-33395</changelog>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-2" date="1714996800">- Remove SSH token and fix tests
- Resolves: RHEL-33395</changelog>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.3-1" date="1718712000">- Update to cryptsetup 2.7.3
- Remove libssh dependency
- Resolves: RHEL-40123</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.3-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.5-1" date="1728043200">- Update to cryptsetup 2.7.5
- patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
- patch: Enable Argon2 in FIPS with openssl backend.
- Resolves: RHEL-57036 RHEL-57037 RHEL-61581</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.5-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-1" date="1756900800">- Update to cryptsetup 2.8.1
- Resolves: RHEL-96291</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-2" date="1767960000">- patch: opal: Submit PSID reset command to R/W file descriptor.
- patch: Read integrity profile info from top level device.
- patch: Fix possible use of uninitialized variable.
- patch: Reinstate pbkdf serialization flag in device activation.
- patch: Fix LUKS2 device status in inline HW mode and detached header.
- patch: Set inline integrity flag if no underlying dm-integrity device.
- patch: Fix wrong device size status reports in cryptsetup and integritysetup.
- Resolves: RHEL-122285 RHEL-125150 RHEL-125155 RHEL-125166 RHEL-132584 RHEL-140107</changelog>
</package>
<package pkgid="8ac35d8df6d80377cd6cb542e13eb148ca1898339a94625687e47d6917c23e36" name="cryptsetup-devel" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="2.el10"/>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.0-1" date="1706097600">- Update to cryptsetup 2.7.0.</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.0-2" date="1707480000">- Rebuild for OpenSSL Argon2 implementation (OpenSSL 3.2)
- patch: Do not compile unused internal argon2 implementation</changelog>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-1" date="1714478400">- Update to cryptsetup 2.7.2
- Resolves: RHEL-33395</changelog>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-2" date="1714996800">- Remove SSH token and fix tests
- Resolves: RHEL-33395</changelog>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.3-1" date="1718712000">- Update to cryptsetup 2.7.3
- Remove libssh dependency
- Resolves: RHEL-40123</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.3-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.5-1" date="1728043200">- Update to cryptsetup 2.7.5
- patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
- patch: Enable Argon2 in FIPS with openssl backend.
- Resolves: RHEL-57036 RHEL-57037 RHEL-61581</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.5-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-1" date="1756900800">- Update to cryptsetup 2.8.1
- Resolves: RHEL-96291</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-2" date="1767960000">- patch: opal: Submit PSID reset command to R/W file descriptor.
- patch: Read integrity profile info from top level device.
- patch: Fix possible use of uninitialized variable.
- patch: Reinstate pbkdf serialization flag in device activation.
- patch: Fix LUKS2 device status in inline HW mode and detached header.
- patch: Set inline integrity flag if no underlying dm-integrity device.
- patch: Fix wrong device size status reports in cryptsetup and integritysetup.
- Resolves: RHEL-122285 RHEL-125150 RHEL-125155 RHEL-125166 RHEL-132584 RHEL-140107</changelog>
</package>
<package pkgid="9f4009371d6be9f0de83a88e3bd8ec3108c39276eea929b81f8728360be2aaa8" name="cryptsetup-libs" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="2.el10"/>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.0-1" date="1706097600">- Update to cryptsetup 2.7.0.</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.0-2" date="1707480000">- Rebuild for OpenSSL Argon2 implementation (OpenSSL 3.2)
- patch: Do not compile unused internal argon2 implementation</changelog>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-1" date="1714478400">- Update to cryptsetup 2.7.2
- Resolves: RHEL-33395</changelog>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-2" date="1714996800">- Remove SSH token and fix tests
- Resolves: RHEL-33395</changelog>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.3-1" date="1718712000">- Update to cryptsetup 2.7.3
- Remove libssh dependency
- Resolves: RHEL-40123</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.3-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.5-1" date="1728043200">- Update to cryptsetup 2.7.5
- patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
- patch: Enable Argon2 in FIPS with openssl backend.
- Resolves: RHEL-57036 RHEL-57037 RHEL-61581</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.5-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-1" date="1756900800">- Update to cryptsetup 2.8.1
- Resolves: RHEL-96291</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-2" date="1767960000">- patch: opal: Submit PSID reset command to R/W file descriptor.
- patch: Read integrity profile info from top level device.
- patch: Fix possible use of uninitialized variable.
- patch: Reinstate pbkdf serialization flag in device activation.
- patch: Fix LUKS2 device status in inline HW mode and detached header.
- patch: Set inline integrity flag if no underlying dm-integrity device.
- patch: Fix wrong device size status reports in cryptsetup and integritysetup.
- Resolves: RHEL-122285 RHEL-125150 RHEL-125155 RHEL-125166 RHEL-132584 RHEL-140107</changelog>
</package>
<package pkgid="3a58059fa7d16eff6cf6739f44a37302e375f7a6512ae305474d018af9f73405" name="cscope" arch="x86_64">
  <version epoch="0" ver="15.9" rel="26.el10"/>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 15.9-21" date="1706270400">- Initial import from Fedora 40</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 15.9-22" date="1706788800">- Use proper SPDX license identifiers (RHEL-30639)</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 15.9-23" date="1711972800">- Add OSCI harness
- Add self-tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 15.9-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 15.9-25" date="1730203200">- Bump release for October 2024 mass rebuild (RHEL-64018)</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 15.9-26" date="1730376000">- Update cscope to 15.9-26 from Fedora (RHEL-65464)
- Fix signal handling at exit
- Add emacs-nw and emacs-gtk+x11 to supported emacs flavors
- Minor edits in the rpm scripts
- Make xemacs a bcond</changelog>
</package>
<package pkgid="ee941c2a729a77aa22576582f1fdebc2ad22e90a1d4aa313625f1e125629a0c5" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="107.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-100" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114545 - Update to version 4.23.4
- resolves: RHEL-132338 - Fix Time Machine backup
- resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-101" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-132975</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
</package>
<package pkgid="a03ccefc104c0f9eaddc04b08b8616890018db4f7e3ebc7fe44e40de7a55d1ff" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="109.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-108" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-109" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="d75ba5ff59d052e8bc94f081e2b716f9479f93255c42b5f46f0966b4113f4757" name="cups" arch="x86_64">
  <version epoch="1" ver="2.4.10" rel="17.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-8" date="1732536000">- RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
- RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-9" date="1733140800">- RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-10" date="1733486400">- RHEL-68415 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-11" date="1736251200">- provide a way how to opt-out from system crypto policy if needed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-12" date="1757592000">- RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-13" date="1758024000">- RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-14" date="1763467200">- RHEL-122293 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-15" date="1764244800">- RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-16" date="1765540800">- fix use-after-free reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-17" date="1773057600">- RHEL-154276 endless poll loop in http_write when POLLHUP is returned</changelog>
</package>
<package pkgid="56a18bfd5831ed4a4003bca783b3de39a66558b20ad5b47cad6d1048a34d2b59" name="cups" arch="x86_64">
  <version epoch="1" ver="2.4.10" rel="18.el10_2"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-9" date="1733140800">- RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-10" date="1733486400">- RHEL-68415 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-11" date="1736251200">- provide a way how to opt-out from system crypto policy if needed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-12" date="1757592000">- RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-13" date="1758024000">- RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-14" date="1763467200">- RHEL-122293 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-15" date="1764244800">- RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-16" date="1765540800">- fix use-after-free reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-17" date="1773057600">- RHEL-154276 endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.4.10-18" date="1782129600">- RHEL-177945 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="0fe3dfde4e155977dcf5b71a2e065e37cd3b6a2ed635e1582ff19d6e695f1d60" name="cups-browsed" arch="x86_64">
  <version epoch="1" ver="2.0.0" rel="9.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0~rc2-3" date="1693310400">- 2150035 - [abrt] cups-filters: __strlen_avx2(): cups-browsed killed by SIGSEGV</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-1" date="1696420800">- 2240317 - cups-browsed-2.0.0 is available</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-4" date="1707307200">- 2253985 - cups-browsed crashes when remote CUPS queue found by DNS-SD is not able to response on IPP Get-Printer-Attributes
- fix several issues reported by openscanhub</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-6" date="1722945600">- RHEL-51349 Cups browsing with 'Autoclustering on' cannot find printer clusters for HA due incorrect orientation-requested-default</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-7" date="1728993600">- CVE-2024-47176 cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source
- RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-9" date="1744632000">- RHEL-87180 RFE: Synchronize server defaults with clients [rhel-10]</changelog>
</package>
<package pkgid="d1869058bf598193e6cbc7c51684a6e0319183e94b9649a6b48a9f91db0cbef1" name="cups-client" arch="x86_64">
  <version epoch="1" ver="2.4.10" rel="17.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-8" date="1732536000">- RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
- RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-9" date="1733140800">- RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-10" date="1733486400">- RHEL-68415 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-11" date="1736251200">- provide a way how to opt-out from system crypto policy if needed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-12" date="1757592000">- RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-13" date="1758024000">- RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-14" date="1763467200">- RHEL-122293 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-15" date="1764244800">- RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-16" date="1765540800">- fix use-after-free reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-17" date="1773057600">- RHEL-154276 endless poll loop in http_write when POLLHUP is returned</changelog>
</package>
<package pkgid="ebdc701487efc91327045255d7a49c6bf3c00b02cba7d79e0b36abc469cb8e34" name="cups-client" arch="x86_64">
  <version epoch="1" ver="2.4.10" rel="18.el10_2"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-9" date="1733140800">- RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-10" date="1733486400">- RHEL-68415 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-11" date="1736251200">- provide a way how to opt-out from system crypto policy if needed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-12" date="1757592000">- RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-13" date="1758024000">- RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-14" date="1763467200">- RHEL-122293 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-15" date="1764244800">- RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-16" date="1765540800">- fix use-after-free reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-17" date="1773057600">- RHEL-154276 endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.4.10-18" date="1782129600">- RHEL-177945 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="7960f66a5cf28025f5738b4f0ed7ecc195a9a3147c0c5548d5b7f0c5f3246f6b" name="cups-devel" arch="x86_64">
  <version epoch="1" ver="2.4.10" rel="17.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-8" date="1732536000">- RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
- RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-9" date="1733140800">- RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-10" date="1733486400">- RHEL-68415 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-11" date="1736251200">- provide a way how to opt-out from system crypto policy if needed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-12" date="1757592000">- RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-13" date="1758024000">- RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-14" date="1763467200">- RHEL-122293 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-15" date="1764244800">- RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-16" date="1765540800">- fix use-after-free reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-17" date="1773057600">- RHEL-154276 endless poll loop in http_write when POLLHUP is returned</changelog>
</package>
<package pkgid="a4a4270d1608cc12e86ec2ea089dcbe57d75571e8622fbd56ad211543a0de0d8" name="cups-devel" arch="x86_64">
  <version epoch="1" ver="2.4.10" rel="18.el10_2"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-9" date="1733140800">- RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-10" date="1733486400">- RHEL-68415 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-11" date="1736251200">- provide a way how to opt-out from system crypto policy if needed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-12" date="1757592000">- RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-13" date="1758024000">- RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-14" date="1763467200">- RHEL-122293 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-15" date="1764244800">- RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-16" date="1765540800">- fix use-after-free reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-17" date="1773057600">- RHEL-154276 endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.4.10-18" date="1782129600">- RHEL-177945 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="f2a9903af4766e96c4ef665b258b9e515c6314fa4d838bd9a618f70cd3ff2c90" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="2.4.10" rel="17.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-8" date="1732536000">- RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
- RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-9" date="1733140800">- RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-10" date="1733486400">- RHEL-68415 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-11" date="1736251200">- provide a way how to opt-out from system crypto policy if needed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-12" date="1757592000">- RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-13" date="1758024000">- RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-14" date="1763467200">- RHEL-122293 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-15" date="1764244800">- RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-16" date="1765540800">- fix use-after-free reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-17" date="1773057600">- RHEL-154276 endless poll loop in http_write when POLLHUP is returned</changelog>
</package>
<package pkgid="502539c35ad86835cc6354ba50bcad498d1e2c118e9cea93de0264a402e6d4b7" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="2.4.10" rel="18.el10_2"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-9" date="1733140800">- RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-10" date="1733486400">- RHEL-68415 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-11" date="1736251200">- provide a way how to opt-out from system crypto policy if needed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-12" date="1757592000">- RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-13" date="1758024000">- RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-14" date="1763467200">- RHEL-122293 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-15" date="1764244800">- RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-16" date="1765540800">- fix use-after-free reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-17" date="1773057600">- RHEL-154276 endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.4.10-18" date="1782129600">- RHEL-177945 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="70323842db516941c7935e73dc8f571440c3e51ce8e109a11bf5916eebb3bd13" name="cups-filters" arch="x86_64">
  <version epoch="1" ver="2.0.0" rel="11.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-2" date="1702987200">- use exact foomatic-rip filter to comply with LSB</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-3" date="1702987201">- introduce cups-filters-driverless to strip avahi dependency for filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-4" date="1702987202">- make driverless subpackage require avahi and ipptool - they don't 
  work without them</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.0-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-8" date="1721390400">- RHEL-49766 Fix missing Epoch in conflicts reported by rpminspect</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-10" date="1753272000">- RHEL-83060 lpinfo -m doesn't show textonly driver</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-11" date="1759233600">- RHEL-93944 RFE: Add Allow list for FoomaticRIPCommandLine PPD values [rhel-10]</changelog>
</package>
<package pkgid="72cb898f1f4251c8e5e0b6d7b8c261253ec83ad0b0cefc7848ad9e0130d2e483" name="cups-filters-driverless" arch="x86_64">
  <version epoch="1" ver="2.0.0" rel="11.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-2" date="1702987200">- use exact foomatic-rip filter to comply with LSB</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-3" date="1702987201">- introduce cups-filters-driverless to strip avahi dependency for filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-4" date="1702987202">- make driverless subpackage require avahi and ipptool - they don't 
  work without them</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.0-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-8" date="1721390400">- RHEL-49766 Fix missing Epoch in conflicts reported by rpminspect</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-10" date="1753272000">- RHEL-83060 lpinfo -m doesn't show textonly driver</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-11" date="1759233600">- RHEL-93944 RFE: Add Allow list for FoomaticRIPCommandLine PPD values [rhel-10]</changelog>
</package>
<package pkgid="f55a158c95c68ee2e31e9390821edcbd220ceeb3db1fd9e7b2c09d7d60056869" name="cups-ipptool" arch="x86_64">
  <version epoch="1" ver="2.4.10" rel="17.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-8" date="1732536000">- RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
- RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-9" date="1733140800">- RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-10" date="1733486400">- RHEL-68415 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-11" date="1736251200">- provide a way how to opt-out from system crypto policy if needed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-12" date="1757592000">- RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-13" date="1758024000">- RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-14" date="1763467200">- RHEL-122293 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-15" date="1764244800">- RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-16" date="1765540800">- fix use-after-free reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-17" date="1773057600">- RHEL-154276 endless poll loop in http_write when POLLHUP is returned</changelog>
</package>
<package pkgid="ca4482373e616690979507bc1f817b760aca93f4283ad3128db89f6ca6552f32" name="cups-ipptool" arch="x86_64">
  <version epoch="1" ver="2.4.10" rel="18.el10_2"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-9" date="1733140800">- RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-10" date="1733486400">- RHEL-68415 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-11" date="1736251200">- provide a way how to opt-out from system crypto policy if needed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-12" date="1757592000">- RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-13" date="1758024000">- RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-14" date="1763467200">- RHEL-122293 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-15" date="1764244800">- RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-16" date="1765540800">- fix use-after-free reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-17" date="1773057600">- RHEL-154276 endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.4.10-18" date="1782129600">- RHEL-177945 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="7443fb80638d90cd1453b5b2096b8adfff959360e65ca42f43342981e0e7ddee" name="cups-libs" arch="x86_64">
  <version epoch="1" ver="2.4.10" rel="17.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-8" date="1732536000">- RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
- RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-9" date="1733140800">- RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-10" date="1733486400">- RHEL-68415 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-11" date="1736251200">- provide a way how to opt-out from system crypto policy if needed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-12" date="1757592000">- RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-13" date="1758024000">- RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-14" date="1763467200">- RHEL-122293 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-15" date="1764244800">- RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-16" date="1765540800">- fix use-after-free reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-17" date="1773057600">- RHEL-154276 endless poll loop in http_write when POLLHUP is returned</changelog>
</package>
<package pkgid="beba7594f932a1285ed5b0b67af21dfea144465bf77c6fc2e1d76798713bfdf0" name="cups-libs" arch="x86_64">
  <version epoch="1" ver="2.4.10" rel="18.el10_2"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-9" date="1733140800">- RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-10" date="1733486400">- RHEL-68415 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-11" date="1736251200">- provide a way how to opt-out from system crypto policy if needed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-12" date="1757592000">- RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-13" date="1758024000">- RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-14" date="1763467200">- RHEL-122293 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-15" date="1764244800">- RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-16" date="1765540800">- fix use-after-free reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-17" date="1773057600">- RHEL-154276 endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.4.10-18" date="1782129600">- RHEL-177945 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="c817e94991f126cc860b6f3d2d6d6b3ec1529a100463b7561eda3c6452c2ee6c" name="cups-lpd" arch="x86_64">
  <version epoch="1" ver="2.4.10" rel="17.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-8" date="1732536000">- RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
- RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-9" date="1733140800">- RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-10" date="1733486400">- RHEL-68415 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-11" date="1736251200">- provide a way how to opt-out from system crypto policy if needed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-12" date="1757592000">- RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-13" date="1758024000">- RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-14" date="1763467200">- RHEL-122293 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-15" date="1764244800">- RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-16" date="1765540800">- fix use-after-free reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-17" date="1773057600">- RHEL-154276 endless poll loop in http_write when POLLHUP is returned</changelog>
</package>
<package pkgid="0a3a072a083c86b595dbb8b390ecebdda626a8face34e1f0f293c2afa277b715" name="cups-lpd" arch="x86_64">
  <version epoch="1" ver="2.4.10" rel="18.el10_2"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-9" date="1733140800">- RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-10" date="1733486400">- RHEL-68415 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-11" date="1736251200">- provide a way how to opt-out from system crypto policy if needed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-12" date="1757592000">- RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-13" date="1758024000">- RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-14" date="1763467200">- RHEL-122293 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-15" date="1764244800">- RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-16" date="1765540800">- fix use-after-free reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-17" date="1773057600">- RHEL-154276 endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.4.10-18" date="1782129600">- RHEL-177945 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="636fee008f3a0a82090c43f494b055ebcea43b59a723d3e833bfca79556932cd" name="cups-pk-helper" arch="x86_64">
  <version epoch="0" ver="0.2.7" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.7-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.2.7-3" date="1680609600">- Update dependencies</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.7-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.7-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.7-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.2.7-7" date="1707220800">- Migrated to SPDX license</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.7-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.7-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5430b2f65b1f9ab6ee78448155b04d495f2bf3bef3b2ef73ddcc3932731b94b7" name="cups-printerapp" arch="x86_64">
  <version epoch="1" ver="2.4.10" rel="17.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-8" date="1732536000">- RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
- RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-9" date="1733140800">- RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-10" date="1733486400">- RHEL-68415 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-11" date="1736251200">- provide a way how to opt-out from system crypto policy if needed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-12" date="1757592000">- RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-13" date="1758024000">- RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-14" date="1763467200">- RHEL-122293 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-15" date="1764244800">- RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-16" date="1765540800">- fix use-after-free reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-17" date="1773057600">- RHEL-154276 endless poll loop in http_write when POLLHUP is returned</changelog>
</package>
<package pkgid="d465aec09a789fe3ef434d00fdccb26698eee7ba0007a7ccabd4fddd6ed6d442" name="cups-printerapp" arch="x86_64">
  <version epoch="1" ver="2.4.10" rel="18.el10_2"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-9" date="1733140800">- RHEL-69638 IPP Everywhere permanent queue is not removed if PPD generation fails</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-10" date="1733486400">- RHEL-68415 Inability to disable weak ciphers in CUPS configuration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-11" date="1736251200">- provide a way how to opt-out from system crypto policy if needed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-12" date="1757592000">- RHEL-112419 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
- RHEL-113073 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-13" date="1758024000">- RHEL-108945 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-14" date="1763467200">- RHEL-122293 [image-mode] Missing /var/log/cups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-15" date="1764244800">- RHEL-129723 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
- RHEL-129716 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-16" date="1765540800">- fix use-after-free reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.4.10-17" date="1773057600">- RHEL-154276 endless poll loop in http_write when POLLHUP is returned</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.4.10-18" date="1782129600">- RHEL-177945 CVE-2026-34980 cups: control character injection in option values</changelog>
</package>
<package pkgid="028c7515501e4267bc67267e0514b32aa54bc0f876be39af15024b789c7a9899" name="curl" arch="x86_64">
  <version epoch="0" ver="8.12.1" rel="4.el10"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-1" date="1722427200">- new upstream release (RHEL-50806)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-2" date="1722600000">- add gating configuration (RHEL-52103)
- sigpipe: init the struct so that first apply ignores (RHEL-53327)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-3" date="1722600001">- fix libcurl and libcurl-minimal conflict in test plan (RHEL-52103)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-4" date="1724068800">- correct indentation in test plan</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.9.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-6" date="1730808000">- use tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-1" date="1742385600">- new upstream release (RHEL-84132)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-2" date="1744718400">- revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
  (temporary revert to workaround another issue RHEL-85608)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-3" date="1760961600">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121672</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4" date="1763380800">- openssl: respect system crypto policy for TLS max version (RHEL-128916)</changelog>
</package>
<package pkgid="428d261a16a4b8d0737744b69d4db942023215fe0b82939217192d7c1b21db9e" name="curl" arch="x86_64">
  <version epoch="0" ver="8.12.1" rel="4.el10_2.4"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.9.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-6" date="1730808000">- use tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-1" date="1742385600">- new upstream release (RHEL-84132)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-2" date="1744718400">- revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
  (temporary revert to workaround another issue RHEL-85608)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-3" date="1760961600">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121672</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4" date="1763380800">- openssl: respect system crypto policy for TLS max version (RHEL-128916)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4.1" date="1776686400">- openssl: fix CA cache reuse with CURLSSLOPT_NO_PARTIALCHAIN (CVE-2025-14819)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4.2" date="1783944000">- fix SSH host key mismatch on type difference (CVE-2026-9547)
- fix schemeless URL handling with --proto-default (CVE-2026-12064)
- fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4.el10_2.3" date="1784721600">- fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965)
- fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783)
- fix proxy connection reuse with wrong credentials (CVE-2026-3784)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 8.12.1-4.4" date="1785326400">- fix proxy environment variable change detection (CVE-2026-8927)</changelog>
</package>
<package pkgid="343474f62f636cb0d3d3c2bc433470ad71812b2e3937fa2f507021c393f2e418" name="cvt" arch="x86_64">
  <version epoch="0" ver="0.1.2" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.2-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 0.1.2-8" date="1719835200">- Fix explicit package version requirement (RHEL-45635).</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4de36ecc5dcf04dfaf3593fbbb22dc10e4fd4a620a8bb8c3baa12f02c733bcf5" name="cxl-cli" arch="x86_64">
  <version epoch="0" ver="82" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 78-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 78-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 78-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 80-1" date="1729080000">- Update to upstream v80.
- Resolves: RHEL-33029</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 80-2" date="1729512000">- Declare explicit version dependencies for daxctl, cxl-cli and cxl-libs.
- Related: RHEL-33029</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 80-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 80-4" date="1753185600">- Fix listing of region capabilities (Jeff Moyer)
- Remove orphaned patch file (Jeff Moyer)
- Resolves: RHEL-80436</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-1" date="1756209600">- Rebase to upstream v82
- Resolves: RHEL-99217</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-2" date="1756209601">- bump release for rebuild to re-run tests.
- Related: RHEL-99217</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-3" date="1756296000">- Pull in a fix to the test harness
- Resolves: RHEL-98531</changelog>
</package>
<package pkgid="19db159ab0b1a5d8a11e296bdccc5ffa2a5b2f454d44186f06db181ef8f6dada" name="cxl-devel" arch="x86_64">
  <version epoch="0" ver="82" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 78-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 78-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 78-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 80-1" date="1729080000">- Update to upstream v80.
- Resolves: RHEL-33029</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 80-2" date="1729512000">- Declare explicit version dependencies for daxctl, cxl-cli and cxl-libs.
- Related: RHEL-33029</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 80-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 80-4" date="1753185600">- Fix listing of region capabilities (Jeff Moyer)
- Remove orphaned patch file (Jeff Moyer)
- Resolves: RHEL-80436</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-1" date="1756209600">- Rebase to upstream v82
- Resolves: RHEL-99217</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-2" date="1756209601">- bump release for rebuild to re-run tests.
- Related: RHEL-99217</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-3" date="1756296000">- Pull in a fix to the test harness
- Resolves: RHEL-98531</changelog>
</package>
<package pkgid="be89ab2e810793e49acf946dfb3e83f38f4a0daff80c1a2f7c7e108481354207" name="cxl-libs" arch="x86_64">
  <version epoch="0" ver="82" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 78-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 78-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 78-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 80-1" date="1729080000">- Update to upstream v80.
- Resolves: RHEL-33029</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 80-2" date="1729512000">- Declare explicit version dependencies for daxctl, cxl-cli and cxl-libs.
- Related: RHEL-33029</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 80-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 80-4" date="1753185600">- Fix listing of region capabilities (Jeff Moyer)
- Remove orphaned patch file (Jeff Moyer)
- Resolves: RHEL-80436</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-1" date="1756209600">- Rebase to upstream v82
- Resolves: RHEL-99217</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-2" date="1756209601">- bump release for rebuild to re-run tests.
- Related: RHEL-99217</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-3" date="1756296000">- Pull in a fix to the test harness
- Resolves: RHEL-98531</changelog>
</package>
<package pkgid="0fc8663bc3d0045e9a540d6b62c7f687c617748ef36d3ab8ce870e2894d5194e" name="cyrus-imapd" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="10.el10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-1" date="1717588800">- Fix CVE-2024-34055
- Fix wrong symlinks to imtest utilities
- Convert to %autorelease and %autochangelog</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-2" date="1718020800">- Cassandane: do not depend on imaptest, clean up BuildRequires
- Re-enable LTO</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 3.8.3-3" date="1718193600">- Update of fmf plans and gating for c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.3-5" date="1723118400">- Bump release for Aug 2024 perl mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.3-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 3.8.3-7" date="1736942400">- update the default cyrus.conf to enable idled Resolves: RHEL-61130</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 3.8.3-8" date="1754913600">- Update location of fmf plans</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-9" date="1764936000">- Remove sscg option --package from cyrus-imapd-init.service</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-10" date="1765540800">- Create directory structure under /var using tmpfiles.d</changelog>
</package>
<package pkgid="f4adb617a59b4b3d5d5ded49c80decb4b9c706d22a24405fc5a0b6ababa84fa5" name="cyrus-imapd-devel" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="10.el10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-1" date="1717588800">- Fix CVE-2024-34055
- Fix wrong symlinks to imtest utilities
- Convert to %autorelease and %autochangelog</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-2" date="1718020800">- Cassandane: do not depend on imaptest, clean up BuildRequires
- Re-enable LTO</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 3.8.3-3" date="1718193600">- Update of fmf plans and gating for c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.3-5" date="1723118400">- Bump release for Aug 2024 perl mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.3-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 3.8.3-7" date="1736942400">- update the default cyrus.conf to enable idled Resolves: RHEL-61130</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 3.8.3-8" date="1754913600">- Update location of fmf plans</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-9" date="1764936000">- Remove sscg option --package from cyrus-imapd-init.service</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-10" date="1765540800">- Create directory structure under /var using tmpfiles.d</changelog>
</package>
<package pkgid="c5279aef405c908f2b3227e66329ba61461632ca64812c83311ad409c86dbd58" name="cyrus-imapd-doc-extra" arch="noarch">
  <version epoch="0" ver="3.8.3" rel="10.el10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-1" date="1717588800">- Fix CVE-2024-34055
- Fix wrong symlinks to imtest utilities
- Convert to %autorelease and %autochangelog</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-2" date="1718020800">- Cassandane: do not depend on imaptest, clean up BuildRequires
- Re-enable LTO</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 3.8.3-3" date="1718193600">- Update of fmf plans and gating for c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.3-5" date="1723118400">- Bump release for Aug 2024 perl mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.3-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 3.8.3-7" date="1736942400">- update the default cyrus.conf to enable idled Resolves: RHEL-61130</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 3.8.3-8" date="1754913600">- Update location of fmf plans</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-9" date="1764936000">- Remove sscg option --package from cyrus-imapd-init.service</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-10" date="1765540800">- Create directory structure under /var using tmpfiles.d</changelog>
</package>
<package pkgid="5167276d5d64a807dea9e2199d91c12ed0bd93ec2ca09b6478fe7117d5073b32" name="cyrus-imapd-libs" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="10.el10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-1" date="1717588800">- Fix CVE-2024-34055
- Fix wrong symlinks to imtest utilities
- Convert to %autorelease and %autochangelog</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-2" date="1718020800">- Cassandane: do not depend on imaptest, clean up BuildRequires
- Re-enable LTO</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 3.8.3-3" date="1718193600">- Update of fmf plans and gating for c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.3-5" date="1723118400">- Bump release for Aug 2024 perl mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.3-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 3.8.3-7" date="1736942400">- update the default cyrus.conf to enable idled Resolves: RHEL-61130</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 3.8.3-8" date="1754913600">- Update location of fmf plans</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-9" date="1764936000">- Remove sscg option --package from cyrus-imapd-init.service</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-10" date="1765540800">- Create directory structure under /var using tmpfiles.d</changelog>
</package>
<package pkgid="4433764f7f9b64e754ff7a21f2d13220941fcc6d349404d4406d464fc168cfbf" name="cyrus-imapd-utils" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="10.el10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-1" date="1717588800">- Fix CVE-2024-34055
- Fix wrong symlinks to imtest utilities
- Convert to %autorelease and %autochangelog</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-2" date="1718020800">- Cassandane: do not depend on imaptest, clean up BuildRequires
- Re-enable LTO</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 3.8.3-3" date="1718193600">- Update of fmf plans and gating for c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.3-5" date="1723118400">- Bump release for Aug 2024 perl mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.3-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 3.8.3-7" date="1736942400">- update the default cyrus.conf to enable idled Resolves: RHEL-61130</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 3.8.3-8" date="1754913600">- Update location of fmf plans</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-9" date="1764936000">- Remove sscg option --package from cyrus-imapd-init.service</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-10" date="1765540800">- Create directory structure under /var using tmpfiles.d</changelog>
</package>
<package pkgid="93d2360aeccfd36d50b9e6c83bc46fcdf88702b5c1912cc039e3c319763a95a2" name="cyrus-imapd-virusscan" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="10.el10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-1" date="1717588800">- Fix CVE-2024-34055
- Fix wrong symlinks to imtest utilities
- Convert to %autorelease and %autochangelog</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-2" date="1718020800">- Cassandane: do not depend on imaptest, clean up BuildRequires
- Re-enable LTO</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 3.8.3-3" date="1718193600">- Update of fmf plans and gating for c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.3-5" date="1723118400">- Bump release for Aug 2024 perl mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.8.3-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 3.8.3-7" date="1736942400">- update the default cyrus.conf to enable idled Resolves: RHEL-61130</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 3.8.3-8" date="1754913600">- Update location of fmf plans</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-9" date="1764936000">- Remove sscg option --package from cyrus-imapd-init.service</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.8.3-10" date="1765540800">- Create directory structure under /var using tmpfiles.d</changelog>
</package>
<package pkgid="232670e2e533c47351639a8e714ecf62a0f9b3b8ec0773a1ae114a30d013b762" name="cyrus-sasl" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="29.el10"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-20" date="1718107200">- Fix some issues uncovered by a static analyzer</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
</package>
<package pkgid="abc5db94a3478f287b52ba3408c34da02514ba4575cf5f9f31d40a079e2be14f" name="cyrus-sasl" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="30.el10_2"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-30" date="1775044800">- Remove the sanity-ldapdb-plugin test</changelog>
</package>
<package pkgid="2ba1fe4b2be000e3b35177bde45d3848b634418a0ef6cb58e3ce6a92b667c56b" name="cyrus-sasl-devel" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="29.el10"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-20" date="1718107200">- Fix some issues uncovered by a static analyzer</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
</package>
<package pkgid="d97a527e2d7894d5a2e1f99d560cadc3800b9948ce0ce4bda66fb15d04515e6a" name="cyrus-sasl-devel" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="30.el10_2"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-30" date="1775044800">- Remove the sanity-ldapdb-plugin test</changelog>
</package>
<package pkgid="af2da045ca8dc2fa2c0a6e6795b19e542a1c621fe35cebc200a018276fff4cbe" name="cyrus-sasl-gs2" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="29.el10"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-20" date="1718107200">- Fix some issues uncovered by a static analyzer</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
</package>
<package pkgid="32dfc53d7897ec10234b76c6cec819938534db62c17160f54fb46b68999a3663" name="cyrus-sasl-gs2" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="30.el10_2"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-30" date="1775044800">- Remove the sanity-ldapdb-plugin test</changelog>
</package>
<package pkgid="6ff501a17f64733a54e9c2f96e492bc7f0fe6af5a2159f30481fb43c0b799f49" name="cyrus-sasl-gssapi" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="29.el10"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-20" date="1718107200">- Fix some issues uncovered by a static analyzer</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
</package>
<package pkgid="8208e39e3c7e85c5ca7cc532e96954c2c3f60313f35940db8a6a9bdb62f960bc" name="cyrus-sasl-gssapi" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="30.el10_2"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-30" date="1775044800">- Remove the sanity-ldapdb-plugin test</changelog>
</package>
<package pkgid="e809c9e71e3f327ad7e9affca220205131c7277ecca4f9a9e571eb48ef36aa10" name="cyrus-sasl-ldap" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="29.el10"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-20" date="1718107200">- Fix some issues uncovered by a static analyzer</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
</package>
<package pkgid="03bfd1fc15c53f6ab40b18113f6416acf042733ae80d0b3cce5c82825e765fff" name="cyrus-sasl-ldap" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="30.el10_2"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-30" date="1775044800">- Remove the sanity-ldapdb-plugin test</changelog>
</package>
<package pkgid="b0d3e5d17ed1ef4b4e789e981218887106cbdb9029c1950f4a7528c1ad76f85e" name="cyrus-sasl-lib" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="29.el10"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-20" date="1718107200">- Fix some issues uncovered by a static analyzer</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
</package>
<package pkgid="2c60ba981d7c6c0d49c46c13ec0c59bafceb19ad8882249a64b67e25efeae8b0" name="cyrus-sasl-lib" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="30.el10_2"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-30" date="1775044800">- Remove the sanity-ldapdb-plugin test</changelog>
</package>
<package pkgid="f98b9cfcca4d13c790a5d2e3d1cf9b32557316d3e443aebda4dd5fcf3b12caa8" name="cyrus-sasl-md5" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="29.el10"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-20" date="1718107200">- Fix some issues uncovered by a static analyzer</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
</package>
<package pkgid="20ebd28123a2e96aca469de2868414c6c9a2704f922e086ee2139200b8a1a35f" name="cyrus-sasl-md5" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="30.el10_2"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-30" date="1775044800">- Remove the sanity-ldapdb-plugin test</changelog>
</package>
<package pkgid="636ee9c498d3096a41a7b6762ec5b64e1a7a9ad466df1b0a3f5cf498c88f6c16" name="cyrus-sasl-plain" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="29.el10"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-20" date="1718107200">- Fix some issues uncovered by a static analyzer</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
</package>
<package pkgid="b516077babcc5ab9d3b0215fe50abda9ef0933c274878e2f17d1fbb8655e946d" name="cyrus-sasl-plain" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="30.el10_2"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-30" date="1775044800">- Remove the sanity-ldapdb-plugin test</changelog>
</package>
<package pkgid="6b0424e4bda5fb3321daa9b00e170b88461c0dcf6bef11ac23cfa2b5277c6d73" name="cyrus-sasl-scram" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="29.el10"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-20" date="1718107200">- Fix some issues uncovered by a static analyzer</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
</package>
<package pkgid="c2a93d32509b4641d7546045a2177831178f0cae902f15b1aaa5a6fad94e4710" name="cyrus-sasl-scram" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="30.el10_2"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-30" date="1775044800">- Remove the sanity-ldapdb-plugin test</changelog>
</package>
<package pkgid="013df4599f6f4234f13afe1cce082cc90c8c62411c9d94a6469d0a59706d90ea" name="cyrus-sasl-sql" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="29.el10"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-20" date="1718107200">- Fix some issues uncovered by a static analyzer</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
</package>
<package pkgid="a83fea6790f621750328b10f78ce7ea180e62139a1a589958bcd7f2da0fe0216" name="cyrus-sasl-sql" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="30.el10_2"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 2.1.28-21" date="1718798400">- Remove BerkeleyDB converting tool. It was intended to be removed in
  RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
  Resolves: RHEL-43136</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-22" date="1718884800">- Update license to BSD-Attribution-HPND-disclaimer</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 2.1.28-24" date="1719403200">- Added gating.yaml for cyrus-sasl</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.28-25" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-26" date="1733140800">- Switch gating to depend on idm-ci.brew-build.tier1.functional</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-27" date="1733313600">- Drop the baseos-ci gating test. It is deprecated</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-28" date="1743422400">- Remove debug log spam in digestmd5 plugin</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-29" date="1751544000">- Add missing definition for gdbm_db_file</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 2.1.28-30" date="1775044800">- Remove the sanity-ldapdb-plugin test</changelog>
</package>
<package pkgid="271468690de2937e83deb247a6ffd6a1e91370230becfe5dcb6d7b449e5bb82e" name="daxctl" arch="x86_64">
  <version epoch="0" ver="82" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 78-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 78-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 78-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 80-1" date="1729080000">- Update to upstream v80.
- Resolves: RHEL-33029</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 80-2" date="1729512000">- Declare explicit version dependencies for daxctl, cxl-cli and cxl-libs.
- Related: RHEL-33029</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 80-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 80-4" date="1753185600">- Fix listing of region capabilities (Jeff Moyer)
- Remove orphaned patch file (Jeff Moyer)
- Resolves: RHEL-80436</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-1" date="1756209600">- Rebase to upstream v82
- Resolves: RHEL-99217</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-2" date="1756209601">- bump release for rebuild to re-run tests.
- Related: RHEL-99217</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-3" date="1756296000">- Pull in a fix to the test harness
- Resolves: RHEL-98531</changelog>
</package>
<package pkgid="b2598c4f687dfc3d94839d0bb169012a31fc6f45ff315e5f0bf58274a81934d3" name="daxctl-devel" arch="x86_64">
  <version epoch="0" ver="82" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 78-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 78-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 78-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 80-1" date="1729080000">- Update to upstream v80.
- Resolves: RHEL-33029</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 80-2" date="1729512000">- Declare explicit version dependencies for daxctl, cxl-cli and cxl-libs.
- Related: RHEL-33029</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 80-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 80-4" date="1753185600">- Fix listing of region capabilities (Jeff Moyer)
- Remove orphaned patch file (Jeff Moyer)
- Resolves: RHEL-80436</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-1" date="1756209600">- Rebase to upstream v82
- Resolves: RHEL-99217</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-2" date="1756209601">- bump release for rebuild to re-run tests.
- Related: RHEL-99217</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-3" date="1756296000">- Pull in a fix to the test harness
- Resolves: RHEL-98531</changelog>
</package>
<package pkgid="b20f4aaea62c2bc848bf6d78b8899b01725de8f7a4f662f654b1b69cfd63ccf0" name="daxctl-libs" arch="x86_64">
  <version epoch="0" ver="82" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 78-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 78-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 78-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 80-1" date="1729080000">- Update to upstream v80.
- Resolves: RHEL-33029</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 80-2" date="1729512000">- Declare explicit version dependencies for daxctl, cxl-cli and cxl-libs.
- Related: RHEL-33029</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 80-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 80-4" date="1753185600">- Fix listing of region capabilities (Jeff Moyer)
- Remove orphaned patch file (Jeff Moyer)
- Resolves: RHEL-80436</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-1" date="1756209600">- Rebase to upstream v82
- Resolves: RHEL-99217</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-2" date="1756209601">- bump release for rebuild to re-run tests.
- Related: RHEL-99217</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 82-3" date="1756296000">- Pull in a fix to the test harness
- Resolves: RHEL-98531</changelog>
</package>
<package pkgid="a861c84a89f0d308099759844ac0e55656501cd84d6b6ece6708ffc21eadd567" name="dblatex" arch="noarch">
  <version epoch="0" ver="0.3.12" rel="22.el10"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.3.12-10" date="1680004800">- Fix deprecated patch rpm macro</changelog>
  <changelog author="Michael J Gruber &lt;mjg@fedoraproject.org&gt; - 0.3.12-11" date="1680091200">- Adjust patch macro usage to rpm &gt;= 4.18 in a cleaner way</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.3.12-12" date="1686052800">- Remove obsolete texlive-collection-htmlxml dependency</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 0.3.12-13" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Michael J Gruber &lt;mjg@fedoraproject.org&gt; - 0.3.12-14" date="1688644800">- Fix Py 3.12 imports (rhbz#2220636)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.12-15" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.12-16" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.12-20" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.12-21" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.12-22" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="857444ebab5068eaad2a7df8d173e6d70b75be6f676a4b13be447986e9416498" name="dbus" arch="x86_64">
  <version epoch="1" ver="1.14.10" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.6-1" date="1675857600">- Update to 1.14.6</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.8-1" date="1686052800">- Update to 1.14.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.8-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.10-1" date="1693569600">- Update to 1.14.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.10-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.10-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.14.10-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.14.10-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="40c144851ed948a735aff0260bcf2d460a1db6b72af423e102727e576fd8cfa2" name="dbus-broker" arch="x86_64">
  <version epoch="0" ver="36" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 35-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 35-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 35-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 35-6" date="1720008000">- Fix the license string (case sensitivity) in the spec file</changelog>
  <changelog author="Frantisek Sumsal &lt;fsumsal@redhat.com&gt; - 35-7" date="1726833600">- Add gating configuration for C10S/RHEL10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 35-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 36-1" date="1737460800">- Update to 36 upstream release</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 36-2" date="1753876800">- Add patch to fix sockopt in kernel 6.16</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 36-3" date="1755172800">- Add sysusers.d config file to allow rpm to create users/groups
  automatically</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 36-4" date="1755172801">- Change dbus user GECOS to avoid warning</changelog>
</package>
<package pkgid="0f5b3005efceee6b35c1ec939b6ab7e6cd49a85a5ef972ab6e65d6c6da95648f" name="dbus-broker" arch="x86_64">
  <version epoch="0" ver="36" rel="5.el10_2"/>
  <changelog author="Frantisek Sumsal &lt;fsumsal@redhat.com&gt; - 35-7" date="1726833600">- Add gating configuration for C10S/RHEL10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 35-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 36-1" date="1737460800">- Update to 36 upstream release</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 36-2" date="1753876800">- Add patch to fix sockopt in kernel 6.16</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 36-3" date="1755172800">- Add sysusers.d config file to allow rpm to create users/groups
  automatically</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 36-4" date="1755172801">- Change dbus user GECOS to avoid warning</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 36-5" date="1786449600">- Fix session bus denial of service via EMFILE during peer setup.</changelog>
</package>
<package pkgid="84ac15c6e63a448fc1d81b64649312cd6b35c4f8aef806b7f24bc9334ccf4362" name="dbus-common" arch="noarch">
  <version epoch="1" ver="1.14.10" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.6-1" date="1675857600">- Update to 1.14.6</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.8-1" date="1686052800">- Update to 1.14.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.8-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.10-1" date="1693569600">- Update to 1.14.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.10-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.10-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.14.10-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.14.10-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0b1feedee5281ed9bc6321de539b19b8c6d53384b4e49c0621c872bd7f3c7fdf" name="dbus-daemon" arch="x86_64">
  <version epoch="1" ver="1.14.10" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.6-1" date="1675857600">- Update to 1.14.6</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.8-1" date="1686052800">- Update to 1.14.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.8-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.10-1" date="1693569600">- Update to 1.14.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.10-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.10-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.14.10-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.14.10-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1552f015c2ffe39c7d3ea854cd99fd9f8a9e11db9704bf66b451bf9fbad3a9ba" name="dbus-devel" arch="x86_64">
  <version epoch="1" ver="1.14.10" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.6-1" date="1675857600">- Update to 1.14.6</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.8-1" date="1686052800">- Update to 1.14.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.8-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.10-1" date="1693569600">- Update to 1.14.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.10-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.10-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.14.10-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.14.10-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a1d927842bc30b412199e13177babf1b8f16ea990111ceaecc63e6e5e1caded4" name="dbus-doc" arch="noarch">
  <version epoch="1" ver="1.14.10" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.6-1" date="1675857600">- Update to 1.14.6</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.8-1" date="1686052800">- Update to 1.14.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.8-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.10-1" date="1693569600">- Update to 1.14.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.10-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.10-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.14.10-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.14.10-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="966b6f686ffa14e52d73400e66d0e5867f8918e4a4054ffe93d6f725061367d2" name="dbus-libs" arch="x86_64">
  <version epoch="1" ver="1.14.10" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.6-1" date="1675857600">- Update to 1.14.6</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.8-1" date="1686052800">- Update to 1.14.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.8-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.10-1" date="1693569600">- Update to 1.14.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.10-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.10-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.14.10-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.14.10-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3007189aee243744c5475c67b939945d9ce052cf7af83aedf08940e93468e221" name="dbus-python-devel" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.3.2-3" date="1686830400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.2-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.2-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d4532250af8cda5fd17793ef13e26e085cd29aed690396e5ce2f2c83fa4102a1" name="dbus-tests" arch="x86_64">
  <version epoch="1" ver="1.14.10" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.6-1" date="1675857600">- Update to 1.14.6</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.8-1" date="1686052800">- Update to 1.14.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.8-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.10-1" date="1693569600">- Update to 1.14.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.10-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.10-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.14.10-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.14.10-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="976db07c743e6d29c3cc804ac4b6fffbdc8b6ea09fa0d3f52a305db6db68d8c8" name="dbus-tools" arch="x86_64">
  <version epoch="1" ver="1.14.10" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.6-1" date="1675857600">- Update to 1.14.6</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.8-1" date="1686052800">- Update to 1.14.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.8-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.10-1" date="1693569600">- Update to 1.14.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.10-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.10-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.14.10-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.14.10-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c6b72edb22dfc0b49054eceb0e45c3aa51477be7871595215544de4dd344db60" name="dbus-x11" arch="x86_64">
  <version epoch="1" ver="1.14.10" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.6-1" date="1675857600">- Update to 1.14.6</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.8-1" date="1686052800">- Update to 1.14.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.8-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.14.10-1" date="1693569600">- Update to 1.14.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.10-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.14.10-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.14.10-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.14.10-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="303dbc53e67b61a39c7e8166a9bbe9a204e3bb4e4df286be464dc9111591807b" name="dconf" arch="x86_64">
  <version epoch="0" ver="0.40.0" rel="17.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.40.0-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.40.0-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.40.0-12" date="1707220800">- Migrated to SPDX license</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.40.0-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.40.0-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.40.0-15" date="1732104000">- Do not use system profile for tests
- Resolves: RHEL-65653</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.40.0-16" date="1736510400">- Backport patch for permissions restore
- Indicate bundle of GVDB
- Resolves: RHEL-71949</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.40.0-17" date="1767960000">- Describe DBDIR argument in man page
- Resolves: RHEL-83392</changelog>
</package>
<package pkgid="5535b8dad33ce621dce245a4fae07f7e697a8d4845e4dcf0fc4fa09ab845cb0d" name="dconf-devel" arch="x86_64">
  <version epoch="0" ver="0.40.0" rel="17.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.40.0-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.40.0-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.40.0-12" date="1707220800">- Migrated to SPDX license</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.40.0-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.40.0-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.40.0-15" date="1732104000">- Do not use system profile for tests
- Resolves: RHEL-65653</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.40.0-16" date="1736510400">- Backport patch for permissions restore
- Indicate bundle of GVDB
- Resolves: RHEL-71949</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.40.0-17" date="1767960000">- Describe DBDIR argument in man page
- Resolves: RHEL-83392</changelog>
</package>
<package pkgid="92b7fa21a6430cd5dff678333f513481f5aa8c18601f4ea35a960c7be77c7893" name="dconf-editor" arch="x86_64">
  <version epoch="0" ver="45.0.1" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 43.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 43.0-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0-1" date="1695211200">- Update to 45.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0.1-1" date="1695211201">- Update to 45.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.0.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.0.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 45.0.1-4" date="1707220800">- Migrated to SPDX license</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 45.0.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 45.0.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2507d09a369b66c188c4b332931958683bcceccf7fc6b2cf91831abece409d95" name="dcraw" arch="x86_64">
  <version epoch="0" ver="9.28.0" rel="25.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.28.0-18" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 9.28.0-19" date="1683028800">- move to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.28.0-20" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 9.28.0-21" date="1701172800">- Rebuild for jasper 4.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.28.0-22" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.28.0-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.28.0-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.28.0-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6b5f297af804ab3b6ca4c2f26f3878f9f1571f32e0ab69be5d367c0a38ce7bba" name="ddiskit" arch="noarch">
  <version epoch="0" ver="3.6" rel="28.20250206gitd857c77.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 3.6-20" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-21" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 3.6-22" date="1701691200">- Migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-23" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-24" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.6-25" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.6-26" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 3.6-27" date="1736942400">- Update to the latest version (RHEL-55716, RHEL-61716, RHEL-68669).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 3.6-28" date="1738843200">- Provide an ability to change ISO label (RHEL-77181).</changelog>
</package>
<package pkgid="9443b4dd945c2f14eac85d516ed6a684cd8b713934e3e85ce856da68b2557285" name="debugedit" arch="x86_64">
  <version epoch="0" ver="5.1" rel="8.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 5.1-1" date="1730203201">- New upstream 5.1 release
- Drop all local patches</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 5.1-2" date="1732795200">- Add 0001-find-debuginfo-Check-files-are-writable-before-modif.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 5.1-3" date="1737028800">- Add 0001-find-debuginfo-Fix-skip_mini-.gnu_debugdata-handling.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 5.1-4" date="1737028801">- Add 0001-find-debuginfo-Make-return-from-do_file-explicit.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 5.1-5" date="1741003200">- Add debugedit-5.1-binutils-tools-override.patch</changelog>
  <changelog author="Martin Cermak &lt;mcermak@redhat.com&gt; - 5.1-6" date="1742558400">- NVR bump and rebuild for RHEL-10.1</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 5.1-7" date="1744372800">- Add 0001-debugedit-Handle-unused-.debug_str_offsets-entries.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 5.1-8" date="1750420800">- Add 0001-Add-basic-find-debuginfo-script-tests.patch</changelog>
</package>
<package pkgid="d127d6d0ff4393b193d696fdfbae0f54ab1258c580a69042d82d28da568c9055" name="default-fonts" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b187b72ffc9f3490d33481036688bbd978cc0e045db2df7d0379172637adcc1a" name="default-fonts-am" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7b35588ff8702ad323056f950b7f152fba6194ce8273e9b13f1663877919159d" name="default-fonts-ar" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cab3c7becc34ff97e68bbaf49752dbc529bee666018490edb66c2b273d07c52b" name="default-fonts-as" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9257afa3bbd5bb2fb1754c14f2b5a7b1dbb5df929ca07e8ba5b98313a7396a93" name="default-fonts-ast" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ce7eed3ccb9f68016fdbcb7585194654fb57745bb88cb774e32d72a23d64f463" name="default-fonts-be" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f8a2ea571f996f1708fd057e06c53ddaf06ec8e5777d37930dc8d5883d787afb" name="default-fonts-bg" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f1749bf2e0e23f25ae0c7bbc2471c668393cf9145026253844fb8aeacdc88e8e" name="default-fonts-bn" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="073f44ca07b93100cff8a7e8edc78887e1f23789debbfee4f0cbd196a2a785ee" name="default-fonts-bo" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="65818cdfbf1cdd7405cf1d8891d2a23be2eac533bad9b1d344ff950764ca1623" name="default-fonts-br" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="815ca32d56d5d0e6e6bf254b296f25e5543c56e4e57501efca7eb2ef51848407" name="default-fonts-chr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="90de14f4e4bdc391d664b186642e474e513a7b4f2113e00d987188d913f3221a" name="default-fonts-cjk" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a1eefcac0a5f03af16ba8ac4d320aa57323273086260613b227b0f2fc9fdad32" name="default-fonts-cjk-mono" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="71d8b93db45c7e2510598de9e65629c2bb440a67babe507e882c1eb19025e055" name="default-fonts-cjk-sans" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="130b6c618690b5df95c1249d108794d2ed5489a5d65a1645529313b096a805eb" name="default-fonts-cjk-serif" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="77f8e7bd4cc1cb916a40e9274022dbfd973bfac577a428831aacc2b477376fb4" name="default-fonts-core" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4b40ddf8913bbb08af9e937e3c52d52f93eaa040636316ba3308c6eb6ebb6bf3" name="default-fonts-core-emoji" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5047bc9de23dd4897fc951d5492807a67d565d4dbd54d40c6618d69464d09e48" name="default-fonts-core-math" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="02696f8a2d230d34617a2947dd1d3be7f05c58beca474afced8c760dd3be4d2f" name="default-fonts-core-mono" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c281e81b9861567b3f89768053518e603593ebb9443fe0089401db00907b8ded" name="default-fonts-core-sans" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c741038970df4e65672f4b44a0d36cbac1a2b0e06931c99486eedb01e71ccbd3" name="default-fonts-core-serif" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="991c886a1d4b2a08c7df865f812dc7e2379dc4e133ee42840700a5693d21078c" name="default-fonts-dv" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1ead7d26767ce808ec63a09925d5a4e37f21d5048f6a69eb0542e5d9e00c70e8" name="default-fonts-dz" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a9cffb80eff2f81716d3c6cc125ebc039860d91623e10d4c5e3820dc996ad0ab" name="default-fonts-el" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1068ae11e2c0ef14bc5450d37a031d3fd812980f1e79d9ac0adacca7a6a6c159" name="default-fonts-eo" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="924988adbf30d803875f6fef59e0837539c75620bded0d8c1ac1534c8af5b948" name="default-fonts-eu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c202d541eab4e860ed600d5c4b7fcef95b22a93d19f2d0f2bb574fb76be47de4" name="default-fonts-fa" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="62c6775dce93606abba47b559ce4a6d218a5864cce9395537edb06fa2f461d48" name="default-fonts-gu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="82b673efd032358827a7315febc4c328efd157b968eb366a2b6ca81cf4726caa" name="default-fonts-he" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7218fd2fcacd94ea9c1a324aab66dc0854bb52ce94d2133a03aaf2c582c59167" name="default-fonts-hi" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="78f8fa4fb94f0641e141c9181cabfabedb468a372a6c94e2fe6f6d6f852c9fce" name="default-fonts-hy" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bfd2f4849f566fc1a6a78b12b419cacedc29b0f70dff5cdc686f0ef95a169e29" name="default-fonts-ia" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="95be8ae94a85c6fda568e028395d0d1bdcbcfc0b95ce2c92273b39cfe4287941" name="default-fonts-iu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="857da1289cc1397067c91d8f3980a6e8a296503d067513c050dd43c30025eb14" name="default-fonts-ka" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f0d857ebf7900b2d66d48114f4cd0dbe3f3cbc2e72674c6a3b311cd3d8d203d2" name="default-fonts-km" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="09371bc90ff40589c3ed246c2da0a11779a473117211395672ba36dfd8852a28" name="default-fonts-kn" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4955dbbcf04f4975ef506567c0298888278f71e158984c7f0164be2c6023c292" name="default-fonts-ku" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c5f87b03ec2fe20c6c55f9b133e7fd334dfa824c4788b939ce7009f01d280c33" name="default-fonts-lo" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9ad8319d5d8444f5618df16a0385323b57a9448658cdd8f24767b8f6ada26c21" name="default-fonts-mai" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9912b58844064cc3bd9d3aa372fd9ca00b633ec966cf2acf7b632b4cb9d4ea4b" name="default-fonts-ml" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4b2a6e602ef84194179f7c99654c009a4d8bc3589f1b65ad96315ec64b60258f" name="default-fonts-mni" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="79be36946b253ada40b5fba7a1a231d813163275a7199a0c2b9b1d4c57f0ebc4" name="default-fonts-mr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="15fe884f530a9e1062bbbe24ee32c067227525336ef2b6582c14e4bb44434363" name="default-fonts-my" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ae3774ea27c7d9ccbc390003bd8b3854228dba0fda84208919b86a9481c9a6d0" name="default-fonts-nb" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8b47b9841e81955d47451e91c59812204ff771350a9c20776b925a8525f3efb0" name="default-fonts-ne" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b9a8f44e9731bd2f7cb77972831847430f0a3efa44d3de652ef8021f75d6d542" name="default-fonts-nn" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6c32761c8f852c1a9bfffa610437456922087d5a2d1bcfdae66237d25d5c9001" name="default-fonts-nr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d1fb331c25d5e4ddf51226b2b6baebc9363c3dc15d4490b7ee7c9f917449fd72" name="default-fonts-nso" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8527a56133fbaf2d1cde1be449f17a2206135f589f1acf111873c3bcb4f18545" name="default-fonts-or" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8edfeff4edd9804177b3463d319cdf7bd3951270916ad53bb9c4e7fe464d9abc" name="default-fonts-other" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="374c752beee5703627e3524ea178a74ab4674ac0c83d3522aca86b2456bb4c8f" name="default-fonts-other-mono" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d28d61d16c56170aaa812c14e86a4dd3581a8059b2239f8ca7222b5993130a82" name="default-fonts-other-sans" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9945ff5d1718ed0fbbca0721fdb253427d4092beff3749e3e31788463c0a0e37" name="default-fonts-other-serif" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2d6a527cdeaeddc805a78819933465b3b303eae24b8eb08d1ec763209866754e" name="default-fonts-pa" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="53554f0d02a43c2e218f53149680dfcfceb653ff955eee1cf9cbd1199a0a73f4" name="default-fonts-ru" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d181eb21256c9c45bf1ebd2799e0e68a7ee27addfc5bf0f8a250f1582c2ddcc3" name="default-fonts-sat" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e871e0efb7cdb143964bfc3135f3e60e81fbb60b4e07f0b9ab0853f96cdb29ff" name="default-fonts-si" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="71ed47cfe72a4136d0423b8471efdaaacac6b59733c3f7e72f7aa44798311d89" name="default-fonts-ss" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ec0ca33e522762d0ff3ca69b66e265e5bfb4105feac61ef1295fd0eb79cb127a" name="default-fonts-ta" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0e31a666f5ff3522ab2063cb1f7d5cd4c21a6978a704e619627fbffe38846226" name="default-fonts-te" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="24e77e26cfcdf5845a14e241c1a9cea9cecc04a5d6008b982cfca0329cb7457b" name="default-fonts-th" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b03e34c7a0fb0004dc0bf3ef728092c73e869536c5530a5db7579f92d1aac4c8" name="default-fonts-tn" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b9823e7d03d562d7d0c9f59571930955532a6216f45cc4fa2349d32ab43a627b" name="default-fonts-ts" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="906988d0487cbac69d2d6c508220ba2608f5a4e57aa4796027fe34154e052591" name="default-fonts-uk" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f0f00636d414fb283f9418ef69ff47b9ce928b15b2063bbeff2ba6995fb5a31b" name="default-fonts-ur" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="66640d21b4010f5f7ef468ad0e2e3e0f1199946c9b0188472cddce35f7b00502" name="default-fonts-ve" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7665c0096f6ea66c29b274ba52885149d94e67094071423dbcf8026381122c30" name="default-fonts-vi" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="85831eb965531166dc8d8b1cd9197f2f825836a867d35d3e9e23fc27df0b2611" name="default-fonts-xh" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d414a4a5f9dc4fdfe055a13066e0b5c45976aa6d1aa1abb31ccf5fbc3397c15b" name="default-fonts-yi" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="28fbd21f9e140bb69aa958f6871430f9ee9bed50c31aad90abe964ab3d0f2542" name="default-fonts-zu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d9842ffb45ed47bded730bc4b7077ce8bb834b461fdbd3fd6fc052502fb31c87" name="dejagnu" arch="noarch">
  <version epoch="1" ver="1.6.3" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.3-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.3-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.3-8" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.3-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.6.3-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.6.3-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4b1f0262d4e98063dae2bc13bef0162b62551ba833d997d0a66df8673f91f25c" name="dejavu-fonts-all" arch="noarch">
  <version epoch="0" ver="2.37" rel="25.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-20" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.37-21" date="1697112000">- Convert License tag to SPDX.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-22" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.37-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.37-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f630956bb0b2ab62fe7f3e59078e149d3fd1b6ffaf5f19ea73daf2e1280f3e87" name="dejavu-fonts-doc" arch="noarch">
  <version epoch="0" ver="2.37" rel="25.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-20" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.37-21" date="1697112000">- Convert License tag to SPDX.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-22" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.37-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.37-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1df50ff4e5a88355889323487d53a400346c84a5948650429bc4be38f247db15" name="dejavu-lgc-fonts-all" arch="noarch">
  <version epoch="0" ver="2.37" rel="25.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-20" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.37-21" date="1697112000">- Convert License tag to SPDX.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-22" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.37-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.37-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3caa268ce97ea8d1038057df2fb734188eefbdf5f1966c407638e804d92666f6" name="dejavu-lgc-sans-fonts" arch="noarch">
  <version epoch="0" ver="2.37" rel="25.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-20" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.37-21" date="1697112000">- Convert License tag to SPDX.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-22" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.37-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.37-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7050671d9fed31e4efa35e4e0991be4d4ca15271cc2e2425ccb7cefeb17951b2" name="dejavu-lgc-sans-mono-fonts" arch="noarch">
  <version epoch="0" ver="2.37" rel="25.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-20" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.37-21" date="1697112000">- Convert License tag to SPDX.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-22" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.37-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.37-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f71eaa0d98c19cf0ba3b652972dd83059be8f4cedd0ad08178c8f17c8d6810d4" name="dejavu-lgc-serif-fonts" arch="noarch">
  <version epoch="0" ver="2.37" rel="25.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-20" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.37-21" date="1697112000">- Convert License tag to SPDX.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-22" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.37-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.37-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e2fe038f2d632a39bf6d0b5e37301e9f5d5bd6d164119770b6ffaaaa26a2a525" name="dejavu-sans-fonts" arch="noarch">
  <version epoch="0" ver="2.37" rel="25.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-20" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.37-21" date="1697112000">- Convert License tag to SPDX.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-22" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.37-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.37-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b1e7eeac692940cfabd7c64608899355c837b3f46654b286ef86a969054c5499" name="dejavu-sans-mono-fonts" arch="noarch">
  <version epoch="0" ver="2.37" rel="25.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-20" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.37-21" date="1697112000">- Convert License tag to SPDX.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-22" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.37-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.37-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dc672fe43d93896cb2520ab052e9ba67233bc0bcc4cec137d02dc44c3e2f1231" name="dejavu-serif-fonts" arch="noarch">
  <version epoch="0" ver="2.37" rel="25.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-20" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.37-21" date="1697112000">- Convert License tag to SPDX.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-22" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.37-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.37-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d156edb2978a93d8e6b28edc8c52b1f45d7446879b84f65b5be80f6d73a9676f" name="delve" arch="x86_64">
  <version epoch="0" ver="1.26.1" rel="1.el10_2"/>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.22.1-3" date="1723809600">- Enable ppc64le</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.22.1-4" date="1724328000">- Remove macro and tidy up</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.22.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.22.1-6" date="1732881600">- plans/ci.fmf: Update repo</changelog>
  <changelog author="David Benoit &lt;dbenoit@redhat.com&gt; - 1.24.1-1" date="1741953600">- Update Delve to 1.24.1</changelog>
  <changelog author="David Benoit &lt;dbenoit@redhat.com&gt; - 1.24.1-2" date="1750075200">- Rebuild without changes</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.24.1-3" date="1756468800">- Update CI support</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.2-1" date="1757073600">- Update Delve to 1.25.2</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.2-2" date="1773835200">- Rebuild with latest Go</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.1-1" date="1775044800">- Update Delve to version 1.26.1</changelog>
</package>
<package pkgid="54706ab5ac0593d190bed5e4eb8347931626ce097714eda07b81a31b6dcd4e13" name="delve" arch="x86_64">
  <version epoch="0" ver="1.26.1" rel="2.el10_2"/>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.22.1-3" date="1723809600">- Enable ppc64le</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.22.1-4" date="1724328000">- Remove macro and tidy up</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.22.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.22.1-6" date="1732881600">- plans/ci.fmf: Update repo</changelog>
  <changelog author="David Benoit &lt;dbenoit@redhat.com&gt; - 1.24.1-1" date="1741953600">- Update Delve to 1.24.1</changelog>
  <changelog author="David Benoit &lt;dbenoit@redhat.com&gt; - 1.24.1-2" date="1750075200">- Rebuild without changes</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.24.1-3" date="1756468800">- Update CI support</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.2-1" date="1757073600">- Update Delve to 1.25.2</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1780401600">- Update Delve to 1.26.1</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-2" date="1780488000">- Bump</changelog>
</package>
<package pkgid="1f3432c6105f1ddc51b13477da4b58efca4c0478a0e75a77073faff412f35e77" name="desktop-file-utils" arch="x86_64">
  <version epoch="0" ver="0.26" rel="15.el10_1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.26-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.26-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.26-12" date="1707739200">- Build for the SPDX license format change</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.26-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.26-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.26-15" date="1754049600">- Update accepted desktop IDs
  Resolves: RHEL-107113</changelog>
</package>
<package pkgid="c2d1335e1497f8d5fba817c54099693e11ac599f0f791a3c9f05f971c828bc2f" name="device-mapper" arch="x86_64">
  <version epoch="10" ver="1.02.210" rel="2.el10"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-3" date="1731585600">- Fix duplicate LV names when converting pools to RAID1 with more than 2 legs.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1737460800">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).
- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1737633600">- Add libnvme dependency to really fix the NVMe issue.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738670400">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746446400">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-3" date="1749124800">- Respin.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.35-1" date="1757505600">- Update to upstream version 2.03.35.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.36-1" date="1761307200">- Update to upstream version 2.03.36.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.36-2" date="1767787200">- Additional fixes up to 2.03.38.</changelog>
</package>
<package pkgid="e220c31a1c3327f874066ac185bf4e1f615a6b0266e8752ef31306b358307f62" name="device-mapper-devel" arch="x86_64">
  <version epoch="10" ver="1.02.210" rel="2.el10"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-3" date="1731585600">- Fix duplicate LV names when converting pools to RAID1 with more than 2 legs.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1737460800">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).
- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1737633600">- Add libnvme dependency to really fix the NVMe issue.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738670400">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746446400">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-3" date="1749124800">- Respin.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.35-1" date="1757505600">- Update to upstream version 2.03.35.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.36-1" date="1761307200">- Update to upstream version 2.03.36.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.36-2" date="1767787200">- Additional fixes up to 2.03.38.</changelog>
</package>
<package pkgid="66cf39e5670855f095e6bb1b9ce50f12ca16482d681632b4f9f7adcf333461c7" name="device-mapper-event" arch="x86_64">
  <version epoch="10" ver="1.02.210" rel="2.el10"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-3" date="1731585600">- Fix duplicate LV names when converting pools to RAID1 with more than 2 legs.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1737460800">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).
- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1737633600">- Add libnvme dependency to really fix the NVMe issue.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738670400">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746446400">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-3" date="1749124800">- Respin.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.35-1" date="1757505600">- Update to upstream version 2.03.35.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.36-1" date="1761307200">- Update to upstream version 2.03.36.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.36-2" date="1767787200">- Additional fixes up to 2.03.38.</changelog>
</package>
<package pkgid="3815893b767af02bf395254d068de8c66ad559a514587717bdfd938ddcdd01c7" name="device-mapper-event-devel" arch="x86_64">
  <version epoch="10" ver="1.02.210" rel="2.el10"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-3" date="1731585600">- Fix duplicate LV names when converting pools to RAID1 with more than 2 legs.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1737460800">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).
- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1737633600">- Add libnvme dependency to really fix the NVMe issue.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738670400">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746446400">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-3" date="1749124800">- Respin.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.35-1" date="1757505600">- Update to upstream version 2.03.35.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.36-1" date="1761307200">- Update to upstream version 2.03.36.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.36-2" date="1767787200">- Additional fixes up to 2.03.38.</changelog>
</package>
<package pkgid="c948764cc68fe8541afc822bdd3040460dca3da2f3f39c44b6beead3d7939d91" name="device-mapper-event-libs" arch="x86_64">
  <version epoch="10" ver="1.02.210" rel="2.el10"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-3" date="1731585600">- Fix duplicate LV names when converting pools to RAID1 with more than 2 legs.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1737460800">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).
- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1737633600">- Add libnvme dependency to really fix the NVMe issue.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738670400">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746446400">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-3" date="1749124800">- Respin.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.35-1" date="1757505600">- Update to upstream version 2.03.35.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.36-1" date="1761307200">- Update to upstream version 2.03.36.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.36-2" date="1767787200">- Additional fixes up to 2.03.38.</changelog>
</package>
<package pkgid="46467ffec30b7c47f03d3b20e33e428284baf8bece7b44145a97f8d267faac09" name="device-mapper-libs" arch="x86_64">
  <version epoch="10" ver="1.02.210" rel="2.el10"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-3" date="1731585600">- Fix duplicate LV names when converting pools to RAID1 with more than 2 legs.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1737460800">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).
- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1737633600">- Add libnvme dependency to really fix the NVMe issue.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738670400">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746446400">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-3" date="1749124800">- Respin.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.35-1" date="1757505600">- Update to upstream version 2.03.35.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.36-1" date="1761307200">- Update to upstream version 2.03.36.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.36-2" date="1767787200">- Additional fixes up to 2.03.38.</changelog>
</package>
<package pkgid="d30d45b4715c2e182527b1cbe4e2351eae718d73008eb8da6829b05c70734b2e" name="device-mapper-multipath" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="18.el10"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-9" date="1744804800">- Add 0030-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0031-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0032-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82535 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82535</changelog>
  <changelog author="Filip Suba &lt;fsuba@redhat.com&gt; - 0.9.9-10" date="1744977600">- Migrate gating tests from STI to tmt
- Related: RHEL-82535</changelog>
  <changelog author="Filip Suba &lt;fsuba@redhat.com&gt; - 0.9.9-11" date="1752494400">- Add 0033-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103112 ("Update multipath builtin config to add new
    device defaults [rhel-10]")
- Resolves: RHEL-103112</changelog>
  <changelog author="Lin Li &lt;lilin@redhat.com&gt; - 0.9.9-12" date="1757764800">Add 0034-libmultipath-fix-crash-in-print_foreign_topology.patch
  * Fixes RHEL-107436 ("Running multipath -ll on system with "enable_foreign
    nvme" results in segfault")
Resolves: RHEL-107436</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-13" date="1759320000">- Add 0035-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0036-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0037-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0038-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0039-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0040-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0041-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0042-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0043-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0044-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0045-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0046-libmpathpersist-redesign-failed-release-workaround.patch
- Add 0047-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0048-libmpathpersist-Handle-changing-key-corner-case.patch
- Add 0049-libmpathpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0050-libmultipath-rename-prflag_value-enums.patch
- Add 0051-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0052-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0053-libmpathpersist-remove-update_map_pr-code-for-NULL-p.patch
- Add 0054-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0055-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0056-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0057-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0058-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0059-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0060-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0061-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0062-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0063-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0064-libmpathpersist-update-reservation-key-before-checki.patch
- Add 0065-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0066-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0067-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0068-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0069-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0070-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0071-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0072-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0073-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0074-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0075-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0076-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0077-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
    reservation handling [rhel-10]")
- Resolves: RHEL-118720</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-14" date="1762862400">- Add 0078-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0079-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
    reservation handling [rhel-10]")
- Resolves: RHEL-118720</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-15" date="1763553600">- Add 0080-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128338 ("Update the multipath.conf stanza for Infinidat
    storage")
- Resolves: RHEL-128338</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-16" date="1769083200">- Add 0081-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-136405 ("improve Busy checking for multipathd show status
    output")
- Add 0082-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133815 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-10]")
- Resolves: RHEL-133815
- Resolves: RHEL-136405</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-17" date="1769688000">- Add 0083-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0084-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141287 ("Add purge_disconnected support to multipathd")
- Resolves: RHEL-141287</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-18" date="1771502400">- Add 0085-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0086-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0087-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-129442 ("Improve multipathd's handling of updating
    persistent reservations on restored paths.")
- Resolves: RHEL-129442</changelog>
</package>
<package pkgid="a25fae70964c287144064d57c976bcafe04b9671da4321b37e2ced08643c57a9" name="device-mapper-multipath-devel" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="18.el10"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-9" date="1744804800">- Add 0030-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0031-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0032-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82535 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82535</changelog>
  <changelog author="Filip Suba &lt;fsuba@redhat.com&gt; - 0.9.9-10" date="1744977600">- Migrate gating tests from STI to tmt
- Related: RHEL-82535</changelog>
  <changelog author="Filip Suba &lt;fsuba@redhat.com&gt; - 0.9.9-11" date="1752494400">- Add 0033-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103112 ("Update multipath builtin config to add new
    device defaults [rhel-10]")
- Resolves: RHEL-103112</changelog>
  <changelog author="Lin Li &lt;lilin@redhat.com&gt; - 0.9.9-12" date="1757764800">Add 0034-libmultipath-fix-crash-in-print_foreign_topology.patch
  * Fixes RHEL-107436 ("Running multipath -ll on system with "enable_foreign
    nvme" results in segfault")
Resolves: RHEL-107436</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-13" date="1759320000">- Add 0035-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0036-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0037-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0038-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0039-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0040-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0041-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0042-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0043-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0044-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0045-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0046-libmpathpersist-redesign-failed-release-workaround.patch
- Add 0047-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0048-libmpathpersist-Handle-changing-key-corner-case.patch
- Add 0049-libmpathpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0050-libmultipath-rename-prflag_value-enums.patch
- Add 0051-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0052-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0053-libmpathpersist-remove-update_map_pr-code-for-NULL-p.patch
- Add 0054-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0055-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0056-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0057-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0058-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0059-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0060-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0061-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0062-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0063-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0064-libmpathpersist-update-reservation-key-before-checki.patch
- Add 0065-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0066-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0067-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0068-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0069-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0070-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0071-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0072-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0073-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0074-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0075-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0076-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0077-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
    reservation handling [rhel-10]")
- Resolves: RHEL-118720</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-14" date="1762862400">- Add 0078-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0079-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
    reservation handling [rhel-10]")
- Resolves: RHEL-118720</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-15" date="1763553600">- Add 0080-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128338 ("Update the multipath.conf stanza for Infinidat
    storage")
- Resolves: RHEL-128338</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-16" date="1769083200">- Add 0081-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-136405 ("improve Busy checking for multipathd show status
    output")
- Add 0082-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133815 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-10]")
- Resolves: RHEL-133815
- Resolves: RHEL-136405</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-17" date="1769688000">- Add 0083-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0084-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141287 ("Add purge_disconnected support to multipathd")
- Resolves: RHEL-141287</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-18" date="1771502400">- Add 0085-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0086-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0087-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-129442 ("Improve multipathd's handling of updating
    persistent reservations on restored paths.")
- Resolves: RHEL-129442</changelog>
</package>
<package pkgid="3179f4a926668d23e9cc4289870ccbac3d13b0b35795afa54a446aa2e1e470e5" name="device-mapper-multipath-libs" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="18.el10"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-9" date="1744804800">- Add 0030-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0031-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0032-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82535 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82535</changelog>
  <changelog author="Filip Suba &lt;fsuba@redhat.com&gt; - 0.9.9-10" date="1744977600">- Migrate gating tests from STI to tmt
- Related: RHEL-82535</changelog>
  <changelog author="Filip Suba &lt;fsuba@redhat.com&gt; - 0.9.9-11" date="1752494400">- Add 0033-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103112 ("Update multipath builtin config to add new
    device defaults [rhel-10]")
- Resolves: RHEL-103112</changelog>
  <changelog author="Lin Li &lt;lilin@redhat.com&gt; - 0.9.9-12" date="1757764800">Add 0034-libmultipath-fix-crash-in-print_foreign_topology.patch
  * Fixes RHEL-107436 ("Running multipath -ll on system with "enable_foreign
    nvme" results in segfault")
Resolves: RHEL-107436</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-13" date="1759320000">- Add 0035-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0036-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0037-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0038-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0039-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0040-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0041-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0042-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0043-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0044-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0045-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0046-libmpathpersist-redesign-failed-release-workaround.patch
- Add 0047-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0048-libmpathpersist-Handle-changing-key-corner-case.patch
- Add 0049-libmpathpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0050-libmultipath-rename-prflag_value-enums.patch
- Add 0051-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0052-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0053-libmpathpersist-remove-update_map_pr-code-for-NULL-p.patch
- Add 0054-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0055-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0056-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0057-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0058-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0059-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0060-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0061-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0062-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0063-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0064-libmpathpersist-update-reservation-key-before-checki.patch
- Add 0065-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0066-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0067-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0068-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0069-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0070-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0071-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0072-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0073-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0074-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0075-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0076-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0077-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
    reservation handling [rhel-10]")
- Resolves: RHEL-118720</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-14" date="1762862400">- Add 0078-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0079-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
    reservation handling [rhel-10]")
- Resolves: RHEL-118720</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-15" date="1763553600">- Add 0080-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128338 ("Update the multipath.conf stanza for Infinidat
    storage")
- Resolves: RHEL-128338</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-16" date="1769083200">- Add 0081-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-136405 ("improve Busy checking for multipathd show status
    output")
- Add 0082-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133815 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-10]")
- Resolves: RHEL-133815
- Resolves: RHEL-136405</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-17" date="1769688000">- Add 0083-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0084-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141287 ("Add purge_disconnected support to multipathd")
- Resolves: RHEL-141287</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-18" date="1771502400">- Add 0085-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0086-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0087-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-129442 ("Improve multipathd's handling of updating
    persistent reservations on restored paths.")
- Resolves: RHEL-129442</changelog>
</package>
<package pkgid="f278f15e525cf5ac11e274ab28a3f20cb889ec91768955d699c3194203140c72" name="device-mapper-persistent-data" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.9-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.9-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.0.11-1" date="1707393600">- Update to latest upstream release 1.0.11.</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.0.11-2" date="1707393601">- Update Rust macro usage</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.0.11-3" date="1707825600">- SPDX migration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.11-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.11-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.1.0-1" date="1730289600">- Update to latest upstream release 1.1.0.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.1.0-2" date="1730376000">- Add gating.yaml</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 1.3.0-1" date="1761134400">- Update to upstream release 1.3.0.</changelog>
</package>
<package pkgid="dcee6d7b735d9000d1ee83a8fc1998e6725065b4ac746969b276193389d6e1fe" name="dhcp-client" arch="x86_64">
  <version epoch="12" ver="4.4.3" rel="13.P1.el10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-5.P1" date="1667217600">- Use systemd-sysusers for dhcp user and group (rhbz#2138822)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-6.P1" date="1667476800">- Fix order of user and group in sysusers file</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-7.P1" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 12:4.4.3-8.P1" date="1682337600">- Port bind9 configure script to C99</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-9.P1" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-10.P1" date="1696248000">- SPDX migration</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-11.P1" date="1700049600">- Mark dhcp (sub)packages as deprecated</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-12.P1" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-13.P1" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 4.4.3-13.P1" date="1708948800">- Change bug tracker path</changelog>
</package>
<package pkgid="0ea566e8ed2725ffb6d763e473f5895de4e6b9fee593418e1200c215c6fa2b29" name="dhcp-common" arch="noarch">
  <version epoch="12" ver="4.4.3" rel="13.P1.el10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-5.P1" date="1667217600">- Use systemd-sysusers for dhcp user and group (rhbz#2138822)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-6.P1" date="1667476800">- Fix order of user and group in sysusers file</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-7.P1" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 12:4.4.3-8.P1" date="1682337600">- Port bind9 configure script to C99</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-9.P1" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-10.P1" date="1696248000">- SPDX migration</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-11.P1" date="1700049600">- Mark dhcp (sub)packages as deprecated</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-12.P1" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-13.P1" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 4.4.3-13.P1" date="1708948800">- Change bug tracker path</changelog>
</package>
<package pkgid="f1c31e131767eea65f3e3585540060580eb4f85d8ce87a01471ddb87fac4596c" name="dhcp-devel" arch="x86_64">
  <version epoch="12" ver="4.4.3" rel="13.P1.el10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-5.P1" date="1667217600">- Use systemd-sysusers for dhcp user and group (rhbz#2138822)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-6.P1" date="1667476800">- Fix order of user and group in sysusers file</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-7.P1" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 12:4.4.3-8.P1" date="1682337600">- Port bind9 configure script to C99</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-9.P1" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-10.P1" date="1696248000">- SPDX migration</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-11.P1" date="1700049600">- Mark dhcp (sub)packages as deprecated</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-12.P1" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-13.P1" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 4.4.3-13.P1" date="1708948800">- Change bug tracker path</changelog>
</package>
<package pkgid="5f8d931dac0f502d859e0e880c875978012b78ccba3b1b34366e8ccf68028aff" name="dhcp-devel-doc" arch="noarch">
  <version epoch="12" ver="4.4.3" rel="13.P1.el10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-5.P1" date="1667217600">- Use systemd-sysusers for dhcp user and group (rhbz#2138822)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-6.P1" date="1667476800">- Fix order of user and group in sysusers file</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-7.P1" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 12:4.4.3-8.P1" date="1682337600">- Port bind9 configure script to C99</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-9.P1" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-10.P1" date="1696248000">- SPDX migration</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-11.P1" date="1700049600">- Mark dhcp (sub)packages as deprecated</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-12.P1" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-13.P1" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 4.4.3-13.P1" date="1708948800">- Change bug tracker path</changelog>
</package>
<package pkgid="b3f5fae4584d05330378c49656da7901c00ac9cbb7a1b8c4cc25f49d60f1065f" name="dhcp-keama" arch="x86_64">
  <version epoch="12" ver="4.4.3" rel="13.P1.el10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-5.P1" date="1667217600">- Use systemd-sysusers for dhcp user and group (rhbz#2138822)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-6.P1" date="1667476800">- Fix order of user and group in sysusers file</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-7.P1" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 12:4.4.3-8.P1" date="1682337600">- Port bind9 configure script to C99</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-9.P1" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-10.P1" date="1696248000">- SPDX migration</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-11.P1" date="1700049600">- Mark dhcp (sub)packages as deprecated</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-12.P1" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-13.P1" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 4.4.3-13.P1" date="1708948800">- Change bug tracker path</changelog>
</package>
<package pkgid="dd12f831a8ec5b049dfda38baf9e00a1924dc11ce60ec53f293092bc65c76b26" name="dhcp-libs-static" arch="x86_64">
  <version epoch="12" ver="4.4.3" rel="13.P1.el10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-5.P1" date="1667217600">- Use systemd-sysusers for dhcp user and group (rhbz#2138822)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-6.P1" date="1667476800">- Fix order of user and group in sysusers file</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-7.P1" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 12:4.4.3-8.P1" date="1682337600">- Port bind9 configure script to C99</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-9.P1" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-10.P1" date="1696248000">- SPDX migration</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-11.P1" date="1700049600">- Mark dhcp (sub)packages as deprecated</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-12.P1" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-13.P1" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 4.4.3-13.P1" date="1708948800">- Change bug tracker path</changelog>
</package>
<package pkgid="cd192024ed8d06305d30a6a3f5eb708f68f4d28e8513fc90fdeda1bf6ff1183b" name="dhcp-relay" arch="x86_64">
  <version epoch="12" ver="4.4.3" rel="13.P1.el10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-5.P1" date="1667217600">- Use systemd-sysusers for dhcp user and group (rhbz#2138822)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-6.P1" date="1667476800">- Fix order of user and group in sysusers file</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-7.P1" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 12:4.4.3-8.P1" date="1682337600">- Port bind9 configure script to C99</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-9.P1" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-10.P1" date="1696248000">- SPDX migration</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-11.P1" date="1700049600">- Mark dhcp (sub)packages as deprecated</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-12.P1" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-13.P1" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 4.4.3-13.P1" date="1708948800">- Change bug tracker path</changelog>
</package>
<package pkgid="33551dff68443e88b68a2d9b4007e0d6837bb190f1fb0c2fb239bbf40fbf131d" name="dhcp-server" arch="x86_64">
  <version epoch="12" ver="4.4.3" rel="13.P1.el10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-5.P1" date="1667217600">- Use systemd-sysusers for dhcp user and group (rhbz#2138822)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-6.P1" date="1667476800">- Fix order of user and group in sysusers file</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-7.P1" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 12:4.4.3-8.P1" date="1682337600">- Port bind9 configure script to C99</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-9.P1" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-10.P1" date="1696248000">- SPDX migration</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.3-11.P1" date="1700049600">- Mark dhcp (sub)packages as deprecated</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-12.P1" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12:4.4.3-13.P1" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 4.4.3-13.P1" date="1708948800">- Change bug tracker path</changelog>
</package>
<package pkgid="24172451449214e39c2c36ce53e7cf651fef44db815651e9260c20746049a7cd" name="dhcpcd" arch="x86_64">
  <version epoch="0" ver="10.0.6" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.0.6-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.0.6-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.0.6-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 10.0.6-5" date="1719489600">- Update of fmf plans and gating for c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.0.6-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 10.0.6-7" date="1735819200">- Allow the rt_sigprocmask syscall (RHEL-72083)</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 10.0.6-8" date="1752580800">- Update location of fmf plans</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 10.0.6-9" date="1758628800">- Install sysusers.d config</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 10.0.6-10" date="1767873600">- Create /var/lib/dhcpcd directory through systemd-tmpfiles</changelog>
</package>
<package pkgid="edab9cc0f83aa1c7d8247b6c317d08d15afb7462700cff4489a48c032b25b6cf" name="dhcpcd" arch="x86_64">
  <version epoch="0" ver="10.0.6" rel="11.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.0.6-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 10.0.6-7" date="1735819200">- Allow the rt_sigprocmask syscall (RHEL-72083)</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 10.0.6-8" date="1752580800">- Update location of fmf plans</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 10.0.6-9" date="1758628800">- Install sysusers.d config</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 10.0.6-10" date="1767873600">- Create /var/lib/dhcpcd directory through systemd-tmpfiles</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 10.0.6-11" date="1782907200">- Fix CVE-2026-14258</changelog>
</package>
<package pkgid="a10ee27164833150ae5b3ea27b0f2e32cda020072b40c45e221afe6036b1d6a3" name="dialog" arch="x86_64">
  <version epoch="0" ver="1.3" rel="52.20240101.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-45.20220526" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-46.20220526" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1.3-47.20231002" date="1696420800">- update to 1.3-20231002
- convert license tag to SPDX
- package pkgconfig file</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-48.20231002" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-49.20231002" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1.3-50.20240101" date="1706702400">- update to 1.3-20240101</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-51.20240101" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-52.20240101" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4fc6a028d54c1cabcedeb84b06ee29f75ed32795a17b754c865d57344f64efcf" name="dialog-devel" arch="x86_64">
  <version epoch="0" ver="1.3" rel="52.20240101.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-45.20220526" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-46.20220526" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1.3-47.20231002" date="1696420800">- update to 1.3-20231002
- convert license tag to SPDX
- package pkgconfig file</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-48.20231002" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-49.20231002" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1.3-50.20240101" date="1706702400">- update to 1.3-20240101</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-51.20240101" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-52.20240101" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="31236d1bd99c6bbbd0c151dac754b6b9817c0937f3d16c5d5f0aad33376a6409" name="diffstat" arch="x86_64">
  <version epoch="0" ver="1.66" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.65-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.65-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.65-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.65-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Monitoring &lt;release-monitoring@fedoraproject.org&gt; - 1.66-1" date="1706529600">- Update to 1.66 (#2260805)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.66-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.66-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="32bfb2c9581634d73ffc53c20ad86f1b6656f8b4a93017a25ac0c7f67a5919c0" name="diffutils" arch="x86_64">
  <version epoch="0" ver="3.10" rel="8.el10"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.9-3" date="1676980800">- migrated to SPDX license</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.9-4" date="1680004800">- Fix deprecated patch rpm marco</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10-1" date="1688040000">- Fix bz#2208831, update to 3.10
- Fix bz#2196671, diff -D no longer fails to output #ifndef lines introduced in 3.9</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10-2" date="1688558400">- Fix output of "diff -l -y" for non-ASCII input files</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.10-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.10-7" date="1722340800">- Resolves: RHEL-50780, regression, compare file sizes only if both non-zero</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.10-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5c877ca9b6defc6ff62b723ad4b2282728bc905e09dd503bfafb17e43bec4260" name="disruptor" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.4-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-8" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.4-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.4-11" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.4-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="451c2697f2582c35aef4f5270fba7fb6da655043b6402eb97f730fb0c51a6141" name="disruptor-javadoc" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.4-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-8" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.4-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.4-11" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.4-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6f47e86879abba3938497cec678cb13becbd2cf43428610152e7a84098a1a021" name="dmidecode" arch="x86_64">
  <version epoch="1" ver="3.6" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.5-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.5-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 1:3.6-1" date="1717243200">- update to 3.6 rhbz#2276863</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:3.6-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:3.6-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 1:3.6-4" date="1741953600">- Add riscv64</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 1:3.6-5" date="1760443200">- update to upstream fa268715
  Resolves: RHEL-99252</changelog>
</package>
<package pkgid="ae9fe217a090676bae3752746aa08352e3e3d5d7f5de04710d830efd069fc670" name="dnf" arch="noarch">
  <version epoch="0" ver="4.20.0" rel="22.el10_2.rocky.0.1"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 4.20.0-14" date="1743768000">- spec: Provide dnf4 by python3-dnf (RHEL-82311)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 4.20.0-15" date="1750852800">- Mark transient transactions in DNF history (RHEL-84515)
- Warn/disallow changes outside /usr, /etc with --transient (RHEL-84501)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.20.0-16" date="1752062400">- Obsolete RHEL-9-only multisig DNF plugin (RHEL-102336)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 4.20.0-17" date="1752840000">- Add deprecation warning to modularity commands/docs (RHEL-89940)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.20.0-18" date="1753790400">- Fix detecting releasever_minor in dnf-automatic (RHEL-106141)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.20.0-19" date="1767960000">- automatic: Expand email_to in command_email emitter to individual arguments
  (RHEL-94331)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.20.0-20" date="1769169600">- Ignore untrusted signatures if there is trusted one (RHEL-112730)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 4.20.0-21" date="1771243200">- autoremove: when a dangling protected dependency is found produce a warning
  and skip it (RHEL-128445)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 4.20.0-22" date="1774440000">- bootc: unlock only if /usr is read-only (RHEL-145780)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 4.20.0-22.rocky.0.1" date="1779192000">- Add Rocky bugtracker</changelog>
</package>
<package pkgid="6d8ea4402b3bce977d2bc26bc560523ac18e1328ce84eb4cb7fa00c8cca207c9" name="dnf-automatic" arch="noarch">
  <version epoch="0" ver="4.20.0" rel="22.el10_2.rocky.0.1"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 4.20.0-14" date="1743768000">- spec: Provide dnf4 by python3-dnf (RHEL-82311)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 4.20.0-15" date="1750852800">- Mark transient transactions in DNF history (RHEL-84515)
- Warn/disallow changes outside /usr, /etc with --transient (RHEL-84501)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.20.0-16" date="1752062400">- Obsolete RHEL-9-only multisig DNF plugin (RHEL-102336)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 4.20.0-17" date="1752840000">- Add deprecation warning to modularity commands/docs (RHEL-89940)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.20.0-18" date="1753790400">- Fix detecting releasever_minor in dnf-automatic (RHEL-106141)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.20.0-19" date="1767960000">- automatic: Expand email_to in command_email emitter to individual arguments
  (RHEL-94331)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.20.0-20" date="1769169600">- Ignore untrusted signatures if there is trusted one (RHEL-112730)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 4.20.0-21" date="1771243200">- autoremove: when a dangling protected dependency is found produce a warning
  and skip it (RHEL-128445)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 4.20.0-22" date="1774440000">- bootc: unlock only if /usr is read-only (RHEL-145780)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 4.20.0-22.rocky.0.1" date="1779192000">- Add Rocky bugtracker</changelog>
</package>
<package pkgid="1ecb07ff22f6e9a5a7ae05e5b3b460492188f86d5432e50e4d9f7f90f52428f0" name="dnf-bootc" arch="noarch">
  <version epoch="0" ver="4.20.0" rel="22.el10_2.rocky.0.1"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 4.20.0-14" date="1743768000">- spec: Provide dnf4 by python3-dnf (RHEL-82311)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 4.20.0-15" date="1750852800">- Mark transient transactions in DNF history (RHEL-84515)
- Warn/disallow changes outside /usr, /etc with --transient (RHEL-84501)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.20.0-16" date="1752062400">- Obsolete RHEL-9-only multisig DNF plugin (RHEL-102336)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 4.20.0-17" date="1752840000">- Add deprecation warning to modularity commands/docs (RHEL-89940)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.20.0-18" date="1753790400">- Fix detecting releasever_minor in dnf-automatic (RHEL-106141)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.20.0-19" date="1767960000">- automatic: Expand email_to in command_email emitter to individual arguments
  (RHEL-94331)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.20.0-20" date="1769169600">- Ignore untrusted signatures if there is trusted one (RHEL-112730)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 4.20.0-21" date="1771243200">- autoremove: when a dangling protected dependency is found produce a warning
  and skip it (RHEL-128445)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 4.20.0-22" date="1774440000">- bootc: unlock only if /usr is read-only (RHEL-145780)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 4.20.0-22.rocky.0.1" date="1779192000">- Add Rocky bugtracker</changelog>
</package>
<package pkgid="fdde6e4e18fba936cd5409ca8db6956b8394b79926ea03309131ff5c1110bc93" name="dnf-data" arch="noarch">
  <version epoch="0" ver="4.20.0" rel="22.el10_2.rocky.0.1"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 4.20.0-14" date="1743768000">- spec: Provide dnf4 by python3-dnf (RHEL-82311)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 4.20.0-15" date="1750852800">- Mark transient transactions in DNF history (RHEL-84515)
- Warn/disallow changes outside /usr, /etc with --transient (RHEL-84501)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.20.0-16" date="1752062400">- Obsolete RHEL-9-only multisig DNF plugin (RHEL-102336)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 4.20.0-17" date="1752840000">- Add deprecation warning to modularity commands/docs (RHEL-89940)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.20.0-18" date="1753790400">- Fix detecting releasever_minor in dnf-automatic (RHEL-106141)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.20.0-19" date="1767960000">- automatic: Expand email_to in command_email emitter to individual arguments
  (RHEL-94331)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.20.0-20" date="1769169600">- Ignore untrusted signatures if there is trusted one (RHEL-112730)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 4.20.0-21" date="1771243200">- autoremove: when a dangling protected dependency is found produce a warning
  and skip it (RHEL-128445)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 4.20.0-22" date="1774440000">- bootc: unlock only if /usr is read-only (RHEL-145780)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 4.20.0-22.rocky.0.1" date="1779192000">- Add Rocky bugtracker</changelog>
</package>
<package pkgid="b2965a3189616b89db0826c8cf535eb1e09daa5ca2840e0b9fa0a200674bdc92" name="dnf-plugins-core" arch="noarch">
  <version epoch="0" ver="4.7.0" rel="10.el10"/>
  <changelog author="Jan Kolarik &lt;jkolarik@redhat.com&gt; - 4.7.0-1" date="1713960000">- Update to 4.7.0 (RHEL-38831)
- docs: Documentation of needs-restarting boot time (RHEL-35577)
- man: Prepare pages for dnf5 switch
- spec: Prepare for switch of dnf5 in Rawhide</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.7.0-2" date="1717675200">- Revert using systemd start time in needs-restarting (RHEL-35577)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.7.0-3" date="1718366400">- Fix symbolic links to packaged files (RHEL-40564)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.7.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.7.0-5" date="1720526400">- Remove debug plugin (i.e. dnf debug-dump and and debug-restore commands)
  (RHEL-23706)
- Enable leaves and show-leaves plugins (RHEL-44922)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.7.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 4.7.0-7" date="1736164800">- needs-restarting: Add --exclude-services flag
  Resolves: RHEL-56137</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 4.7.0-8" date="1737633600">- needs-restarting: Get boot time from systemd UnitsLoadStartTimestamp
  (RHEL-35577)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 4.7.0-9" date="1742472000">- reposync: Avoid multiple downloads of duplicate packages (RHEL-82849)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.7.0-10" date="1764763200">- Document that local packages are not affected by versionlock (RHEL-94828)</changelog>
</package>
<package pkgid="84143aeb104e6433d0aef6c12b3039fc8fed21338ef69d5350c7d9ed3b49a433" name="dnf5" arch="x86_64">
  <version epoch="0" ver="5.1.12" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.8-1" date="1700827200">- Release 5.1.8
- Update translations from weblate
- Don't run infinitely when enabling dependent modules and module is not found
- Always print "[d]" in module list for default streams
- Fix transaction table headers for module operations
- Implement `config-manager addrepo --add-or-replace`
- Implement plugin `config-manager`
- Allow globs in module_spec arguments
- Document needs-restarting plugin
- Add no-op `needs-restarting -r` for DNF 4 compat
- Implement `needs-restarting --services`
- Initial implementation of needs-restarting</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.9-1" date="1702036800">- Release 5.1.9
- Update translations from weblate
- Fix builds for RISC-V arch
- Fix architecture autodetection
- Move `am_i_root` function to common library
- Implement `module info` command
- Add user confirmation request if `history store` overwrites a file
- Add `history store` command
- Add API to serialize base::transaction in JSON
- Add API to serialize transaction::transaction in JSON
- Add docs for `provides`
- Implement command `provides`
- Read `copr.vendor.conf` in `/usr/share` first
- Add docs for `check` command
- Implement `check` command
- Expose `utis/fs/file.hpp` and `temp.hpp` on API
- Document dropping of the `skip-broken` for `upgrade`
- Update man pages with missing dependency resolving-related options
- Document `skip-broken` option only for related commands
- Test for adding an empty list to memory file
- Check serialized temporary files memory is non-empty
- Add `microcode_ctl` to needs-restarting's reboot list
- Fix reporting spec matches only source</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.10-1" date="1704196800">- Release 5.1.10
- Document dnf5 plugins
- Document How-to write libdnf5 plugin tutorial
- Document How-to write dnf5 plugin tutorial
- Document Templates for libdnf5 plugin
- Document Templates for dnf5 plugin
- Sort the module info table
- `module info` print hint for active modules
- `module info` print "[a]" for active modules
- Ensure write permission before importing packages
- Change module dependency string to be the same as in dnf4
- `module info`: improve summary and description
- Escape glob characters in pkg specs for `builddep`
- Add `mc` alias for `makecache`
- Implement `logdir`, `log_size` and `log_rotate` config options
- remove redundant "all" in command `check`
- Improve bash completion
- Fix progress bars miss newlines on non-interactive output</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 5.1.10-2" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.1.10-3" date="1704369600">- Disable zchunk on RHEL</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.11-1" date="1704974400">- Release 5.1.11
- Update translations from weblate
- Fix `--skip-unavailable` documentation
- Make `cachedir`, `system_cachedir` relative to `installroot`
- Workaround for swig-4.2.0 missing fragment dependency
- Add `repoquery --recursive` option
- Add `repoquery --providers-of=PACKAGE_ATTRIBUTE` option
- Update documentation of repoquery
- Update documentation for remove command behavior
- Limit search pattern for remove command to NEVRAs and files
- Packaging: Require an exact release of libdnf5-cli by dnf5-plugins
- Disable zchunk on RHEL
- Add dnf5.conf man page
- Add RPM package Group attribute to dnf5daemon-server
- Document changes related to caching
- Document caching man page
- Document Global Option `--help-cmd` dropped
- log_event: Correct message for HINT_ICASE</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.12-1" date="1707480000">- Release 5.1.12
- Update translations from weblate
- Drop dnf obsoletion temporarily
- Use regex for tmt plan names
- Add tmt tests identifiers
- PackageQuery: Add `filter_{latest,earliest}_evr_ignore_arch`
- Suggest to use dnf5 command to install dnf5 plugins
- Added arch option to the download command
- CI: Upgrade action/checkout to a version with Node.js 20
- Document explicit nevra remove commands and aliases dropped
- build: Include &lt;unistd.h&gt; for isatty()
- Change user info display on history command to include display name and username
- Revert "Use focusbest: prefer latest deps versions over smaller transactions"
- Fix a warning when building docs.
- modules: Add a test for enabling default modules
- modules: Add a new module stream to test data
- modules: Respect defaults when enabling multiple streams of a module
- modules: Fix TransactionItemType for not found modules
- Build: Require GCC 10.1 for std::in_range&lt;&gt;()
- Add --urlprotocol option to download command
- dnfdaemon: Explicitly specify allowed config overrides
- Disable dnf and dnf5daemon tests
- needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
- doc: Add --destdir option to upgrade command manual
- Move number placeholder to postposition in copr_repo.cpp
- Added url option
- Load protected packages from installroot
- Make protected_packages an append options
- doc: Create a man page for Aliases
- I18N: Annotate literals in advisory command
- Extend filter_release and filter_version tests
- package_query: Fix filter_version with non EQ comparator
- Fix clang format
- Fix code for string deduplication
- Use placeholders to deduplicate strings
- Add __hash__(), __str__(), and __repr__() for Package
- Add __hash__() for Reldep Python binding
- Add __repr__() to python bindings of Reldep
- Define tp_str slot for Reldep Class
- group: Fix using allowerasing option
- Fix misspellings
- I18N: Remove duplicate empty message IDs from catalogs
- I18N: Do not mark empty strings for a translation</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.1.12-1.rocky.0.1" date="1709380800">- Add Rocky bugtracker</changelog>
</package>
<package pkgid="a39bb071fff2d1baae9cf6935bc6d310a535307d8f688bbbdd6f462c070169f3" name="dnf5-devel" arch="x86_64">
  <version epoch="0" ver="5.1.12" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.8-1" date="1700827200">- Release 5.1.8
- Update translations from weblate
- Don't run infinitely when enabling dependent modules and module is not found
- Always print "[d]" in module list for default streams
- Fix transaction table headers for module operations
- Implement `config-manager addrepo --add-or-replace`
- Implement plugin `config-manager`
- Allow globs in module_spec arguments
- Document needs-restarting plugin
- Add no-op `needs-restarting -r` for DNF 4 compat
- Implement `needs-restarting --services`
- Initial implementation of needs-restarting</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.9-1" date="1702036800">- Release 5.1.9
- Update translations from weblate
- Fix builds for RISC-V arch
- Fix architecture autodetection
- Move `am_i_root` function to common library
- Implement `module info` command
- Add user confirmation request if `history store` overwrites a file
- Add `history store` command
- Add API to serialize base::transaction in JSON
- Add API to serialize transaction::transaction in JSON
- Add docs for `provides`
- Implement command `provides`
- Read `copr.vendor.conf` in `/usr/share` first
- Add docs for `check` command
- Implement `check` command
- Expose `utis/fs/file.hpp` and `temp.hpp` on API
- Document dropping of the `skip-broken` for `upgrade`
- Update man pages with missing dependency resolving-related options
- Document `skip-broken` option only for related commands
- Test for adding an empty list to memory file
- Check serialized temporary files memory is non-empty
- Add `microcode_ctl` to needs-restarting's reboot list
- Fix reporting spec matches only source</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.10-1" date="1704196800">- Release 5.1.10
- Document dnf5 plugins
- Document How-to write libdnf5 plugin tutorial
- Document How-to write dnf5 plugin tutorial
- Document Templates for libdnf5 plugin
- Document Templates for dnf5 plugin
- Sort the module info table
- `module info` print hint for active modules
- `module info` print "[a]" for active modules
- Ensure write permission before importing packages
- Change module dependency string to be the same as in dnf4
- `module info`: improve summary and description
- Escape glob characters in pkg specs for `builddep`
- Add `mc` alias for `makecache`
- Implement `logdir`, `log_size` and `log_rotate` config options
- remove redundant "all" in command `check`
- Improve bash completion
- Fix progress bars miss newlines on non-interactive output</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 5.1.10-2" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.1.10-3" date="1704369600">- Disable zchunk on RHEL</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.11-1" date="1704974400">- Release 5.1.11
- Update translations from weblate
- Fix `--skip-unavailable` documentation
- Make `cachedir`, `system_cachedir` relative to `installroot`
- Workaround for swig-4.2.0 missing fragment dependency
- Add `repoquery --recursive` option
- Add `repoquery --providers-of=PACKAGE_ATTRIBUTE` option
- Update documentation of repoquery
- Update documentation for remove command behavior
- Limit search pattern for remove command to NEVRAs and files
- Packaging: Require an exact release of libdnf5-cli by dnf5-plugins
- Disable zchunk on RHEL
- Add dnf5.conf man page
- Add RPM package Group attribute to dnf5daemon-server
- Document changes related to caching
- Document caching man page
- Document Global Option `--help-cmd` dropped
- log_event: Correct message for HINT_ICASE</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.12-1" date="1707480000">- Release 5.1.12
- Update translations from weblate
- Drop dnf obsoletion temporarily
- Use regex for tmt plan names
- Add tmt tests identifiers
- PackageQuery: Add `filter_{latest,earliest}_evr_ignore_arch`
- Suggest to use dnf5 command to install dnf5 plugins
- Added arch option to the download command
- CI: Upgrade action/checkout to a version with Node.js 20
- Document explicit nevra remove commands and aliases dropped
- build: Include &lt;unistd.h&gt; for isatty()
- Change user info display on history command to include display name and username
- Revert "Use focusbest: prefer latest deps versions over smaller transactions"
- Fix a warning when building docs.
- modules: Add a test for enabling default modules
- modules: Add a new module stream to test data
- modules: Respect defaults when enabling multiple streams of a module
- modules: Fix TransactionItemType for not found modules
- Build: Require GCC 10.1 for std::in_range&lt;&gt;()
- Add --urlprotocol option to download command
- dnfdaemon: Explicitly specify allowed config overrides
- Disable dnf and dnf5daemon tests
- needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
- doc: Add --destdir option to upgrade command manual
- Move number placeholder to postposition in copr_repo.cpp
- Added url option
- Load protected packages from installroot
- Make protected_packages an append options
- doc: Create a man page for Aliases
- I18N: Annotate literals in advisory command
- Extend filter_release and filter_version tests
- package_query: Fix filter_version with non EQ comparator
- Fix clang format
- Fix code for string deduplication
- Use placeholders to deduplicate strings
- Add __hash__(), __str__(), and __repr__() for Package
- Add __hash__() for Reldep Python binding
- Add __repr__() to python bindings of Reldep
- Define tp_str slot for Reldep Class
- group: Fix using allowerasing option
- Fix misspellings
- I18N: Remove duplicate empty message IDs from catalogs
- I18N: Do not mark empty strings for a translation</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.1.12-1.rocky.0.1" date="1709380800">- Add Rocky bugtracker</changelog>
</package>
<package pkgid="4bb8e09c3340b3b6dbf57bd6c98316aab8e537d437577ee7807cefd41e5dd7a3" name="dnf5-plugins" arch="x86_64">
  <version epoch="0" ver="5.1.12" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.8-1" date="1700827200">- Release 5.1.8
- Update translations from weblate
- Don't run infinitely when enabling dependent modules and module is not found
- Always print "[d]" in module list for default streams
- Fix transaction table headers for module operations
- Implement `config-manager addrepo --add-or-replace`
- Implement plugin `config-manager`
- Allow globs in module_spec arguments
- Document needs-restarting plugin
- Add no-op `needs-restarting -r` for DNF 4 compat
- Implement `needs-restarting --services`
- Initial implementation of needs-restarting</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.9-1" date="1702036800">- Release 5.1.9
- Update translations from weblate
- Fix builds for RISC-V arch
- Fix architecture autodetection
- Move `am_i_root` function to common library
- Implement `module info` command
- Add user confirmation request if `history store` overwrites a file
- Add `history store` command
- Add API to serialize base::transaction in JSON
- Add API to serialize transaction::transaction in JSON
- Add docs for `provides`
- Implement command `provides`
- Read `copr.vendor.conf` in `/usr/share` first
- Add docs for `check` command
- Implement `check` command
- Expose `utis/fs/file.hpp` and `temp.hpp` on API
- Document dropping of the `skip-broken` for `upgrade`
- Update man pages with missing dependency resolving-related options
- Document `skip-broken` option only for related commands
- Test for adding an empty list to memory file
- Check serialized temporary files memory is non-empty
- Add `microcode_ctl` to needs-restarting's reboot list
- Fix reporting spec matches only source</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.10-1" date="1704196800">- Release 5.1.10
- Document dnf5 plugins
- Document How-to write libdnf5 plugin tutorial
- Document How-to write dnf5 plugin tutorial
- Document Templates for libdnf5 plugin
- Document Templates for dnf5 plugin
- Sort the module info table
- `module info` print hint for active modules
- `module info` print "[a]" for active modules
- Ensure write permission before importing packages
- Change module dependency string to be the same as in dnf4
- `module info`: improve summary and description
- Escape glob characters in pkg specs for `builddep`
- Add `mc` alias for `makecache`
- Implement `logdir`, `log_size` and `log_rotate` config options
- remove redundant "all" in command `check`
- Improve bash completion
- Fix progress bars miss newlines on non-interactive output</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 5.1.10-2" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.1.10-3" date="1704369600">- Disable zchunk on RHEL</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.11-1" date="1704974400">- Release 5.1.11
- Update translations from weblate
- Fix `--skip-unavailable` documentation
- Make `cachedir`, `system_cachedir` relative to `installroot`
- Workaround for swig-4.2.0 missing fragment dependency
- Add `repoquery --recursive` option
- Add `repoquery --providers-of=PACKAGE_ATTRIBUTE` option
- Update documentation of repoquery
- Update documentation for remove command behavior
- Limit search pattern for remove command to NEVRAs and files
- Packaging: Require an exact release of libdnf5-cli by dnf5-plugins
- Disable zchunk on RHEL
- Add dnf5.conf man page
- Add RPM package Group attribute to dnf5daemon-server
- Document changes related to caching
- Document caching man page
- Document Global Option `--help-cmd` dropped
- log_event: Correct message for HINT_ICASE</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.12-1" date="1707480000">- Release 5.1.12
- Update translations from weblate
- Drop dnf obsoletion temporarily
- Use regex for tmt plan names
- Add tmt tests identifiers
- PackageQuery: Add `filter_{latest,earliest}_evr_ignore_arch`
- Suggest to use dnf5 command to install dnf5 plugins
- Added arch option to the download command
- CI: Upgrade action/checkout to a version with Node.js 20
- Document explicit nevra remove commands and aliases dropped
- build: Include &lt;unistd.h&gt; for isatty()
- Change user info display on history command to include display name and username
- Revert "Use focusbest: prefer latest deps versions over smaller transactions"
- Fix a warning when building docs.
- modules: Add a test for enabling default modules
- modules: Add a new module stream to test data
- modules: Respect defaults when enabling multiple streams of a module
- modules: Fix TransactionItemType for not found modules
- Build: Require GCC 10.1 for std::in_range&lt;&gt;()
- Add --urlprotocol option to download command
- dnfdaemon: Explicitly specify allowed config overrides
- Disable dnf and dnf5daemon tests
- needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
- doc: Add --destdir option to upgrade command manual
- Move number placeholder to postposition in copr_repo.cpp
- Added url option
- Load protected packages from installroot
- Make protected_packages an append options
- doc: Create a man page for Aliases
- I18N: Annotate literals in advisory command
- Extend filter_release and filter_version tests
- package_query: Fix filter_version with non EQ comparator
- Fix clang format
- Fix code for string deduplication
- Use placeholders to deduplicate strings
- Add __hash__(), __str__(), and __repr__() for Package
- Add __hash__() for Reldep Python binding
- Add __repr__() to python bindings of Reldep
- Define tp_str slot for Reldep Class
- group: Fix using allowerasing option
- Fix misspellings
- I18N: Remove duplicate empty message IDs from catalogs
- I18N: Do not mark empty strings for a translation</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.1.12-1.rocky.0.1" date="1709380800">- Add Rocky bugtracker</changelog>
</package>
<package pkgid="e07c98b53bdae122c23aa3f6f443adba3fb037b6e1bc0e751f3b8a558e3e7a3b" name="dnf5daemon-client" arch="x86_64">
  <version epoch="0" ver="5.1.12" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.8-1" date="1700827200">- Release 5.1.8
- Update translations from weblate
- Don't run infinitely when enabling dependent modules and module is not found
- Always print "[d]" in module list for default streams
- Fix transaction table headers for module operations
- Implement `config-manager addrepo --add-or-replace`
- Implement plugin `config-manager`
- Allow globs in module_spec arguments
- Document needs-restarting plugin
- Add no-op `needs-restarting -r` for DNF 4 compat
- Implement `needs-restarting --services`
- Initial implementation of needs-restarting</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.9-1" date="1702036800">- Release 5.1.9
- Update translations from weblate
- Fix builds for RISC-V arch
- Fix architecture autodetection
- Move `am_i_root` function to common library
- Implement `module info` command
- Add user confirmation request if `history store` overwrites a file
- Add `history store` command
- Add API to serialize base::transaction in JSON
- Add API to serialize transaction::transaction in JSON
- Add docs for `provides`
- Implement command `provides`
- Read `copr.vendor.conf` in `/usr/share` first
- Add docs for `check` command
- Implement `check` command
- Expose `utis/fs/file.hpp` and `temp.hpp` on API
- Document dropping of the `skip-broken` for `upgrade`
- Update man pages with missing dependency resolving-related options
- Document `skip-broken` option only for related commands
- Test for adding an empty list to memory file
- Check serialized temporary files memory is non-empty
- Add `microcode_ctl` to needs-restarting's reboot list
- Fix reporting spec matches only source</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.10-1" date="1704196800">- Release 5.1.10
- Document dnf5 plugins
- Document How-to write libdnf5 plugin tutorial
- Document How-to write dnf5 plugin tutorial
- Document Templates for libdnf5 plugin
- Document Templates for dnf5 plugin
- Sort the module info table
- `module info` print hint for active modules
- `module info` print "[a]" for active modules
- Ensure write permission before importing packages
- Change module dependency string to be the same as in dnf4
- `module info`: improve summary and description
- Escape glob characters in pkg specs for `builddep`
- Add `mc` alias for `makecache`
- Implement `logdir`, `log_size` and `log_rotate` config options
- remove redundant "all" in command `check`
- Improve bash completion
- Fix progress bars miss newlines on non-interactive output</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 5.1.10-2" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.1.10-3" date="1704369600">- Disable zchunk on RHEL</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.11-1" date="1704974400">- Release 5.1.11
- Update translations from weblate
- Fix `--skip-unavailable` documentation
- Make `cachedir`, `system_cachedir` relative to `installroot`
- Workaround for swig-4.2.0 missing fragment dependency
- Add `repoquery --recursive` option
- Add `repoquery --providers-of=PACKAGE_ATTRIBUTE` option
- Update documentation of repoquery
- Update documentation for remove command behavior
- Limit search pattern for remove command to NEVRAs and files
- Packaging: Require an exact release of libdnf5-cli by dnf5-plugins
- Disable zchunk on RHEL
- Add dnf5.conf man page
- Add RPM package Group attribute to dnf5daemon-server
- Document changes related to caching
- Document caching man page
- Document Global Option `--help-cmd` dropped
- log_event: Correct message for HINT_ICASE</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.12-1" date="1707480000">- Release 5.1.12
- Update translations from weblate
- Drop dnf obsoletion temporarily
- Use regex for tmt plan names
- Add tmt tests identifiers
- PackageQuery: Add `filter_{latest,earliest}_evr_ignore_arch`
- Suggest to use dnf5 command to install dnf5 plugins
- Added arch option to the download command
- CI: Upgrade action/checkout to a version with Node.js 20
- Document explicit nevra remove commands and aliases dropped
- build: Include &lt;unistd.h&gt; for isatty()
- Change user info display on history command to include display name and username
- Revert "Use focusbest: prefer latest deps versions over smaller transactions"
- Fix a warning when building docs.
- modules: Add a test for enabling default modules
- modules: Add a new module stream to test data
- modules: Respect defaults when enabling multiple streams of a module
- modules: Fix TransactionItemType for not found modules
- Build: Require GCC 10.1 for std::in_range&lt;&gt;()
- Add --urlprotocol option to download command
- dnfdaemon: Explicitly specify allowed config overrides
- Disable dnf and dnf5daemon tests
- needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
- doc: Add --destdir option to upgrade command manual
- Move number placeholder to postposition in copr_repo.cpp
- Added url option
- Load protected packages from installroot
- Make protected_packages an append options
- doc: Create a man page for Aliases
- I18N: Annotate literals in advisory command
- Extend filter_release and filter_version tests
- package_query: Fix filter_version with non EQ comparator
- Fix clang format
- Fix code for string deduplication
- Use placeholders to deduplicate strings
- Add __hash__(), __str__(), and __repr__() for Package
- Add __hash__() for Reldep Python binding
- Add __repr__() to python bindings of Reldep
- Define tp_str slot for Reldep Class
- group: Fix using allowerasing option
- Fix misspellings
- I18N: Remove duplicate empty message IDs from catalogs
- I18N: Do not mark empty strings for a translation</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.1.12-1.rocky.0.1" date="1709380800">- Add Rocky bugtracker</changelog>
</package>
<package pkgid="d479485bdc6e29458a010833b93342d70ed52e1574df0ce0d9648c188bfaaae0" name="dnf5daemon-server" arch="x86_64">
  <version epoch="0" ver="5.1.12" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.8-1" date="1700827200">- Release 5.1.8
- Update translations from weblate
- Don't run infinitely when enabling dependent modules and module is not found
- Always print "[d]" in module list for default streams
- Fix transaction table headers for module operations
- Implement `config-manager addrepo --add-or-replace`
- Implement plugin `config-manager`
- Allow globs in module_spec arguments
- Document needs-restarting plugin
- Add no-op `needs-restarting -r` for DNF 4 compat
- Implement `needs-restarting --services`
- Initial implementation of needs-restarting</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.9-1" date="1702036800">- Release 5.1.9
- Update translations from weblate
- Fix builds for RISC-V arch
- Fix architecture autodetection
- Move `am_i_root` function to common library
- Implement `module info` command
- Add user confirmation request if `history store` overwrites a file
- Add `history store` command
- Add API to serialize base::transaction in JSON
- Add API to serialize transaction::transaction in JSON
- Add docs for `provides`
- Implement command `provides`
- Read `copr.vendor.conf` in `/usr/share` first
- Add docs for `check` command
- Implement `check` command
- Expose `utis/fs/file.hpp` and `temp.hpp` on API
- Document dropping of the `skip-broken` for `upgrade`
- Update man pages with missing dependency resolving-related options
- Document `skip-broken` option only for related commands
- Test for adding an empty list to memory file
- Check serialized temporary files memory is non-empty
- Add `microcode_ctl` to needs-restarting's reboot list
- Fix reporting spec matches only source</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.10-1" date="1704196800">- Release 5.1.10
- Document dnf5 plugins
- Document How-to write libdnf5 plugin tutorial
- Document How-to write dnf5 plugin tutorial
- Document Templates for libdnf5 plugin
- Document Templates for dnf5 plugin
- Sort the module info table
- `module info` print hint for active modules
- `module info` print "[a]" for active modules
- Ensure write permission before importing packages
- Change module dependency string to be the same as in dnf4
- `module info`: improve summary and description
- Escape glob characters in pkg specs for `builddep`
- Add `mc` alias for `makecache`
- Implement `logdir`, `log_size` and `log_rotate` config options
- remove redundant "all" in command `check`
- Improve bash completion
- Fix progress bars miss newlines on non-interactive output</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 5.1.10-2" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.1.10-3" date="1704369600">- Disable zchunk on RHEL</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.11-1" date="1704974400">- Release 5.1.11
- Update translations from weblate
- Fix `--skip-unavailable` documentation
- Make `cachedir`, `system_cachedir` relative to `installroot`
- Workaround for swig-4.2.0 missing fragment dependency
- Add `repoquery --recursive` option
- Add `repoquery --providers-of=PACKAGE_ATTRIBUTE` option
- Update documentation of repoquery
- Update documentation for remove command behavior
- Limit search pattern for remove command to NEVRAs and files
- Packaging: Require an exact release of libdnf5-cli by dnf5-plugins
- Disable zchunk on RHEL
- Add dnf5.conf man page
- Add RPM package Group attribute to dnf5daemon-server
- Document changes related to caching
- Document caching man page
- Document Global Option `--help-cmd` dropped
- log_event: Correct message for HINT_ICASE</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.12-1" date="1707480000">- Release 5.1.12
- Update translations from weblate
- Drop dnf obsoletion temporarily
- Use regex for tmt plan names
- Add tmt tests identifiers
- PackageQuery: Add `filter_{latest,earliest}_evr_ignore_arch`
- Suggest to use dnf5 command to install dnf5 plugins
- Added arch option to the download command
- CI: Upgrade action/checkout to a version with Node.js 20
- Document explicit nevra remove commands and aliases dropped
- build: Include &lt;unistd.h&gt; for isatty()
- Change user info display on history command to include display name and username
- Revert "Use focusbest: prefer latest deps versions over smaller transactions"
- Fix a warning when building docs.
- modules: Add a test for enabling default modules
- modules: Add a new module stream to test data
- modules: Respect defaults when enabling multiple streams of a module
- modules: Fix TransactionItemType for not found modules
- Build: Require GCC 10.1 for std::in_range&lt;&gt;()
- Add --urlprotocol option to download command
- dnfdaemon: Explicitly specify allowed config overrides
- Disable dnf and dnf5daemon tests
- needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
- doc: Add --destdir option to upgrade command manual
- Move number placeholder to postposition in copr_repo.cpp
- Added url option
- Load protected packages from installroot
- Make protected_packages an append options
- doc: Create a man page for Aliases
- I18N: Annotate literals in advisory command
- Extend filter_release and filter_version tests
- package_query: Fix filter_version with non EQ comparator
- Fix clang format
- Fix code for string deduplication
- Use placeholders to deduplicate strings
- Add __hash__(), __str__(), and __repr__() for Package
- Add __hash__() for Reldep Python binding
- Add __repr__() to python bindings of Reldep
- Define tp_str slot for Reldep Class
- group: Fix using allowerasing option
- Fix misspellings
- I18N: Remove duplicate empty message IDs from catalogs
- I18N: Do not mark empty strings for a translation</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.1.12-1.rocky.0.1" date="1709380800">- Add Rocky bugtracker</changelog>
</package>
<package pkgid="87bb1079636d97f7e443f8baf2b32115c70f7a0febd9d36d84f147b5930be883" name="dnsconfd" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="1.el10"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.0.2-2" date="1719576000">- Initial build</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.1.2-1" date="1722340800">- Release 1.1.2</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.0-1" date="1723809600">- Release 1.2.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.0-1" date="1739448000">- Rebase to 1.7.0
- Resolves: RHEL-79172</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.1-1" date="1739448001">- Rebase to 1.7.1
- Resolves: RHEL-79172</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.2-1" date="1740744000">- Rebase to 1.7.2
- Resolves: RHEL-80304</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.3-1" date="1748952000">- Rebase to 1.7.3
- Resolves: RHEL-92412
- Resolves: RHEL-88534
- Resolves: RHEL-81709</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.3-2" date="1749124800">- Rebuild because of infrastructure problems
- Resolves: RHEL-92412
- Resolves: RHEL-88534
- Resolves: RHEL-81709</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.5-1" date="1767873600">- Rebase to 1.7.5
- Resolves: RHEL-139870</changelog>
</package>
<package pkgid="eeb4698037a7d0febbf85c9cdc8fdf6470f292fc6c183eda453be84c002969ca" name="dnsconfd-dracut" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="1.el10"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.0.2-2" date="1719576000">- Initial build</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.1.2-1" date="1722340800">- Release 1.1.2</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.0-1" date="1723809600">- Release 1.2.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.0-1" date="1739448000">- Rebase to 1.7.0
- Resolves: RHEL-79172</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.1-1" date="1739448001">- Rebase to 1.7.1
- Resolves: RHEL-79172</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.2-1" date="1740744000">- Rebase to 1.7.2
- Resolves: RHEL-80304</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.3-1" date="1748952000">- Rebase to 1.7.3
- Resolves: RHEL-92412
- Resolves: RHEL-88534
- Resolves: RHEL-81709</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.3-2" date="1749124800">- Rebuild because of infrastructure problems
- Resolves: RHEL-92412
- Resolves: RHEL-88534
- Resolves: RHEL-81709</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.5-1" date="1767873600">- Rebase to 1.7.5
- Resolves: RHEL-139870</changelog>
</package>
<package pkgid="b94fa23e0ef1284343535296f626348ceceec42a6431eae6eef1875a2c4b5bd2" name="dnsconfd-micro" arch="x86_64">
  <version epoch="0" ver="1.7.5" rel="1.el10"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.0.2-2" date="1719576000">- Initial build</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.1.2-1" date="1722340800">- Release 1.1.2</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.0-1" date="1723809600">- Release 1.2.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.0-1" date="1739448000">- Rebase to 1.7.0
- Resolves: RHEL-79172</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.1-1" date="1739448001">- Rebase to 1.7.1
- Resolves: RHEL-79172</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.2-1" date="1740744000">- Rebase to 1.7.2
- Resolves: RHEL-80304</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.3-1" date="1748952000">- Rebase to 1.7.3
- Resolves: RHEL-92412
- Resolves: RHEL-88534
- Resolves: RHEL-81709</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.3-2" date="1749124800">- Rebuild because of infrastructure problems
- Resolves: RHEL-92412
- Resolves: RHEL-88534
- Resolves: RHEL-81709</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.5-1" date="1767873600">- Rebase to 1.7.5
- Resolves: RHEL-139870</changelog>
</package>
<package pkgid="aa55bff3e8f3a48609121f48ff613c7f30ff3ce47e48a2762ba9d4a9ef44737e" name="dnsconfd-selinux" arch="noarch">
  <version epoch="0" ver="1.7.5" rel="1.el10"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.0.2-2" date="1719576000">- Initial build</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.1.2-1" date="1722340800">- Release 1.1.2</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.0-1" date="1723809600">- Release 1.2.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.0-1" date="1739448000">- Rebase to 1.7.0
- Resolves: RHEL-79172</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.1-1" date="1739448001">- Rebase to 1.7.1
- Resolves: RHEL-79172</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.2-1" date="1740744000">- Rebase to 1.7.2
- Resolves: RHEL-80304</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.3-1" date="1748952000">- Rebase to 1.7.3
- Resolves: RHEL-92412
- Resolves: RHEL-88534
- Resolves: RHEL-81709</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.3-2" date="1749124800">- Rebuild because of infrastructure problems
- Resolves: RHEL-92412
- Resolves: RHEL-88534
- Resolves: RHEL-81709</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.5-1" date="1767873600">- Rebase to 1.7.5
- Resolves: RHEL-139870</changelog>
</package>
<package pkgid="ad6c67ae11951cd31a1bed864296e09d9b45585a2ee9e6e171461479b28150a5" name="dnsconfd-unbound" arch="noarch">
  <version epoch="0" ver="1.7.5" rel="1.el10"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.0.2-2" date="1719576000">- Initial build</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.1.2-1" date="1722340800">- Release 1.1.2</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.0-1" date="1723809600">- Release 1.2.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.0-1" date="1739448000">- Rebase to 1.7.0
- Resolves: RHEL-79172</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.1-1" date="1739448001">- Rebase to 1.7.1
- Resolves: RHEL-79172</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.2-1" date="1740744000">- Rebase to 1.7.2
- Resolves: RHEL-80304</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.3-1" date="1748952000">- Rebase to 1.7.3
- Resolves: RHEL-92412
- Resolves: RHEL-88534
- Resolves: RHEL-81709</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.3-2" date="1749124800">- Rebuild because of infrastructure problems
- Resolves: RHEL-92412
- Resolves: RHEL-88534
- Resolves: RHEL-81709</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.7.5-1" date="1767873600">- Rebase to 1.7.5
- Resolves: RHEL-139870</changelog>
</package>
<package pkgid="ceee77e73cb1cd643f16ddf68e6e12beab7c898271fe3d89015eeddf7671f1f9" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.90" rel="7.el10_2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.90-2" date="1715256000">- Update SPDX in license tag to use uppercase conjunction</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.90-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.90-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2.90-5" date="1764936000">- Added installation of tmpfiles.d config
  Resolves: RHEL-122843</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.90-6" date="1773835200">- Prevent heap buffer overflow in cache via NAME_ESCAPE expansion
  (CVE-2026-2291)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.90-7" date="1777982400">- Prevent overflow in extract_name function (CVE-2026-2291)
- Prevent DoS in DNSSEC validation (CVE-2026-4890)
- Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891)
- Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892)
- Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893)
- Prevent out-of-bounds read in extract_addresses (CVE-2026-5172)</changelog>
</package>
<package pkgid="40d00778220b0932260ad4f9d3a9af359a5394aefaf1e1927bcfce97476c4ddd" name="dnsmasq-langpack" arch="noarch">
  <version epoch="0" ver="2.90" rel="7.el10_2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.90-2" date="1715256000">- Update SPDX in license tag to use uppercase conjunction</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.90-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.90-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2.90-5" date="1764936000">- Added installation of tmpfiles.d config
  Resolves: RHEL-122843</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.90-6" date="1773835200">- Prevent heap buffer overflow in cache via NAME_ESCAPE expansion
  (CVE-2026-2291)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.90-7" date="1777982400">- Prevent overflow in extract_name function (CVE-2026-2291)
- Prevent DoS in DNSSEC validation (CVE-2026-4890)
- Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891)
- Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892)
- Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893)
- Prevent out-of-bounds read in extract_addresses (CVE-2026-5172)</changelog>
</package>
<package pkgid="ae6ff2c8ce36cbb6bf19a53f942e650731a734741e8679c5bc93d97c834efb80" name="dnsmasq-utils" arch="x86_64">
  <version epoch="0" ver="2.90" rel="7.el10_2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.90-2" date="1715256000">- Update SPDX in license tag to use uppercase conjunction</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.90-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.90-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 2.90-5" date="1764936000">- Added installation of tmpfiles.d config
  Resolves: RHEL-122843</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.90-6" date="1773835200">- Prevent heap buffer overflow in cache via NAME_ESCAPE expansion
  (CVE-2026-2291)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.90-7" date="1777982400">- Prevent overflow in extract_name function (CVE-2026-2291)
- Prevent DoS in DNSSEC validation (CVE-2026-4890)
- Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891)
- Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892)
- Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893)
- Prevent out-of-bounds read in extract_addresses (CVE-2026-5172)</changelog>
</package>
<package pkgid="f4c280712695e6a4d2e515bef258a620e05c55b6adc61de31a2407022001356d" name="docbook-dtds" arch="noarch">
  <version epoch="0" ver="1.0" rel="92.el10"/>
  <changelog author="Ondrej Sloup &lt;osloup@redhat.com&gt; - 1.0-83" date="1694692800">- Use %patch -P N instead of deprecated %patchN
- Use RPM macros in the spec file for paths
- Add comments, improve the structure
- Unify paths in patch files
- Simplify install script</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-84" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-85" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0-86" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ondrej Sloup &lt;osloup@redhat.com&gt; - 1.0-87" date="1719921600">- Update license tag to the SPDX format (LicenseRef-docbook-dtds) 
- Resolves: RHEL-45839</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0-88" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Kopecek &lt;tkopecek@redhat.com&gt; - 1.0-89" date="1739793600">- Rebuild for Konflux</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 1.0-90" date="1743076800">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.0-91" date="1747310400">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 1.0-92" date="1750852800">- Konflux RHEL on GitLab onboarding rebuild (Resolves: RHEL-84822)</changelog>
</package>
<package pkgid="ade8127ee0628670ace9edf45b8c80ffde65e801cf48ce6d6b445cb03b1581e5" name="docbook-style-dsssl" arch="noarch">
  <version epoch="0" ver="1.79" rel="45.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.79-36" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ondrej Sloup &lt;osloup@redhat.com&gt; - 1.79-37" date="1698062400">- Update license tag to the SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.79-38" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.79-39" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.79-40" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.79-41" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Kopecek &lt;tkopecek@redhat.com&gt; - 1.79-42" date="1739793600">- Rebuild for Konflux</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 1.79-43" date="1743076800">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.79-44" date="1747310400">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 1.79-45" date="1750852800">- Konflux RHEL on GitLab onboarding rebuild (Resolves: RHEL-84822)</changelog>
</package>
<package pkgid="da718b9609aaa527866b277b9c80a4ccc8772941ac7b02ca5bd1907bed7654f5" name="docbook-style-xsl" arch="noarch">
  <version epoch="0" ver="1.79.2" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.79.2-21" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.79.2-22" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.79.2-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.79.2-24" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Kopecek &lt;tkopecek@redhat.com&gt; - 1.79.2-25" date="1739793600">- Rebuild for Konflux</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 1.79.2-26" date="1743076800">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 1.79.2-27" date="1743422400">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 1.79.2-28" date="1743422401">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt;" date="1747310400">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 1.79.2-30" date="1750852800">- Konflux RHEL on GitLab onboarding rebuild (Resolves: RHEL-84822)</changelog>
</package>
<package pkgid="16c60ae9d1edc9552a1781cdeaf4d6598a242f6064164e74cf9ebef680f98836" name="docbook-utils" arch="noarch">
  <version epoch="0" ver="0.6.14" rel="62.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.14-56" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.14-57" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ondrej Sloup &lt;osloup@redhat.com&gt; - 0.6.14-58" date="1698062400">- Update license tag to the SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.14-59" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.14-60" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.14-61" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.14-62" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="86e82773a9713c2a1be27e20f2d2072f0d40d750e898d234cd60a55b0b56e4d3" name="docbook-utils-pdf" arch="noarch">
  <version epoch="0" ver="0.6.14" rel="62.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.14-56" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.14-57" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ondrej Sloup &lt;osloup@redhat.com&gt; - 0.6.14-58" date="1698062400">- Update license tag to the SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.14-59" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.14-60" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.14-61" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.14-62" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5aaacf1790b9959f8778f48542db4b98dae59316718965f8662d5b401b315231" name="docbook2X" arch="x86_64">
  <version epoch="0" ver="0.8.8" rel="50.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.8-44" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.8-45" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.8-46" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.8-47" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.8-48" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 0.8.8-49" date="1724241600">- Fix SPDX license tag based on further research
- https://gitlab.com/fedora/legal/fedora-license-data/-/issues/396#note_1976038980
- Related: RHEL-37885</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.8-50" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7b950a50163943c2c7fbf96f730860fd0791a8e0a2f98f4e820f7f7785a76ade" name="docbook5-schemas" arch="noarch">
  <version epoch="0" ver="5.1" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1-10" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 5.1-12" date="1724068800">- Remove unlicensed perl script and howto docs</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 5.1-14" date="1732795200">- Change license tag to SPDX license
- Resolves: RHEL-37893</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 5.1-15" date="1739793600">- Rebuild for Konflux</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 5.1-16" date="1743076800">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 5.1-17" date="1747310400">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 5.1-18" date="1750852800">- Konflux RHEL on GitLab onboarding rebuild (Resolves: RHEL-84822)</changelog>
</package>
<package pkgid="e92f2952be115bb3ce0f4ff4a71f9bdd68410847349993df2d79b25728b2b941" name="docbook5-style-xsl" arch="noarch">
  <version epoch="0" ver="1.79.2" rel="23.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.79.2-15" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.79.2-16" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.79.2-17" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.79.2-18" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.79.2-19" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ondrej Sloup &lt;osloup@redhat.com&gt; - 1.79.2-20" date="1719662400">- Remove binary JAR files and replace them with available dependencies
- Related: RHEL-37894</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.79.2-21" date="1721822400">- Drop unused tools directory
- Limit Java dependency to extensions subpackage</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 1.79.2-22" date="1724241600">- Add missing SPDX licenses to license tag
- https://gitlab.com/fedora/legal/fedora-license-data/-/issues/396#note_1975708712
- Related: RHEL-37894</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.79.2-23" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d8ebe4d3d79626fd67a6710a3b6c1e169faf890046230e3ac3eca4222d8580c4" name="doctest-devel" arch="x86_64">
  <version epoch="0" ver="2.4.9" rel="1.el10"/>
  <changelog author="Rocky Linux Build System (Peridot) &lt;releng@rockylinux.org&gt; - 2.4.9-1.el10" date="1709380800">- local build</changelog>
</package>
<package pkgid="c473c8e82d271e79349af25a65c524060e95796c9e87f27bd1708cfe4ab6a018" name="dos2unix" arch="x86_64">
  <version epoch="0" ver="7.5.2" rel="3.el10"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 7.4.4-2" date="1676980800">- migrated to SPDX license</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 7.5.0-1" date="1684411200">- Update to 7.5.0 (bug #2208091).</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.5.0-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 7.5.1-1" date="1695211200">- Update to 7.5.1 (bug #2235872).</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 7.5.1-2" date="1699876800">- Add gpg signature check
- Misc changes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.5.1-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.5.1-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 7.5.2-1" date="1706097601">- Update to 7.5.2 (bug #2259911).</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.5.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.5.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="41c17ef813ac2bd3be6cbd977d6aa79a4bc66d55037fa5da23aeb128f9a7d104" name="dosfstools" arch="x86_64">
  <version epoch="0" ver="4.2" rel="12.el10"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 4.2-5" date="1671105600">- Added weak dependency on glibc-gconv-extra
  Resolves: rhbz#2021638</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 4.2-8" date="1691668800">- Converted license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2-10" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.2-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.2-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cdaebe36e6baed92eb1521ae90c545c98a34749601658cf68e0384112218fab2" name="dotconf" arch="x86_64">
  <version epoch="0" ver="1.3" rel="37.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-31" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-32" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-33" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-34" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.3-35" date="1707739200">- Build for the SPDX license format change</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-36" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-37" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b6220cf2adbf959ed7821282ef5ff1b3d18a84326741fc6cc9bc8f750d167d46" name="dotconf-devel" arch="x86_64">
  <version epoch="0" ver="1.3" rel="37.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-31" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-32" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-33" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-34" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.3-35" date="1707739200">- Build for the SPDX license format change</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-36" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-37" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8b78eac293a2989b014a57f08ff6630c185129794f7557bdc587e4b137c051a3" name="dotnet-apphost-pack-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.10" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
</package>
<package pkgid="327f318b61cc7fa59eba2168387ddc2a508b1a014ef9700ca8a5e54d21d753a6" name="dotnet-apphost-pack-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.11" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.111-1" date="1786276800">- Update to .NET SDK 10.0.111 and Runtime 10.0.11
- Resolves: RHEL-235482</changelog>
</package>
<package pkgid="a856842fc627b4930718a00024a30f2d576081bb777d4d79b5965a7c922e7ec0" name="dotnet-apphost-pack-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.6" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~preview.7.25380.108-0.9" date="1757419200">- Disable bootstrap
- Related: RHEL-98678</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.10" date="1757851200">- Update to .NET 10 RC 1
- Resolves: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
</package>
<package pkgid="a57cb0b4151d3bf3f03a0cbe6ce36bcb086e92cf9124248a691b239af8c162d4" name="dotnet-apphost-pack-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.8" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
</package>
<package pkgid="8c002c07ec725bcd1860d0580522f14ee95c01ef6170c5737f203f903610ddf0" name="dotnet-apphost-pack-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
</package>
<package pkgid="66a7f690220ac708a084cb0c3a6f5f493312175387993b3d3e313860269a5dd1" name="dotnet-apphost-pack-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.26" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.117-2" date="1749643200">- Update to .NET SDK 8.0.117 and Runtime 8.0.17
- Resolves: RHEL-94416</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
</package>
<package pkgid="b832d0f8c5618dd77b5e2ef6de7247fdfaf658c3935ea469ccffe4e56dc071f2" name="dotnet-apphost-pack-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.27" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
</package>
<package pkgid="1ecbcb6ce7a8236d83cde1f29946fdf353a5cb9612cb99711dddbcb7c529297f" name="dotnet-apphost-pack-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
</package>
<package pkgid="ab8a3e915447c2e3b1ee773e1363ddc6f2b7070cc4aaae1c11db7ef9ead465c4" name="dotnet-apphost-pack-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
</package>
<package pkgid="66f64566a6814d58c6134c502b17139086025d2d5af4a8e07288a4bddb179cf4" name="dotnet-apphost-pack-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.130-1" date="1786276800">- Update to .NET SDK 8.0.130 and Runtime 8.0.30
- Resolves: RHEL-235472</changelog>
</package>
<package pkgid="e566d6e1cfab9f3dbf27ecc13edee8be92b81e70cad9001b524515c41f08db88" name="dotnet-apphost-pack-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.15" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.107-2" date="1749643200">- Update to .NET SDK 9.0.107 and Runtime 9.0.6
- Resolves: RHEL-94423</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
</package>
<package pkgid="d9425ff0644590e579efb93efe8756c2d291f992739ce24d0a0938d770b1077d" name="dotnet-apphost-pack-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.16" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
</package>
<package pkgid="8b1f3044855d59c9a9b7dd777884eefcf92947c02b9a14753265a0fdb8a306c4" name="dotnet-apphost-pack-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.17" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
</package>
<package pkgid="71cbcc52a2e863575df4bccafe8568fc2d3c0701b7e9e5b515434b18be8d247a" name="dotnet-apphost-pack-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.18" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
</package>
<package pkgid="6d8bdba795a2eda55ba3a59a23072716f81daa2f541104794ff4e9ba51680fa5" name="dotnet-apphost-pack-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.19" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.120-1" date="1786276800">- Update to .NET SDK 9.0.120 and Runtime 9.0.19
- Resolves: RHEL-235477</changelog>
</package>
<package pkgid="f8e2730aa19aca98760bae3a0279d0b97b1b0ab845a3cd3fe6de4a9c5b2cdf5f" name="dotnet-host" arch="x86_64">
  <version epoch="0" ver="10.0.10" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
</package>
<package pkgid="d54843d803797db14cf62f3be5dc5cff0de44e52a490304236eceaf0ee3e654c" name="dotnet-host" arch="x86_64">
  <version epoch="0" ver="10.0.11" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.111-1" date="1786276800">- Update to .NET SDK 10.0.111 and Runtime 10.0.11
- Resolves: RHEL-235482</changelog>
</package>
<package pkgid="0289dcedfdc63dfcfc19c8b4e648d0871b264c76264b24418fa217df04dcd4ca" name="dotnet-host" arch="x86_64">
  <version epoch="0" ver="10.0.6" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~preview.7.25380.108-0.9" date="1757419200">- Disable bootstrap
- Related: RHEL-98678</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.10" date="1757851200">- Update to .NET 10 RC 1
- Resolves: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
</package>
<package pkgid="7fe9fca26c08fd034a55fa00b73792b5a1d38fffc101aa572205dcf0414e9836" name="dotnet-host" arch="x86_64">
  <version epoch="0" ver="10.0.8" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
</package>
<package pkgid="d0aa2bb27e52be0641aa4af95714ec70e35b6bd81d468378a17b15821edc54fd" name="dotnet-host" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
</package>
<package pkgid="e61490f9f76f5e4514334a2f9ff32c3b09bb80dbca0c9aa00a94cee6e8419698" name="dotnet-hostfxr-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.10" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
</package>
<package pkgid="c62f32890ec8798e42db9102ea9a7269c819aad42c2a59677a435ba3c0438793" name="dotnet-hostfxr-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.11" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.111-1" date="1786276800">- Update to .NET SDK 10.0.111 and Runtime 10.0.11
- Resolves: RHEL-235482</changelog>
</package>
<package pkgid="c2aa903541c6adda30f0e2686db382b6ab75d7a5f0ddfecc339ae71e3d95d4e7" name="dotnet-hostfxr-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.6" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~preview.7.25380.108-0.9" date="1757419200">- Disable bootstrap
- Related: RHEL-98678</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.10" date="1757851200">- Update to .NET 10 RC 1
- Resolves: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
</package>
<package pkgid="9c7877512c538152d13ec95ed9a2b4c0fdde6a0649cd3c0876a9916dc87f5728" name="dotnet-hostfxr-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.8" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
</package>
<package pkgid="fc2b9bbe8d5f624e578adbf55e4bbcaa125761d330c6269717e0dec3c445ec94" name="dotnet-hostfxr-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
</package>
<package pkgid="84f26bb089217d6e47799f2d112c4c7bd7b564fc1351967610e78215486a2886" name="dotnet-hostfxr-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.26" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.117-2" date="1749643200">- Update to .NET SDK 8.0.117 and Runtime 8.0.17
- Resolves: RHEL-94416</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
</package>
<package pkgid="00019d26d8fc6bdd72d68c43560a07e682547d2a1b5b77aef694dbd0dec35633" name="dotnet-hostfxr-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.27" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
</package>
<package pkgid="939fc6ed5ac9512d7d0b5182dce3af472c83b4fd9be3c2495ef63d7e4e5007ae" name="dotnet-hostfxr-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
</package>
<package pkgid="d4b383545ae885209c284fc6f68ab2e3e901fb53266cccfdec48acd63315a6b9" name="dotnet-hostfxr-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
</package>
<package pkgid="e1daa200f31f75b9f89f0695107c88861e8669e39b0acf324486b83cf5346c50" name="dotnet-hostfxr-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.130-1" date="1786276800">- Update to .NET SDK 8.0.130 and Runtime 8.0.30
- Resolves: RHEL-235472</changelog>
</package>
<package pkgid="4754a6c67ae6f9b5cf5de128672bfd1db0a8a848472655ab6c7b29799cdcea32" name="dotnet-hostfxr-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.15" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.107-2" date="1749643200">- Update to .NET SDK 9.0.107 and Runtime 9.0.6
- Resolves: RHEL-94423</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
</package>
<package pkgid="a0ab21285ae4e1f5e83df875aa45e13937d6ab94fb4583301f129e35c1f6d088" name="dotnet-hostfxr-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.16" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
</package>
<package pkgid="38f664d1e4c382bbfaa2c237d3a54e230fcd7a0702eccf765cabc7634f69acc5" name="dotnet-hostfxr-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.17" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
</package>
<package pkgid="e9065ec1e4d82789fd405d4664ea61cba3c4301e574f3b4e811bc67f0300626a" name="dotnet-hostfxr-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.18" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
</package>
<package pkgid="50f2c589a621ca4f45659b1000fcc88222fe05bdde522893b18f7a937c71cf9b" name="dotnet-hostfxr-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.19" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.120-1" date="1786276800">- Update to .NET SDK 9.0.120 and Runtime 9.0.19
- Resolves: RHEL-235477</changelog>
</package>
<package pkgid="30216143c69e19d35a1ffd5532eadabfb50a6242356af5d4f9b6f4cb56a10ee3" name="dotnet-runtime-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.10" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
</package>
<package pkgid="0263cc850340a8e3246f926d6139c30e16b316434acab0bffb949d31bf281558" name="dotnet-runtime-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.11" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.111-1" date="1786276800">- Update to .NET SDK 10.0.111 and Runtime 10.0.11
- Resolves: RHEL-235482</changelog>
</package>
<package pkgid="e241d0dd92d7e86d33bceda6b702da55527d690489b11118a7ba81a11283f272" name="dotnet-runtime-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.6" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~preview.7.25380.108-0.9" date="1757419200">- Disable bootstrap
- Related: RHEL-98678</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.10" date="1757851200">- Update to .NET 10 RC 1
- Resolves: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
</package>
<package pkgid="438618b52418991ce91bdca743698bda68c353e0609306fe33ef18519250c47a" name="dotnet-runtime-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.8" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
</package>
<package pkgid="5a327c21e94372e79d46ad727eed29152ce3b13b61950cdd5be61431b63ac790" name="dotnet-runtime-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
</package>
<package pkgid="33c3ff2e0bcdbeb6d7a5e7be772577954ce811a12caa03ac8178d839b1987be5" name="dotnet-runtime-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.26" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.117-2" date="1749643200">- Update to .NET SDK 8.0.117 and Runtime 8.0.17
- Resolves: RHEL-94416</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
</package>
<package pkgid="a7275c7686d15b9d1b3d34321b5a805f464bb3a078ac81d074e915feef80bd5a" name="dotnet-runtime-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.27" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
</package>
<package pkgid="97a5c0642c68dc48390a2ccfb1eda8af71849836c8073a92ae4218094ddc741b" name="dotnet-runtime-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
</package>
<package pkgid="a29340d6a797057d739dc92044059e0d1cffa09a430c665eed15a8207155baf4" name="dotnet-runtime-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
</package>
<package pkgid="ff9110f50c5d3bd96ff09c32543d3549dc94582cb465aaea7391915c6537e8fb" name="dotnet-runtime-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.130-1" date="1786276800">- Update to .NET SDK 8.0.130 and Runtime 8.0.30
- Resolves: RHEL-235472</changelog>
</package>
<package pkgid="ced26dd65a3986c59360352f7ca07afcb1a988ca7cbe2c7c04052ebc0fe99e45" name="dotnet-runtime-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.15" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.107-2" date="1749643200">- Update to .NET SDK 9.0.107 and Runtime 9.0.6
- Resolves: RHEL-94423</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
</package>
<package pkgid="637c58093f8fd3c7e4a7eae6edb0fd46c9b7ca8fb6d3df56ba6c2a002c14b6f0" name="dotnet-runtime-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.16" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
</package>
<package pkgid="e4c54fbb3a79ca39092d1b5fdc26800e4981abcb2485e85a5a7646ae9d73776c" name="dotnet-runtime-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.17" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
</package>
<package pkgid="bf3da998d8eb4e5c940d10c417912a7a5bac7cef56dc989a55e8de505210eac5" name="dotnet-runtime-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.18" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
</package>
<package pkgid="e88057914fdafd5a9611664962425b918b672e3d722c92683b345ccf341231a8" name="dotnet-runtime-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.19" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.120-1" date="1786276800">- Update to .NET SDK 9.0.120 and Runtime 9.0.19
- Resolves: RHEL-235477</changelog>
</package>
<package pkgid="2589d056a673bd041a2d8185ee0543fb635588de87e12562de4a1a02ebf182cd" name="dotnet-runtime-dbg-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.10" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
</package>
<package pkgid="1be763f42346338a844ac4d0090cec84684022fc4990f3bd34c33dcf4349dcb6" name="dotnet-runtime-dbg-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.11" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.111-1" date="1786276800">- Update to .NET SDK 10.0.111 and Runtime 10.0.11
- Resolves: RHEL-235482</changelog>
</package>
<package pkgid="9d8d9794fa984ddd54c09b56a2615473321fa32d9a1ab2534a8ebc15a1dcba2e" name="dotnet-runtime-dbg-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.6" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~preview.7.25380.108-0.9" date="1757419200">- Disable bootstrap
- Related: RHEL-98678</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.10" date="1757851200">- Update to .NET 10 RC 1
- Resolves: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
</package>
<package pkgid="aa53c036a0bdf5e83bbd7643b73aaf8784e335d358ff178cba35b141bb51fd86" name="dotnet-runtime-dbg-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.8" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
</package>
<package pkgid="36d74044bc25f1270be8fd2b00c1ea140efad68062d1fa9b30d20b5265c70225" name="dotnet-runtime-dbg-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
</package>
<package pkgid="1eaa19a186ac691d741ee1b9d350f6b75ee7f0b58d31bf7ac2b3f6c6baf6acba" name="dotnet-runtime-dbg-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.26" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.117-2" date="1749643200">- Update to .NET SDK 8.0.117 and Runtime 8.0.17
- Resolves: RHEL-94416</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
</package>
<package pkgid="8269d84a1d947e82a46efe927f8e5b0201b36fbb192c171c988abe5453e22704" name="dotnet-runtime-dbg-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.27" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
</package>
<package pkgid="a393ea26e5958c92ccdf1591407bd94e45ca7a562676ca4a94f8832f84a54bf7" name="dotnet-runtime-dbg-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
</package>
<package pkgid="02d8e8787e69f413b75704656bdf1e8072e82f6036bbc8a50f27525948d3c403" name="dotnet-runtime-dbg-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
</package>
<package pkgid="ab89633421acc26633eb18f615c7091c25f25a9eedda66a57634b4fd4970189e" name="dotnet-runtime-dbg-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.130-1" date="1786276800">- Update to .NET SDK 8.0.130 and Runtime 8.0.30
- Resolves: RHEL-235472</changelog>
</package>
<package pkgid="65a6a02a6e22eeeb699cf0084576877b873e09b4b0bd0cd948678e08716e081c" name="dotnet-runtime-dbg-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.15" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.107-2" date="1749643200">- Update to .NET SDK 9.0.107 and Runtime 9.0.6
- Resolves: RHEL-94423</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
</package>
<package pkgid="79a0f4949a37c438ce59446f8eae329e97d5ee14b875fbf80d11e11cb92da67b" name="dotnet-runtime-dbg-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.16" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
</package>
<package pkgid="23d7ccf7f4cbf5fc335cc9d4fd005d6424983e6b4d4bed3b28eb170cbc2f50aa" name="dotnet-runtime-dbg-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.17" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
</package>
<package pkgid="c426ce940c53a8ce2ac07c4ce45a050fa9f064aaad779c82e91785b3cf567f17" name="dotnet-runtime-dbg-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.18" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
</package>
<package pkgid="c99b3badf0bbbe012c3698bc731961f70f9316584c3bc8ca55cd80242306d39a" name="dotnet-runtime-dbg-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.19" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.120-1" date="1786276800">- Update to .NET SDK 9.0.120 and Runtime 9.0.19
- Resolves: RHEL-235477</changelog>
</package>
<package pkgid="3f4b01d675e1161279e7231324fb3dbd35a41883403337cdc8538cbbdd43c35f" name="dotnet-sdk-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.106" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~preview.7.25380.108-0.9" date="1757419200">- Disable bootstrap
- Related: RHEL-98678</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.10" date="1757851200">- Update to .NET 10 RC 1
- Resolves: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
</package>
<package pkgid="f2c92e92e45c2832eab4fbb63316093042abe57151a976cef7b1dde47bea66d2" name="dotnet-sdk-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.108" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
</package>
<package pkgid="c1f241fad5de5597af18b089f6feb9502fbd78421b83340968787c48f0833b8e" name="dotnet-sdk-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.109" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
</package>
<package pkgid="022fed8512ed2f97b2bb0335ec6697a3e69e6c3a77dae50aa4dc2eddd5cd74c4" name="dotnet-sdk-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.110" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
</package>
<package pkgid="1f0c60af82877a29b8f16d679d012422e7e9840e277c0121eb8fc23d5c8f50c0" name="dotnet-sdk-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.111" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.111-1" date="1786276800">- Update to .NET SDK 10.0.111 and Runtime 10.0.11
- Resolves: RHEL-235482</changelog>
</package>
<package pkgid="ae73bd8dafb41cb78fb19e52f772579ccddf40735ca63171d5022fdec47eaffb" name="dotnet-sdk-10.0-source-built-artifacts" arch="x86_64">
  <version epoch="0" ver="10.0.106" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~preview.7.25380.108-0.9" date="1757419200">- Disable bootstrap
- Related: RHEL-98678</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.10" date="1757851200">- Update to .NET 10 RC 1
- Resolves: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
</package>
<package pkgid="d5e9a2b825426f1a77ec2fc2bd246304e7b7ac7ebd6c08f9f8a98d13ca217c9f" name="dotnet-sdk-10.0-source-built-artifacts" arch="x86_64">
  <version epoch="0" ver="10.0.108" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
</package>
<package pkgid="4e88e82e3b5ca970258e0e4cebfa3aee1cfd0461aa4694085b4c597d786c9b85" name="dotnet-sdk-10.0-source-built-artifacts" arch="x86_64">
  <version epoch="0" ver="10.0.109" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
</package>
<package pkgid="39f23d5aed7b4eed00ab3abd2614a44aab90716e13e0f1f32d9b50875b8801cc" name="dotnet-sdk-10.0-source-built-artifacts" arch="x86_64">
  <version epoch="0" ver="10.0.110" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
</package>
<package pkgid="8cc3921ce77f6fd547f5bec8855de89df906d3d26b7c03a58cd0c116590f4f86" name="dotnet-sdk-10.0-source-built-artifacts" arch="x86_64">
  <version epoch="0" ver="10.0.111" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.111-1" date="1786276800">- Update to .NET SDK 10.0.111 and Runtime 10.0.11
- Resolves: RHEL-235482</changelog>
</package>
<package pkgid="6706da9d75e527e604fb14404396a3d37aceb7ecad759ed92e9fec8275c3fe46" name="dotnet-sdk-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.126" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.117-2" date="1749643200">- Update to .NET SDK 8.0.117 and Runtime 8.0.17
- Resolves: RHEL-94416</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
</package>
<package pkgid="6d6d9ce115342323371d332b8bffff58aa37abf38ab0c9b40994034f78ea43c2" name="dotnet-sdk-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.127" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
</package>
<package pkgid="cc433461b423c543a92f4740b92d2ad1b1b8f1781dbe57f778b539cdc9286a25" name="dotnet-sdk-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.128" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
</package>
<package pkgid="18042268048ffa9910419f6a76fb8e668be10ec29e5950b66396b221d91984ba" name="dotnet-sdk-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.129" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
</package>
<package pkgid="88f9358aa2e0cda10c0e3eadf783e3e2476589100de2b41a0f3d25d5dc3efd9e" name="dotnet-sdk-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.130" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.130-1" date="1786276800">- Update to .NET SDK 8.0.130 and Runtime 8.0.30
- Resolves: RHEL-235472</changelog>
</package>
<package pkgid="fe46b9b27d73e4775c2653362a14dc6e6de5b44049fb08ad97212c370e81087b" name="dotnet-sdk-8.0-source-built-artifacts" arch="x86_64">
  <version epoch="0" ver="8.0.126" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.117-2" date="1749643200">- Update to .NET SDK 8.0.117 and Runtime 8.0.17
- Resolves: RHEL-94416</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
</package>
<package pkgid="a150abf74c3bd71ed8c1108d9c912e16668e7e377717484f0ba0d00954db2bc2" name="dotnet-sdk-8.0-source-built-artifacts" arch="x86_64">
  <version epoch="0" ver="8.0.127" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
</package>
<package pkgid="7602ba4c278345acfbcfda6374e74660ad233c5397d3e3d157f89afe4bec690a" name="dotnet-sdk-8.0-source-built-artifacts" arch="x86_64">
  <version epoch="0" ver="8.0.128" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
</package>
<package pkgid="a1cda889c4d1266c8c9aa750c7cc43c25824a2a719a62ce058892001509417b2" name="dotnet-sdk-8.0-source-built-artifacts" arch="x86_64">
  <version epoch="0" ver="8.0.129" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
</package>
<package pkgid="f4546f4d62beb209e1787a5b7122e2179c3872ab91900b53b34dc2d185e5d0f5" name="dotnet-sdk-8.0-source-built-artifacts" arch="x86_64">
  <version epoch="0" ver="8.0.130" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.130-1" date="1786276800">- Update to .NET SDK 8.0.130 and Runtime 8.0.30
- Resolves: RHEL-235472</changelog>
</package>
<package pkgid="4c2025ddb56b50abecfd2bd05b4bcb2cacb314c73edefe6a76968a1960150b3b" name="dotnet-sdk-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.116" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.107-2" date="1749643200">- Update to .NET SDK 9.0.107 and Runtime 9.0.6
- Resolves: RHEL-94423</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
</package>
<package pkgid="8a22e1cd5203222e34c36e0b926d46ae98fed7c0873d03611eff58a3a1f84e80" name="dotnet-sdk-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.117" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
</package>
<package pkgid="0a8432481d3504b1bde0359ff48a7bf84b27f4102c90ba3e4992e5d7ee0dd9bf" name="dotnet-sdk-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.118" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
</package>
<package pkgid="540866b8fa88c4f3258d5e9316c6d240c6a201add94ccecf26563a784b8c9bc0" name="dotnet-sdk-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.119" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
</package>
<package pkgid="238915891f181dd96f20606cf024a1d607156d54648b11039bbdcc0fef95b4e7" name="dotnet-sdk-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.120" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.120-1" date="1786276800">- Update to .NET SDK 9.0.120 and Runtime 9.0.19
- Resolves: RHEL-235477</changelog>
</package>
<package pkgid="69dfac05b6771c6c2ebc7d7a02eb469d9d429f35a2161c8e739b92b1e1913a0a" name="dotnet-sdk-9.0-source-built-artifacts" arch="x86_64">
  <version epoch="0" ver="9.0.116" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.107-2" date="1749643200">- Update to .NET SDK 9.0.107 and Runtime 9.0.6
- Resolves: RHEL-94423</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
</package>
<package pkgid="f4c75c5b169ede569eaf085932bda02567822cd6073adc814e3a5be2197d2dec" name="dotnet-sdk-9.0-source-built-artifacts" arch="x86_64">
  <version epoch="0" ver="9.0.117" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
</package>
<package pkgid="d4c75fb3b15e1930724a692eea02348f10a2a2aed2ab3c19233fdefafef4131f" name="dotnet-sdk-9.0-source-built-artifacts" arch="x86_64">
  <version epoch="0" ver="9.0.118" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
</package>
<package pkgid="5e0367b03779e042409d7169cfc90398c9de1cd0e64d8630b8086469aad2227c" name="dotnet-sdk-9.0-source-built-artifacts" arch="x86_64">
  <version epoch="0" ver="9.0.119" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
</package>
<package pkgid="539dd12bdb0f887a2c9fc2904b15915e7d7425c91497dc8918825f75c0aaee9c" name="dotnet-sdk-9.0-source-built-artifacts" arch="x86_64">
  <version epoch="0" ver="9.0.120" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.120-1" date="1786276800">- Update to .NET SDK 9.0.120 and Runtime 9.0.19
- Resolves: RHEL-235477</changelog>
</package>
<package pkgid="50953eec15a149a0730de67d00a3110b3a9d5691649e22a2612d86e2a20d50f4" name="dotnet-sdk-aot-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.106" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~preview.7.25380.108-0.9" date="1757419200">- Disable bootstrap
- Related: RHEL-98678</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.10" date="1757851200">- Update to .NET 10 RC 1
- Resolves: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
</package>
<package pkgid="891ea022ddb383307f2921231716d256d24e3f35a38394a9bc7a580123dfa47e" name="dotnet-sdk-aot-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.108" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
</package>
<package pkgid="88688451f68fd5cea8b410032d0f8ab8584bcf4b45a5d5f660ee42a0a057091a" name="dotnet-sdk-aot-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.109" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
</package>
<package pkgid="d6ea2f45e342cee02959bf4a2c01525b73f472b48eba74831819c4709e53288f" name="dotnet-sdk-aot-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.110" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
</package>
<package pkgid="730c688d56c8222cc3a8e51e904c452a3c349ea577d94aa16c1b2ae0faf8a0d2" name="dotnet-sdk-aot-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.111" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.111-1" date="1786276800">- Update to .NET SDK 10.0.111 and Runtime 10.0.11
- Resolves: RHEL-235482</changelog>
</package>
<package pkgid="1e6d95eefc086da43b8511127353438569a4807792d33890f5febdd28e8528ef" name="dotnet-sdk-aot-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.116" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.107-2" date="1749643200">- Update to .NET SDK 9.0.107 and Runtime 9.0.6
- Resolves: RHEL-94423</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
</package>
<package pkgid="1f95e4403f5364b7cd4aed92e529d9927aac9df89905ed0598086bcd6270561f" name="dotnet-sdk-aot-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.117" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
</package>
<package pkgid="78e130d90125d4c3ae15386b78ce152a3b9c0a924ef1f26bd73f16339dfaf662" name="dotnet-sdk-aot-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.118" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
</package>
<package pkgid="3e4a655fa830f53f4ffb7fbc557bb5c5b9c9b211df222d8dab48c60165967149" name="dotnet-sdk-aot-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.119" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
</package>
<package pkgid="9ea7e121900df7243c076153930edc03cde8a86d4f8509c518d7a57b54b39b5e" name="dotnet-sdk-aot-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.120" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.120-1" date="1786276800">- Update to .NET SDK 9.0.120 and Runtime 9.0.19
- Resolves: RHEL-235477</changelog>
</package>
<package pkgid="e32c214f426a0ab19a8ca80734c02644e09219abbd004346b68bef0d9d6edece" name="dotnet-sdk-dbg-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.106" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~preview.7.25380.108-0.9" date="1757419200">- Disable bootstrap
- Related: RHEL-98678</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.10" date="1757851200">- Update to .NET 10 RC 1
- Resolves: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
</package>
<package pkgid="facc4944a4a693c4a577f69ab97a536df1b750091725f5496daed000a9f77f35" name="dotnet-sdk-dbg-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.108" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
</package>
<package pkgid="003cb560eaa9c9fe9055ac9127889dc02db226ebf65a77361f99b1e30345e605" name="dotnet-sdk-dbg-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.109" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
</package>
<package pkgid="978ea73708dd314ea285937590d707adbffe1183543e3a4ab035577ce6cf683b" name="dotnet-sdk-dbg-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.110" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
</package>
<package pkgid="11dd6b488b25ac0837a68646bf4caec05718a9590b3d78007096e659c78ac542" name="dotnet-sdk-dbg-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.111" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.111-1" date="1786276800">- Update to .NET SDK 10.0.111 and Runtime 10.0.11
- Resolves: RHEL-235482</changelog>
</package>
<package pkgid="358c578d716963a16c9f424d39b2b372d7b37fee58cc2dc77864f4995a0ef2dd" name="dotnet-sdk-dbg-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.126" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.117-2" date="1749643200">- Update to .NET SDK 8.0.117 and Runtime 8.0.17
- Resolves: RHEL-94416</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
</package>
<package pkgid="a1f6cebeb26108f8e153142d87c5be5449d420ff6bc023ec9d626c6f1a377433" name="dotnet-sdk-dbg-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.127" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
</package>
<package pkgid="a8e63d6a9544b5f553d55f642ff169e6af5b20a7f25ac4acf8074abe09b4cf17" name="dotnet-sdk-dbg-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.128" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
</package>
<package pkgid="8918a171cd56a7ea4be56b745e91d713ba9ecf94383b003566ea0df9120c7c0c" name="dotnet-sdk-dbg-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.129" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
</package>
<package pkgid="278df22bab999aa883f5456053585333e89f7187453acebeca1be5033a2baf9d" name="dotnet-sdk-dbg-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.130" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.130-1" date="1786276800">- Update to .NET SDK 8.0.130 and Runtime 8.0.30
- Resolves: RHEL-235472</changelog>
</package>
<package pkgid="41eb7a92c9175de9f8fd73b67dd091e44000aff145c56a90e8ec3eba9d343ca5" name="dotnet-sdk-dbg-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.116" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.107-2" date="1749643200">- Update to .NET SDK 9.0.107 and Runtime 9.0.6
- Resolves: RHEL-94423</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
</package>
<package pkgid="2f730ae740cc3a004d9197d06f0005ae3f3663986a144270153fae7ffa777ecf" name="dotnet-sdk-dbg-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.117" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
</package>
<package pkgid="ac27d7fb27f22d72da1b0d582b0de68be2b308826efc0c041442f4c2c920a6e9" name="dotnet-sdk-dbg-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.118" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
</package>
<package pkgid="82c1d34b5db08a000dc4a912282390275e1a964fc167c4b51b4d354e57d73719" name="dotnet-sdk-dbg-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.119" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
</package>
<package pkgid="9e341bf6e920d5a6b292f7dcd4be0191133d4c85e2c3ccc2867a807d5f693508" name="dotnet-sdk-dbg-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.120" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.120-1" date="1786276800">- Update to .NET SDK 9.0.120 and Runtime 9.0.19
- Resolves: RHEL-235477</changelog>
</package>
<package pkgid="8425f5220137ba051a2f7d2b2bbab8c7d9aa16ba4a6f47e25a4104b17576ef7b" name="dotnet-targeting-pack-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.10" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
</package>
<package pkgid="21784cf7e62fcb119f4a9b1c83ac51cef5e7fb1c583cae143b897748a3c56fe5" name="dotnet-targeting-pack-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.11" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.111-1" date="1786276800">- Update to .NET SDK 10.0.111 and Runtime 10.0.11
- Resolves: RHEL-235482</changelog>
</package>
<package pkgid="7ac7a259d34d937a06d4c42536a7c00fe2e6bad3d6d8eec297a6d20a190f3bbc" name="dotnet-targeting-pack-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.6" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~preview.7.25380.108-0.9" date="1757419200">- Disable bootstrap
- Related: RHEL-98678</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.10" date="1757851200">- Update to .NET 10 RC 1
- Resolves: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
</package>
<package pkgid="8a110d50f229c673f89d9ace72d2c7e39110223a17521e3d148eac16943ead84" name="dotnet-targeting-pack-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.8" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
</package>
<package pkgid="8f9404fc09cf2085e349801ca22e23e44a71b4928b6dffbe57a8ae9511654d9e" name="dotnet-targeting-pack-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.9" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
</package>
<package pkgid="21a443741402f654b1a4b3f0d5ff80de6a5913b4459a20ab148c5bd1b53c7d11" name="dotnet-targeting-pack-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.26" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.117-2" date="1749643200">- Update to .NET SDK 8.0.117 and Runtime 8.0.17
- Resolves: RHEL-94416</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
</package>
<package pkgid="38d58557dd8889a9e5f307bd76391965f2cf70988ba1bae1b2f91216ce7dcb9e" name="dotnet-targeting-pack-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.27" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
</package>
<package pkgid="71fe933773b589602a30da89698b83f54189142fe38c50d1723ad49f835a03c3" name="dotnet-targeting-pack-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.28" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
</package>
<package pkgid="8f3ff67bcd40e3a6c1215d7bdb3f165d4cf4cecf627e8e2063da0fe2b49db1f7" name="dotnet-targeting-pack-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
</package>
<package pkgid="e8057688307689a3e0df3a2051412b484e94b03cf05ddc4959ab061c28b9606f" name="dotnet-targeting-pack-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.30" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.130-1" date="1786276800">- Update to .NET SDK 8.0.130 and Runtime 8.0.30
- Resolves: RHEL-235472</changelog>
</package>
<package pkgid="fb826934010f141302bead45c179e90c0836a373cb0e432f17588560386b3981" name="dotnet-targeting-pack-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.15" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.107-2" date="1749643200">- Update to .NET SDK 9.0.107 and Runtime 9.0.6
- Resolves: RHEL-94423</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
</package>
<package pkgid="71f4c5b1dda6c858e071dd59103bae0fd3ade23901254395c188bebffc13a933" name="dotnet-targeting-pack-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.16" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
</package>
<package pkgid="fcfb3de07a870dcda649093a48ce024db23b73eb73656a9cf2b3e4ae581914ed" name="dotnet-targeting-pack-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.17" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
</package>
<package pkgid="a370744a2f0f421e4759da04a8339de76b9285caa0e84f31f8dab7d9abdc7c54" name="dotnet-targeting-pack-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.18" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
</package>
<package pkgid="9f64445be0ac4069d5c18bd948a2c8219118e5fce7516536693bcc5e652d48f5" name="dotnet-targeting-pack-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.19" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.120-1" date="1786276800">- Update to .NET SDK 9.0.120 and Runtime 9.0.19
- Resolves: RHEL-235477</changelog>
</package>
<package pkgid="f15389403a2d3464265c86c4edb92c6fe543c0c6e3df187b2b27030e2aa31612" name="dotnet-templates-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.106" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~preview.7.25380.108-0.9" date="1757419200">- Disable bootstrap
- Related: RHEL-98678</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.10" date="1757851200">- Update to .NET 10 RC 1
- Resolves: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
</package>
<package pkgid="35fa9192a410c440c72375b89e898f201d8844bb9f901eca67ff3c841c055bf3" name="dotnet-templates-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.108" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.1.25451.107-0.11" date="1759233600">- Disable bootstrap
- Related: RHEL-114571</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
</package>
<package pkgid="5c9c1f795b2638112d78c521609815537e1b17f8afda5dcc7b59392f95abb576" name="dotnet-templates-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.109" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100~rc.2.25502.107-0.12" date="1760529600">- Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
- Resolves: RHEL-121558</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.100-2" date="1762948800">- Update to .NET SDK 10.0.100 and Runtime 10.0.0
- Resolves: RHEL-125749</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
</package>
<package pkgid="878b9a2264784dbb7582623cb220e8d08136c39dc7bcdceced3a85d8681a435b" name="dotnet-templates-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.110" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.101-2" date="1765281600">- Update to .NET SDK 10.0.101 and Runtime 10.0.1
- Resolves: RHEL-130939</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
</package>
<package pkgid="60bae7e84621c38fb31762cfa744a09cba75532043973b82cae4ce33f3f24ef1" name="dotnet-templates-10.0" arch="x86_64">
  <version epoch="0" ver="10.0.111" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.102-2" date="1768392000">- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.103-2" date="1770811200">- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 10.0.104-2" date="1774526400">- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-2" date="1776427200">- Update to .NET SDK 10.0.106 and Runtime 10.0.6
- Resolves: RHEL-163387</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.106-3" date="1776859200">- Adjust build limits
- Resolves: RHEL-169518</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.108-1" date="1778068800">- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-1" date="1780488000">- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 10.0.109-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191640</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 10.0.110-1" date="1783512000">- Update to .NET SDK 10.0.110 and Runtime 10.0.10
- Resolves: RHEL-192463</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 10.0.111-1" date="1786276800">- Update to .NET SDK 10.0.111 and Runtime 10.0.11
- Resolves: RHEL-235482</changelog>
</package>
<package pkgid="8454f2960b510655bb2d5845af4956fd80f057ed5b1d2692d9bee54d85a016c5" name="dotnet-templates-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.126" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.117-2" date="1749643200">- Update to .NET SDK 8.0.117 and Runtime 8.0.17
- Resolves: RHEL-94416</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
</package>
<package pkgid="eb5c0d6f259307b5e7161e63100a63a3451f852d4f3b5ee9c48246e449a181f3" name="dotnet-templates-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.127" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.118-2" date="1751976000">- Update to .NET SDK 8.0.118 and Runtime 8.0.18
- Resolves: RHEL-100594</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
</package>
<package pkgid="c4ea3e55e836169e6f4edd17910250809121894ab409bed9aede476802907255" name="dotnet-templates-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.128" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.119-2" date="1754913600">- Update to .NET SDK 8.0.119 and Runtime 8.0.19
- Resolves: RHEL-106721</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.120-2" date="1757505600">- Update to .NET SDK 8.0.120 and Runtime 8.0.20
- Resolves: RHEL-112262</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
</package>
<package pkgid="a39c6551ed51b0de96a5139acb1401a53c408aad3af744916452bae26148161b" name="dotnet-templates-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.129" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.121-2" date="1760443200">- Update to .NET SDK 8.0.121 and Runtime 8.0.21
- Resolves: RHEL-116869</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
</package>
<package pkgid="a81fa8e2f11afa183c41f1ae5ef28d844cbeacdd48db1cb75ea64fe01011a5bb" name="dotnet-templates-8.0" arch="x86_64">
  <version epoch="0" ver="8.0.130" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.122-2" date="1762948800">- Update to .NET SDK 8.0.122 and Runtime 8.0.22
- Resolves: RHEL-125739</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.123-2" date="1768392000">- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.124-2" date="1770811200">- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 8.0.125-2" date="1774526400">- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.126-2" date="1776427200">- Update to .NET SDK 8.0.126 and Runtime 8.0.26
- Resolves: RHEL-163419</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.127-1" date="1778068800">- Update to .NET SDK 8.0.127 and Runtime 8.0.27
- Resolves: RHEL-173924</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-1" date="1780488000">- Update to .NET SDK 8.0.128 and Runtime 8.0.28
- Resolves: RHEL-181056</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 8.0.128-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191650</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 8.0.129-1" date="1783512000">- Update to .NET SDK 8.0.129 and Runtime 8.0.29
- Resolves: RHEL-192468</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 8.0.130-1" date="1786276800">- Update to .NET SDK 8.0.130 and Runtime 8.0.30
- Resolves: RHEL-235472</changelog>
</package>
<package pkgid="3b3e9f81695bd6151ba5ef49e65623299fcda4cd2b5f52158e72e87f22e61691" name="dotnet-templates-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.116" rel="2.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.107-2" date="1749643200">- Update to .NET SDK 9.0.107 and Runtime 9.0.6
- Resolves: RHEL-94423</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
</package>
<package pkgid="8ba17e66f26f6790f387827f42d4bd68ef310592799592bb101619d0e63d2e3a" name="dotnet-templates-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.117" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.108-2" date="1751976000">- Update to .NET SDK 9.0.108 and Runtime 9.0.7
- Resolves: RHEL-100597</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
</package>
<package pkgid="8a21e8a1e2e478b07f228b683f8a46bc7d4ba393706dcf6d9f228e54e5082d84" name="dotnet-templates-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.118" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.109-2" date="1754913600">- Update to .NET SDK 9.0.109 and Runtime 9.0.8
- Resolves: RHEL-106727</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.110-2" date="1757505600">- Update to .NET SDK 9.0.110 and Runtime 9.0.9
- Resolves: RHEL-112268</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
</package>
<package pkgid="93f2c1b0137cca2aa94c0f26905a8368954b0b425e1c51447340b287c53b846c" name="dotnet-templates-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.119" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.111-2" date="1760443200">- Update to .NET SDK 9.0.111 and Runtime 9.0.10
- Resolves: RHEL-116861</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
</package>
<package pkgid="ca1ec8c47ec85ce00717e2291f6c526f30b9afd81ffa3a79e5b5bf8019599fa8" name="dotnet-templates-9.0" arch="x86_64">
  <version epoch="0" ver="9.0.120" rel="1.el10_2"/>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.112-2" date="1762948800">- Update to .NET SDK 9.0.112 and Runtime 9.0.11
- Resolves: RHEL-125744</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.113-2" date="1768392000">- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.114-2" date="1770811200">- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971</changelog>
  <changelog author="Dominik Reh&#xE1;k &lt;drehak@redhat.com&gt; - 9.0.115-2" date="1774526400">- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.116-2" date="1776427200">- Update to .NET SDK 9.0.116 and Runtime 9.0.15
- Resolves: RHEL-163400</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.117-1" date="1778068800">- Update to .NET SDK 9.0.117 and Runtime 9.0.16
- Resolves: RHEL-173919</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-1" date="1780488000">- Update to .NET SDK 9.0.118 and Runtime 9.0.17
- Resolves: RHEL-181554</changelog>
  <changelog author="Tom Deseyn &lt;tdeseyn@redhat.com&gt; - 9.0.118-2" date="1782993600">- Reduce time to detect hanging builds
- Resolves: RHEL-191644</changelog>
  <changelog author="Satish Mane &lt;satmane@redhat.com&gt; - 9.0.119-1" date="1783512000">- Update to .NET SDK 9.0.119 and Runtime 9.0.18
- Resolves: RHEL-192473</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 9.0.120-1" date="1786276800">- Update to .NET SDK 9.0.120 and Runtime 9.0.19
- Resolves: RHEL-235477</changelog>
</package>
<package pkgid="b94ee3a525aa8441713067f5fe2383dcc552207b1cf3a3240c12102f9abeac2f" name="dovecot" arch="x86_64">
  <version epoch="1" ver="2.3.21" rel="19.el10_2.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-12" date="1721736000">- fix building with noengine openssl</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-13" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-52541)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-14" date="1724155200">- fix CVE-2024-23185: very large headers can cause resource exhaustion
  when parsing message (RHEL-55218)
- fix CVE-2024-23184: using a large number of address headers may trigger
  a denial of service (RHEL-55205)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.3.21-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-16" date="1738756800">- fix sysusers config file name (RHEL-77323)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-17" date="1768219200">- fix building with latest openssl (RHEL-117460)
- add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-18" date="1777550400">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-19" date="1778500800">- update release for rebuild</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.21-19.1" date="1782475200">- fix CVE-2026-42006: fix imap_parser list_count_limit to actually
  work (RHEL-188477)</changelog>
</package>
<package pkgid="e40ac34efd7d43112775297a3f3ef1816eab220d0ec04899b536598e0b02766c" name="dovecot" arch="x86_64">
  <version epoch="1" ver="2.3.21" rel="19.el10_2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-10" date="1718712000">- set min uid to 1000</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.3.21-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-12" date="1721736000">- fix building with noengine openssl</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-13" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-52541)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-14" date="1724155200">- fix CVE-2024-23185: very large headers can cause resource exhaustion
  when parsing message (RHEL-55218)
- fix CVE-2024-23184: using a large number of address headers may trigger
  a denial of service (RHEL-55205)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.3.21-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-16" date="1738756800">- fix sysusers config file name (RHEL-77323)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-17" date="1768219200">- fix building with latest openssl (RHEL-117460)
- add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-18" date="1777550400">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-19" date="1778500800">- update release for rebuild</changelog>
</package>
<package pkgid="a1688339bbf3c2a8a16536fea0cd0dcd2cd71598c3b414ba42aef826a060a4f6" name="dovecot-devel" arch="x86_64">
  <version epoch="1" ver="2.3.21" rel="19.el10_2.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-12" date="1721736000">- fix building with noengine openssl</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-13" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-52541)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-14" date="1724155200">- fix CVE-2024-23185: very large headers can cause resource exhaustion
  when parsing message (RHEL-55218)
- fix CVE-2024-23184: using a large number of address headers may trigger
  a denial of service (RHEL-55205)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.3.21-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-16" date="1738756800">- fix sysusers config file name (RHEL-77323)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-17" date="1768219200">- fix building with latest openssl (RHEL-117460)
- add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-18" date="1777550400">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-19" date="1778500800">- update release for rebuild</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.21-19.1" date="1782475200">- fix CVE-2026-42006: fix imap_parser list_count_limit to actually
  work (RHEL-188477)</changelog>
</package>
<package pkgid="cf3d989f767ff49277086d0c46d3259d145c0c356b354ac55dba18128b41ca27" name="dovecot-devel" arch="x86_64">
  <version epoch="1" ver="2.3.21" rel="19.el10_2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-10" date="1718712000">- set min uid to 1000</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.3.21-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-12" date="1721736000">- fix building with noengine openssl</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-13" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-52541)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-14" date="1724155200">- fix CVE-2024-23185: very large headers can cause resource exhaustion
  when parsing message (RHEL-55218)
- fix CVE-2024-23184: using a large number of address headers may trigger
  a denial of service (RHEL-55205)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.3.21-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-16" date="1738756800">- fix sysusers config file name (RHEL-77323)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-17" date="1768219200">- fix building with latest openssl (RHEL-117460)
- add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-18" date="1777550400">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-19" date="1778500800">- update release for rebuild</changelog>
</package>
<package pkgid="f9681b0899499a12a2268ac19aac1182443051f513fcd2ab5433376f03ad7ae5" name="dovecot-mysql" arch="x86_64">
  <version epoch="1" ver="2.3.21" rel="19.el10_2.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-12" date="1721736000">- fix building with noengine openssl</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-13" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-52541)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-14" date="1724155200">- fix CVE-2024-23185: very large headers can cause resource exhaustion
  when parsing message (RHEL-55218)
- fix CVE-2024-23184: using a large number of address headers may trigger
  a denial of service (RHEL-55205)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.3.21-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-16" date="1738756800">- fix sysusers config file name (RHEL-77323)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-17" date="1768219200">- fix building with latest openssl (RHEL-117460)
- add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-18" date="1777550400">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-19" date="1778500800">- update release for rebuild</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.21-19.1" date="1782475200">- fix CVE-2026-42006: fix imap_parser list_count_limit to actually
  work (RHEL-188477)</changelog>
</package>
<package pkgid="d2459223cd4898966c1f91e908006ea88dae7231f142b5982eca1cd91d126a79" name="dovecot-mysql" arch="x86_64">
  <version epoch="1" ver="2.3.21" rel="19.el10_2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-10" date="1718712000">- set min uid to 1000</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.3.21-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-12" date="1721736000">- fix building with noengine openssl</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-13" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-52541)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-14" date="1724155200">- fix CVE-2024-23185: very large headers can cause resource exhaustion
  when parsing message (RHEL-55218)
- fix CVE-2024-23184: using a large number of address headers may trigger
  a denial of service (RHEL-55205)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.3.21-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-16" date="1738756800">- fix sysusers config file name (RHEL-77323)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-17" date="1768219200">- fix building with latest openssl (RHEL-117460)
- add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-18" date="1777550400">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-19" date="1778500800">- update release for rebuild</changelog>
</package>
<package pkgid="e0f5f0a29702550c2419ce8ba2a44889bd80e69ab16b053056bf96a39e736c29" name="dovecot-pgsql" arch="x86_64">
  <version epoch="1" ver="2.3.21" rel="19.el10_2.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-12" date="1721736000">- fix building with noengine openssl</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-13" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-52541)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-14" date="1724155200">- fix CVE-2024-23185: very large headers can cause resource exhaustion
  when parsing message (RHEL-55218)
- fix CVE-2024-23184: using a large number of address headers may trigger
  a denial of service (RHEL-55205)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.3.21-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-16" date="1738756800">- fix sysusers config file name (RHEL-77323)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-17" date="1768219200">- fix building with latest openssl (RHEL-117460)
- add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-18" date="1777550400">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-19" date="1778500800">- update release for rebuild</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.21-19.1" date="1782475200">- fix CVE-2026-42006: fix imap_parser list_count_limit to actually
  work (RHEL-188477)</changelog>
</package>
<package pkgid="372622adb0ea182177405f70d91b6716f9a22f48f90c4e8b73069df292884b1f" name="dovecot-pgsql" arch="x86_64">
  <version epoch="1" ver="2.3.21" rel="19.el10_2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-10" date="1718712000">- set min uid to 1000</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.3.21-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-12" date="1721736000">- fix building with noengine openssl</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-13" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-52541)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-14" date="1724155200">- fix CVE-2024-23185: very large headers can cause resource exhaustion
  when parsing message (RHEL-55218)
- fix CVE-2024-23184: using a large number of address headers may trigger
  a denial of service (RHEL-55205)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.3.21-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-16" date="1738756800">- fix sysusers config file name (RHEL-77323)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-17" date="1768219200">- fix building with latest openssl (RHEL-117460)
- add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-18" date="1777550400">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-19" date="1778500800">- update release for rebuild</changelog>
</package>
<package pkgid="a74ea94607a6bdab02fbb21d9f461ab057e4f156317de5cc8cdef7811bc86748" name="dovecot-pigeonhole" arch="x86_64">
  <version epoch="1" ver="2.3.21" rel="19.el10_2.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-12" date="1721736000">- fix building with noengine openssl</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-13" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-52541)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-14" date="1724155200">- fix CVE-2024-23185: very large headers can cause resource exhaustion
  when parsing message (RHEL-55218)
- fix CVE-2024-23184: using a large number of address headers may trigger
  a denial of service (RHEL-55205)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.3.21-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-16" date="1738756800">- fix sysusers config file name (RHEL-77323)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-17" date="1768219200">- fix building with latest openssl (RHEL-117460)
- add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-18" date="1777550400">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-19" date="1778500800">- update release for rebuild</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.3.21-19.1" date="1782475200">- fix CVE-2026-42006: fix imap_parser list_count_limit to actually
  work (RHEL-188477)</changelog>
</package>
<package pkgid="10e387abe7d61c5d38d719fbab4d91a65c641708b02ce297dd6ceca3a063138f" name="dovecot-pigeonhole" arch="x86_64">
  <version epoch="1" ver="2.3.21" rel="19.el10_2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-10" date="1718712000">- set min uid to 1000</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.3.21-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-12" date="1721736000">- fix building with noengine openssl</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-13" date="1722859200">- fix crash when user has sieve script that includes two missing scripts (RHEL-52541)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-14" date="1724155200">- fix CVE-2024-23185: very large headers can cause resource exhaustion
  when parsing message (RHEL-55218)
- fix CVE-2024-23184: using a large number of address headers may trigger
  a denial of service (RHEL-55205)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.3.21-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-16" date="1738756800">- fix sysusers config file name (RHEL-77323)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-17" date="1768219200">- fix building with latest openssl (RHEL-117460)
- add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-18" date="1777550400">- fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626)
- fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162274)
- fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161665)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.3.21-19" date="1778500800">- update release for rebuild</changelog>
</package>
<package pkgid="759aafe4c02418bb1dc72ff788925236f9e82fd811a409b2952169214c09a60f" name="doxygen" arch="x86_64">
  <version epoch="2" ver="1.13.2" rel="1.el10"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 1.9.8-1" date="1694433600">- fix bz#2235035, update to 1.9.8</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 1.10.0-1" date="1703592000">- bz#2255826, update to 1.10</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2:1.10.0-2" date="1705665600">- don't use clang to build doxygen as workaround for a bug in gcc-14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.10.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 1.11.0-1" date="1717588800">- Resolves: RHEL-40092, update doxygen to 1.11.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.11.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2:1.12.0-1" date="1725883200">- Resolves: RHEL-58045, update doxygen to 1.12.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.12.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2:1.12.0-3" date="1732881600">- Fix Non-reproducible file names in doxygen output
- Fix broken markdown links to anchors
Related: RHEL-58045</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2:1.13.2-1" date="1737028800">- Resolves: RHEL-73868, update to 1.13.2</changelog>
</package>
<package pkgid="873d22427e9dbd9e76a657f98f3ebffa08c57980f942f00083c3cb06177fedd6" name="doxygen-latex" arch="x86_64">
  <version epoch="2" ver="1.13.2" rel="1.el10"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 1.9.8-1" date="1694433600">- fix bz#2235035, update to 1.9.8</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 1.10.0-1" date="1703592000">- bz#2255826, update to 1.10</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2:1.10.0-2" date="1705665600">- don't use clang to build doxygen as workaround for a bug in gcc-14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.10.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 1.11.0-1" date="1717588800">- Resolves: RHEL-40092, update doxygen to 1.11.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.11.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2:1.12.0-1" date="1725883200">- Resolves: RHEL-58045, update doxygen to 1.12.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.12.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2:1.12.0-3" date="1732881600">- Fix Non-reproducible file names in doxygen output
- Fix broken markdown links to anchors
Related: RHEL-58045</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2:1.13.2-1" date="1737028800">- Resolves: RHEL-73868, update to 1.13.2</changelog>
</package>
<package pkgid="7e4ab934c6317ddc52a51bf33c7179ac7792791dc46b08aefef2007260176cbf" name="doxygen2man" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.0.6-6" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.7-1" date="1686139200">- rebase to v2.0.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.7-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.8-1" date="1689940800">- rebase to v2.0.8</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.8-2" date="1701691200">- update doxygen2man for latest libXML2 - include parser.h</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.8-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.8-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.8-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.8-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6095266dac7f97817d21313c4393ea16045400481cdab5dda6eb9d662294bd57" name="dpdk" arch="x86_64">
  <version epoch="2" ver="25.11" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:23.11-1.2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 23.11-2" date="1734436800">- Backport fixes for CVE-2024-11614 (RHEL-68662)</changelog>
  <changelog author="David Marchand &lt;david.marchand@redhat.com&gt; - 24.11.1-1" date="1734523200">- Rebase to 24.11.1 (RHEL-71284)</changelog>
  <changelog author="David Marchand &lt;david.marchand@redhat.com&gt; - 24.11.1-2" date="1736769600">- Enable net/ena and net/mana drivers (RHEL-73690)</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 24.11.2-1" date="1750680000">- Rebase to 24.11.2 (RHEL-96849)</changelog>
  <changelog author="Maxime Coquelin &lt;maxime.coquelin@redhat.com&gt; - 24.11.2-2" date="1750939200">- Avoid requiring NET_ADMIN with mlx5 (RHEL-93856)</changelog>
  <changelog author="David Marchand &lt;david.marchand@redhat.com&gt; - 24.11.2-3" date="1755604800">- Enable net/mlx5 driver for ARM (RHEL-109887)</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 24.11.3-1" date="1760443200">- Rebase to 24.11.3 (RHEL-121227)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 24.11.3-2" date="1769515200">- Update License to SPDX (RHEL-144623)</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 25.11-1" date="1769774400">- Rebase to 25.11 (RHEL-132460)</changelog>
</package>
<package pkgid="a69341d0c9103fec372d4a51565c3b568752f3b45391cb42bd4d8f64a680da24" name="dpdk-devel" arch="x86_64">
  <version epoch="2" ver="25.11" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:23.11-1.2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 23.11-2" date="1734436800">- Backport fixes for CVE-2024-11614 (RHEL-68662)</changelog>
  <changelog author="David Marchand &lt;david.marchand@redhat.com&gt; - 24.11.1-1" date="1734523200">- Rebase to 24.11.1 (RHEL-71284)</changelog>
  <changelog author="David Marchand &lt;david.marchand@redhat.com&gt; - 24.11.1-2" date="1736769600">- Enable net/ena and net/mana drivers (RHEL-73690)</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 24.11.2-1" date="1750680000">- Rebase to 24.11.2 (RHEL-96849)</changelog>
  <changelog author="Maxime Coquelin &lt;maxime.coquelin@redhat.com&gt; - 24.11.2-2" date="1750939200">- Avoid requiring NET_ADMIN with mlx5 (RHEL-93856)</changelog>
  <changelog author="David Marchand &lt;david.marchand@redhat.com&gt; - 24.11.2-3" date="1755604800">- Enable net/mlx5 driver for ARM (RHEL-109887)</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 24.11.3-1" date="1760443200">- Rebase to 24.11.3 (RHEL-121227)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 24.11.3-2" date="1769515200">- Update License to SPDX (RHEL-144623)</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 25.11-1" date="1769774400">- Rebase to 25.11 (RHEL-132460)</changelog>
</package>
<package pkgid="65d64ee797de521f5169137ddd32a44f631a9b0efb90d8140d3ca0d1e77f24a8" name="dpdk-doc" arch="noarch">
  <version epoch="2" ver="25.11" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:23.11-1.2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 23.11-2" date="1734436800">- Backport fixes for CVE-2024-11614 (RHEL-68662)</changelog>
  <changelog author="David Marchand &lt;david.marchand@redhat.com&gt; - 24.11.1-1" date="1734523200">- Rebase to 24.11.1 (RHEL-71284)</changelog>
  <changelog author="David Marchand &lt;david.marchand@redhat.com&gt; - 24.11.1-2" date="1736769600">- Enable net/ena and net/mana drivers (RHEL-73690)</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 24.11.2-1" date="1750680000">- Rebase to 24.11.2 (RHEL-96849)</changelog>
  <changelog author="Maxime Coquelin &lt;maxime.coquelin@redhat.com&gt; - 24.11.2-2" date="1750939200">- Avoid requiring NET_ADMIN with mlx5 (RHEL-93856)</changelog>
  <changelog author="David Marchand &lt;david.marchand@redhat.com&gt; - 24.11.2-3" date="1755604800">- Enable net/mlx5 driver for ARM (RHEL-109887)</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 24.11.3-1" date="1760443200">- Rebase to 24.11.3 (RHEL-121227)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 24.11.3-2" date="1769515200">- Update License to SPDX (RHEL-144623)</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 25.11-1" date="1769774400">- Rebase to 25.11 (RHEL-132460)</changelog>
</package>
<package pkgid="7eb88f1ea26aec84b9811b635605b5f7cf1132a079f257c9b6f7e202a6e8c6f4" name="dpdk-tools" arch="x86_64">
  <version epoch="2" ver="25.11" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:23.11-1.2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 23.11-2" date="1734436800">- Backport fixes for CVE-2024-11614 (RHEL-68662)</changelog>
  <changelog author="David Marchand &lt;david.marchand@redhat.com&gt; - 24.11.1-1" date="1734523200">- Rebase to 24.11.1 (RHEL-71284)</changelog>
  <changelog author="David Marchand &lt;david.marchand@redhat.com&gt; - 24.11.1-2" date="1736769600">- Enable net/ena and net/mana drivers (RHEL-73690)</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 24.11.2-1" date="1750680000">- Rebase to 24.11.2 (RHEL-96849)</changelog>
  <changelog author="Maxime Coquelin &lt;maxime.coquelin@redhat.com&gt; - 24.11.2-2" date="1750939200">- Avoid requiring NET_ADMIN with mlx5 (RHEL-93856)</changelog>
  <changelog author="David Marchand &lt;david.marchand@redhat.com&gt; - 24.11.2-3" date="1755604800">- Enable net/mlx5 driver for ARM (RHEL-109887)</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 24.11.3-1" date="1760443200">- Rebase to 24.11.3 (RHEL-121227)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 24.11.3-2" date="1769515200">- Update License to SPDX (RHEL-144623)</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 25.11-1" date="1769774400">- Rebase to 25.11 (RHEL-132460)</changelog>
</package>
<package pkgid="5eb9d685b6dcc6c9be6aff8238d0791eec0a1ea8222e03acbec9d14bfa624573" name="dracut" arch="x86_64">
  <version epoch="0" ver="107" rel="4.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 102-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 103-1" date="1730462400">- Update to dracut 103.
- feat(fips-crypto-policies): make c-p follow FIPS mode automatically
- fix(fips-crypto-policies): make it depend on fips dracut module
  Resolves: RHEL-59678,RHEL-65204</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-1" date="1739793600">- build: upgrade to dracut 105
- fix(systemd-ask-password): do not half-install systemd-ask-password-wall
- fix(pcsc): add libpcsclite_real.so.*
- revert: "fix(rescue): make rescue always no-hostonly"
- fix(dracut-install): initize fts pointer
- feat: add openssl module
- build: make erofs the default requirement for squash subpackage
  Resolves: RHEL-65204,RHEL-68935,RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-2" date="1739793601">- fix(openssl): harden ossl build CFLAGS
  Related: RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793602">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
</package>
<package pkgid="68313ee16903a7f8c39134d104fb5fe523eb19b4fdd89e2a80341331b102ef3a" name="dracut" arch="x86_64">
  <version epoch="0" ver="107" rel="7.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-2" date="1739793600">- fix(openssl): harden ossl build CFLAGS
  Related: RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793601">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
</package>
<package pkgid="b6a899f7f08cc1847e54409498a9fdecc7dc308b93f32439fd681c74ed16470d" name="dracut" arch="x86_64">
  <version epoch="0" ver="107" rel="8.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793600">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-8" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded"</changelog>
</package>
<package pkgid="07eda83dbcbbe66fe462c09faea6ffd8d83bdbdec8ae7668ae5e440abd3faab2" name="dracut" arch="x86_64">
  <version epoch="0" ver="107" rel="9.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-8" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded"</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-9" date="1785240000">- fix(base): escape die() message in emergency hook script
- fix(base): replace eval with safe variable indirection in splitsep and export_n</changelog>
</package>
<package pkgid="9df6628b3abdb537ae1b8703a13e0b4e096314f71e3f94713151f60cfc74f08b" name="dracut-caps" arch="x86_64">
  <version epoch="0" ver="107" rel="4.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 102-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 103-1" date="1730462400">- Update to dracut 103.
- feat(fips-crypto-policies): make c-p follow FIPS mode automatically
- fix(fips-crypto-policies): make it depend on fips dracut module
  Resolves: RHEL-59678,RHEL-65204</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-1" date="1739793600">- build: upgrade to dracut 105
- fix(systemd-ask-password): do not half-install systemd-ask-password-wall
- fix(pcsc): add libpcsclite_real.so.*
- revert: "fix(rescue): make rescue always no-hostonly"
- fix(dracut-install): initize fts pointer
- feat: add openssl module
- build: make erofs the default requirement for squash subpackage
  Resolves: RHEL-65204,RHEL-68935,RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-2" date="1739793601">- fix(openssl): harden ossl build CFLAGS
  Related: RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793602">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
</package>
<package pkgid="70e311388e7a7ba8c901728a404fff4883238e7912523334ea4761ebd62b015a" name="dracut-caps" arch="x86_64">
  <version epoch="0" ver="107" rel="7.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-2" date="1739793600">- fix(openssl): harden ossl build CFLAGS
  Related: RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793601">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
</package>
<package pkgid="3325e9adf47a672b5e81e5da7098efcbac788673e5b886550b6eb70dd84a8e58" name="dracut-caps" arch="x86_64">
  <version epoch="0" ver="107" rel="8.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793600">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-8" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded"</changelog>
</package>
<package pkgid="891619a2e4207c0ca73447d596292d4deb8886b599a03fefe54d3c9655a13c84" name="dracut-caps" arch="x86_64">
  <version epoch="0" ver="107" rel="9.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-8" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded"</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-9" date="1785240000">- fix(base): escape die() message in emergency hook script
- fix(base): replace eval with safe variable indirection in splitsep and export_n</changelog>
</package>
<package pkgid="4fe441a1d5729ae4b2c99cfba8d8c49103563589dac62c52bebcf74c52f59a49" name="dracut-config-generic" arch="x86_64">
  <version epoch="0" ver="107" rel="4.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 102-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 103-1" date="1730462400">- Update to dracut 103.
- feat(fips-crypto-policies): make c-p follow FIPS mode automatically
- fix(fips-crypto-policies): make it depend on fips dracut module
  Resolves: RHEL-59678,RHEL-65204</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-1" date="1739793600">- build: upgrade to dracut 105
- fix(systemd-ask-password): do not half-install systemd-ask-password-wall
- fix(pcsc): add libpcsclite_real.so.*
- revert: "fix(rescue): make rescue always no-hostonly"
- fix(dracut-install): initize fts pointer
- feat: add openssl module
- build: make erofs the default requirement for squash subpackage
  Resolves: RHEL-65204,RHEL-68935,RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-2" date="1739793601">- fix(openssl): harden ossl build CFLAGS
  Related: RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793602">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
</package>
<package pkgid="41ed385d694f4b8131d52e98e2ea228466a845c98ca1f5042c6044f9237bd980" name="dracut-config-generic" arch="x86_64">
  <version epoch="0" ver="107" rel="7.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-2" date="1739793600">- fix(openssl): harden ossl build CFLAGS
  Related: RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793601">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
</package>
<package pkgid="04a3b900d799c05fb92f9ee747a7bec5884298929fd974e24195deeb8c103993" name="dracut-config-generic" arch="x86_64">
  <version epoch="0" ver="107" rel="8.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793600">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-8" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded"</changelog>
</package>
<package pkgid="c00b2e81bd788bd63515bffce2a2efdfcb4932ca8934e97b81e8dd00cdf9d24c" name="dracut-config-generic" arch="x86_64">
  <version epoch="0" ver="107" rel="9.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-8" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded"</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-9" date="1785240000">- fix(base): escape die() message in emergency hook script
- fix(base): replace eval with safe variable indirection in splitsep and export_n</changelog>
</package>
<package pkgid="3349c43f9c0ae35eff3a7d1bca99b7fb12a2c64bb31f1a0d4e56c680b3d3c8a7" name="dracut-config-rescue" arch="x86_64">
  <version epoch="0" ver="107" rel="4.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 102-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 103-1" date="1730462400">- Update to dracut 103.
- feat(fips-crypto-policies): make c-p follow FIPS mode automatically
- fix(fips-crypto-policies): make it depend on fips dracut module
  Resolves: RHEL-59678,RHEL-65204</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-1" date="1739793600">- build: upgrade to dracut 105
- fix(systemd-ask-password): do not half-install systemd-ask-password-wall
- fix(pcsc): add libpcsclite_real.so.*
- revert: "fix(rescue): make rescue always no-hostonly"
- fix(dracut-install): initize fts pointer
- feat: add openssl module
- build: make erofs the default requirement for squash subpackage
  Resolves: RHEL-65204,RHEL-68935,RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-2" date="1739793601">- fix(openssl): harden ossl build CFLAGS
  Related: RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793602">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
</package>
<package pkgid="6062cbaedc8b7d7cf5b1c081927a84b6ec2f1a4d5463e1a68808e0f3f7ee8784" name="dracut-config-rescue" arch="x86_64">
  <version epoch="0" ver="107" rel="7.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-2" date="1739793600">- fix(openssl): harden ossl build CFLAGS
  Related: RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793601">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
</package>
<package pkgid="79b4eea9b3b2915d7cfd0730d3257bc34f8b6788844b9e6c324f389fd76cb1a1" name="dracut-config-rescue" arch="x86_64">
  <version epoch="0" ver="107" rel="8.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793600">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-8" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded"</changelog>
</package>
<package pkgid="3619aaf7f7e88e4a7b98dafc7e0598693537779c0ce50c8e6605fb4dc1848503" name="dracut-config-rescue" arch="x86_64">
  <version epoch="0" ver="107" rel="9.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-8" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded"</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-9" date="1785240000">- fix(base): escape die() message in emergency hook script
- fix(base): replace eval with safe variable indirection in splitsep and export_n</changelog>
</package>
<package pkgid="bb6a142abd5c8bfcf6a95473b7ccfbfc223dc19e606c29de0d3668f4be5e7c7f" name="dracut-live" arch="x86_64">
  <version epoch="0" ver="107" rel="4.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 102-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 103-1" date="1730462400">- Update to dracut 103.
- feat(fips-crypto-policies): make c-p follow FIPS mode automatically
- fix(fips-crypto-policies): make it depend on fips dracut module
  Resolves: RHEL-59678,RHEL-65204</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-1" date="1739793600">- build: upgrade to dracut 105
- fix(systemd-ask-password): do not half-install systemd-ask-password-wall
- fix(pcsc): add libpcsclite_real.so.*
- revert: "fix(rescue): make rescue always no-hostonly"
- fix(dracut-install): initize fts pointer
- feat: add openssl module
- build: make erofs the default requirement for squash subpackage
  Resolves: RHEL-65204,RHEL-68935,RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-2" date="1739793601">- fix(openssl): harden ossl build CFLAGS
  Related: RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793602">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
</package>
<package pkgid="ca7efb9f9ffc13dc70be436d76e6e72dfb9ab2fc100e19111eeff7650e5a5231" name="dracut-live" arch="x86_64">
  <version epoch="0" ver="107" rel="7.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-2" date="1739793600">- fix(openssl): harden ossl build CFLAGS
  Related: RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793601">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
</package>
<package pkgid="a64019f9d9055c64dd7c8590edb840de3cb10e2137b431d0d5a17ae12516eb40" name="dracut-live" arch="x86_64">
  <version epoch="0" ver="107" rel="8.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793600">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-8" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded"</changelog>
</package>
<package pkgid="ccd404ca040a52ea1b2ebb06c82df8397305c59976c6453a808b519c2b839650" name="dracut-live" arch="x86_64">
  <version epoch="0" ver="107" rel="9.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-8" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded"</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-9" date="1785240000">- fix(base): escape die() message in emergency hook script
- fix(base): replace eval with safe variable indirection in splitsep and export_n</changelog>
</package>
<package pkgid="02425a6a6e4babb4c664e047199bea453263228ab1c970db7919dcba8c0aa196" name="dracut-network" arch="x86_64">
  <version epoch="0" ver="107" rel="4.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 102-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 103-1" date="1730462400">- Update to dracut 103.
- feat(fips-crypto-policies): make c-p follow FIPS mode automatically
- fix(fips-crypto-policies): make it depend on fips dracut module
  Resolves: RHEL-59678,RHEL-65204</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-1" date="1739793600">- build: upgrade to dracut 105
- fix(systemd-ask-password): do not half-install systemd-ask-password-wall
- fix(pcsc): add libpcsclite_real.so.*
- revert: "fix(rescue): make rescue always no-hostonly"
- fix(dracut-install): initize fts pointer
- feat: add openssl module
- build: make erofs the default requirement for squash subpackage
  Resolves: RHEL-65204,RHEL-68935,RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-2" date="1739793601">- fix(openssl): harden ossl build CFLAGS
  Related: RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793602">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
</package>
<package pkgid="3ff37fdd84d043136ce354caba0cdb7983b7071e1d71f0b185348b467bceafab" name="dracut-network" arch="x86_64">
  <version epoch="0" ver="107" rel="7.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-2" date="1739793600">- fix(openssl): harden ossl build CFLAGS
  Related: RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793601">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
</package>
<package pkgid="97fc609e5f5756e8d9303ee42868c7d70fa2e41261f2c28dc2ba3105632e875e" name="dracut-network" arch="x86_64">
  <version epoch="0" ver="107" rel="8.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793600">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-8" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded"</changelog>
</package>
<package pkgid="537d588757969918fc1b6b1ccc0491c92f014d04c55511fc6ed8e7530dd112ba" name="dracut-network" arch="x86_64">
  <version epoch="0" ver="107" rel="9.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-8" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded"</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-9" date="1785240000">- fix(base): escape die() message in emergency hook script
- fix(base): replace eval with safe variable indirection in splitsep and export_n</changelog>
</package>
<package pkgid="18f395e105a551ef55444b51cd69c3a17b27e82f7ec6b07a78a05f2afae3a79f" name="dracut-squash" arch="x86_64">
  <version epoch="0" ver="107" rel="4.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 102-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 103-1" date="1730462400">- Update to dracut 103.
- feat(fips-crypto-policies): make c-p follow FIPS mode automatically
- fix(fips-crypto-policies): make it depend on fips dracut module
  Resolves: RHEL-59678,RHEL-65204</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-1" date="1739793600">- build: upgrade to dracut 105
- fix(systemd-ask-password): do not half-install systemd-ask-password-wall
- fix(pcsc): add libpcsclite_real.so.*
- revert: "fix(rescue): make rescue always no-hostonly"
- fix(dracut-install): initize fts pointer
- feat: add openssl module
- build: make erofs the default requirement for squash subpackage
  Resolves: RHEL-65204,RHEL-68935,RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-2" date="1739793601">- fix(openssl): harden ossl build CFLAGS
  Related: RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793602">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
</package>
<package pkgid="af679040c9adc16ce1a2c4bad2d9359c1545e7d153eabb10620807f95e5f0e7b" name="dracut-squash" arch="x86_64">
  <version epoch="0" ver="107" rel="7.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-2" date="1739793600">- fix(openssl): harden ossl build CFLAGS
  Related: RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793601">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
</package>
<package pkgid="9eacdb06ae55888bfd8e675a5dd48e2f44e8e9bc60d831e1ce5ba6e0092dd938" name="dracut-squash" arch="x86_64">
  <version epoch="0" ver="107" rel="8.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793600">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-8" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded"</changelog>
</package>
<package pkgid="c79dba86ba3c8c34aceab1356e2f9294eda59fa76a34630ccff42a7290f2ff26" name="dracut-squash" arch="x86_64">
  <version epoch="0" ver="107" rel="9.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-8" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded"</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-9" date="1785240000">- fix(base): escape die() message in emergency hook script
- fix(base): replace eval with safe variable indirection in splitsep and export_n</changelog>
</package>
<package pkgid="ae770530aa66d26ebe434463368d03b850927d489031f526d3b5067caaabecbd" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="107" rel="4.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 102-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 103-1" date="1730462400">- Update to dracut 103.
- feat(fips-crypto-policies): make c-p follow FIPS mode automatically
- fix(fips-crypto-policies): make it depend on fips dracut module
  Resolves: RHEL-59678,RHEL-65204</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-1" date="1739793600">- build: upgrade to dracut 105
- fix(systemd-ask-password): do not half-install systemd-ask-password-wall
- fix(pcsc): add libpcsclite_real.so.*
- revert: "fix(rescue): make rescue always no-hostonly"
- fix(dracut-install): initize fts pointer
- feat: add openssl module
- build: make erofs the default requirement for squash subpackage
  Resolves: RHEL-65204,RHEL-68935,RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-2" date="1739793601">- fix(openssl): harden ossl build CFLAGS
  Related: RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793602">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
</package>
<package pkgid="8c04b32afcd31393def90c24a2bd9ac683c077ef702f17893653e00c136514c5" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="107" rel="7.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-2" date="1739793600">- fix(openssl): harden ossl build CFLAGS
  Related: RHEL-76323</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793601">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
</package>
<package pkgid="9528b204c287b26b9c60cb91aa663ebb371f68e7fb3f3aa0430bed0994c3b35f" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="107" rel="8.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-3" date="1739793600">- fix(ossl): copy executables for the test suite</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-8" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded"</changelog>
</package>
<package pkgid="53ac389859169409028530009ba7f90ee37346e282aa9b0bb8755a516f393b34" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="107" rel="9.el10_2"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 105-4" date="1741262400">- fix(rescue): create hmac file for rescue kernel</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-1" date="1752753600">- Upgrade to dracut 107
  Resolves: RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-2" date="1754568000">- fix: improve hostonly sloppy mode
- fix(dracut.sh): don't pass empty string as dir
- feat(systemd): drop unnecessary dependency on libgcrypt
- fix(kernel-modules-extra): remove stray  before /
- Revert "fix(base): do not require chroot inside initramfs"
- fix: let check_vol_slaves_all return 1 when checks on all slaves fail
- improvement(74nvmf): lookup required NIC kernel modules for NBFT interfaces
- fix(74nvmf): set root=nvmf
  Resolves: RHEL-104223,RHEL-93173,RHEL-95542,RHEL-95897</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-3" date="1755518400">- test(SYSTEMD-INITRD): be more careful with `set -e` and subshells
- test: fixup NFS test.sh
  Resolves: RHEL-108215,RHEL-97473</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-4" date="1769774400">- fix(systemd-udevd): handle root=gpt-auto for systemd-v258
- fix(systemd-repart): allow partition format
- feat(install.d): do not remove UKIs on remove)
- fix(dracut.install): remove extraneous quotes in dracut arguments
- feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  Resolves: RHEL-111580,RHEL-111709,RHEL-113071,RHEL-119787,RHEL-132571</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-5" date="1778155200">- fix(network-legacy): remove network-legacy completely from the codebase
- fix(iscsi): replace `echo` writes with `printf` to prevent variable injection
  Resolves: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-6" date="1779278400">- fix(base): escape arguments in initqueue hook script generation
- fix(net-lib): warn on suspicious shell metacharacters in hostname file
- fix(systemd-networkd): escape DHCP lease values in dhcpopts generation
  Related: RHEL-170844</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-7" date="1779883200">- build: rebuild without an obsoleted patch</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-8" date="1782388800">- revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless excluded"</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 107-9" date="1785240000">- fix(base): escape die() message in emergency hook script
- fix(base): replace eval with safe variable indirection in splitsep and export_n</changelog>
</package>
<package pkgid="05dcc5a8f5f801abc3283ac1cea3d9045f479a1278b7ecbb03f7a5999cd77afd" name="drgn" arch="x86_64">
  <version epoch="0" ver="0.0.33" rel="1.el10"/>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 0.0.25-5" date="1715774400">- Remove brew-build.tier0.functional test</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.0.25-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 0.0.25-7" date="1723118400">- Enable brew-build.tier0.functional test
- Remove autorelease and autochangelog</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.0.25-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.0.29-1" date="1731326400">- Rebase to upstream v0.0.29
  Resolves: RHEL-61657</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.0.31-1" date="1747396800">- Rebase to upstream v0.0.31
  Resolves: RHEL-86265</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.0.31-2" date="1748433600">- Rebuild for libkdumpfile 0.5.5
  Resolves: RHEL-86263</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.0.31-3" date="1751544000">- Add man page for drgn
  Resolves: RHEL-97801</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.0.31-4" date="1752667200">- Fix regression in selftest introduced in 0.0.31-3</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.0.33-1" date="1763035200">- Rebase to upstream v0.0.33
  Resolves: RHEL-114117</changelog>
</package>
<package pkgid="e39ef06345bf09c51940c79a4607f9673bf4c8255ab34410b06705d69ef03421" name="driverctl" arch="noarch">
  <version epoch="0" ver="0.115" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101-13" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101-14" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.101-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 0.101-16" date="1719316800">- Import gating from c9s</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 0.115-1" date="1721736000">- Updated to 0.115 (RHEL-11393)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.115-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 0.115-3" date="1769169600">- Update License to SPDX (RHEL-143790)</changelog>
</package>
<package pkgid="7c8ab42b5b134b29749bc74ad00ddc6a80ace909b369a9be743e09bca9956c0b" name="drm-utils" arch="x86_64">
  <version epoch="0" ver="2.4.128" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.120-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.120-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.120-4" date="1716811200">- Fix findings from static application security testing (SAST)</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.121-1" date="1717588800">- Update to 2.4.121</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.121-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.121-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.123-1" date="1731412800">- Update to 2.4.123
  Resolves: https://issues.redhat.com/browse/RHEL-53895</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.127-1" date="1760961600">- Update to 2.4.127
  amdgpu-apu.patch: Read model name from /proc/cpuinfo for APUs</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.127-2" date="1761134400">- Added amdgpu-slice.patch and amdgpu-fallback.patch</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.128-1" date="1763380800">- Update to 2.4.128-1</changelog>
</package>
<package pkgid="3170298fc381c14a377dba02a1685295dacb253cd27563917d72d47af76906a5" name="dtc" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="12.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.7.0-3" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.7.0-5" date="1695816000">- Don't install a Python .egg</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.7.0-8" date="1716811200">- dtc-Properly-harden-built-packages.patch [RHEL-33493]
- Resolves: RHEL-33493
  (Annocheck FAIL: bind-now (dtc))</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.7.0-10" date="1719576000">- Fix missing dynamic tags for aarch64 python3 pylibfdt
- Resolves: RHEL-33493
  (Annocheck FAIL: bind-now (dtc))</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.7.0-12" date="1731412800">- dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
- dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
- Resolves: RHEL-64318
  ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
- Resolves: RHEL-65448
  ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)</changelog>
</package>
<package pkgid="d7a58d492c5f4c18dbb51e788da71f7e2680c4494efbf572a317282db90d89cb" name="duktape" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="10.el10"/>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.7.0-1" date="1671192000">- Version 2.7.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 2.7.0-3" date="1677758400">- migrate to SPDX license</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.7.0-4" date="1684238400">- Link against libm</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.0-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 2.7.0-9" date="1728388800">- enable c10s gating</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="5efedf09cf9d3dc25ca83abafd964ab316c6da742bef077b7f1793c6592698b8" name="duktape-devel" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="10.el10"/>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.7.0-1" date="1671192000">- Version 2.7.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 2.7.0-3" date="1677758400">- migrate to SPDX license</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.7.0-4" date="1684238400">- Link against libm</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.0-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 2.7.0-9" date="1728388800">- enable c10s gating</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="3ebc0f484b95ef045ef1828af19463b265da2556a1d6242b21bbc7d74c9c4216" name="dvb-firmware" arch="noarch">
  <version epoch="0" ver="20260411" rel="19.5.el10_1"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-19.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128447)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128447</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-19.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-140094)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-140094</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-19.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145532)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145532</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260311-19.4" date="1773230400">- Update linux-firmware to latest upstream (RHEL-154362)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-154362</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260411-19.5" date="1775908800">- Update linux-firmware to latest upstream (RHEL-164389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
Resolves: RHEL-164389</changelog>
</package>
<package pkgid="8a6f27ebb605baa0a80b81992b01f7240dc8b2227611b7714ce8b0594d86b7e4" name="dvb-firmware" arch="noarch">
  <version epoch="0" ver="20260609" rel="23.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250212-14" date="1740484800">- accel: ivpu: Update firmware for NPU (RHEL-38586)
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
</package>
<package pkgid="75f9f13f65dfd06fa4d4df8e68794cbe6302b349a30a31c64f33ac41837cb2d2" name="dvb-firmware" arch="noarch">
  <version epoch="0" ver="20260707" rel="23.1.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream ()
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
</package>
<package pkgid="9e416fd6d550387d54dfc738ad5e912ff6d6afae54238b4110c700a467e33f2f" name="dvb-firmware" arch="noarch">
  <version epoch="0" ver="20260804" rel="23.2.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream (RHEL-188389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260804-23.2" date="1785844800">- Update linux-firmware to latest upstream (RHEL-214057)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- linux-firmware: Add firmware binary files for new HP project (Messi)
- qcom: Add gpu firmwares for Eliza chipset
- cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
- rtw89: 8922d: add fw 0.35.113.2
- qcom: venus-5.4: fix vp9 decoder assertion failure
- qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
- qcom: Update qdsp6sw firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- intel_vpu: Update NPU firmware
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: Add firmware for new soundwire projects
- rtw88: add firmware v41.0.0 for RTL8723B
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add ADSP firmware for hawi platform
- powervr: add firmware for Imagination Technologies BXM-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform
Resolves: RHEL-214057</changelog>
</package>
<package pkgid="b3cc43abc989cccce298e5514537eb0abc8c9ebc98799ab7da0590cc7c8bdc27" name="dwarves" arch="x86_64">
  <version epoch="0" ver="1.31" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.25-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 1.27-1" date="1719403200">- Resolves: RHEL-45148
- Add gating.yaml
- Add "Provides: pahole"
- New release: v1.26
- When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
- Print number of holes, bit holes and bit paddings in class member types.
- Introduce --contains_enumerator=ENUMERATOR_NAME:
- Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
- Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
- Fix loading DW_TAG_subroutine_type generated by the Go compiler.
- Fix loading of 32-bit signed enums from BTF.
- Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
- Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
- Do type expansion to cover "private" types and enumerations in btfdiff.
- New release: v1.27
- Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
- Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
- Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
- Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
- Fix hole discovery with inheritance in C++.</changelog>
  <changelog author="Davide Cavalca &lt;dcavalca@centosproject.org&gt; - 1.27-2" date="1723464000">- Backport upstream bugfixes for clang builds
  Resolves: RHEL-54228</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.27-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Gregory Bell &lt;grbell@redhat.com&gt; - 1.30-1" date="1750420800">- New release: 1.30
- Better detection of abort during DWARF loader thread processing
- pahole now detects presence of libbpf APIs and BTF features using weak function
  declarations when built using a shared library libbpf
- Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
- New release: 1.29
- Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
- The BTF encoding now is always reproducible, and as fast/faster than before.
- The memory consumption is reduced.
- Support for multiple BTF_DECL_TAGs pointing to same tag.
- Verify that pfunct prints btf_decl_tags read from BTF.
- Don't print functions twice when using 'pfunct -f function_name'.
- New release: 1.28
- Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
- Show flexible arrays statistics
- Add '--padding N' and '--padding_ge N' to show structs with paddings
- Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
- Don't stop pfunct output at the first function that matches a filter, show all of them
- Allow encoding data about all global variables, not just per CPU ones
- Handle .BTF_ids section endianness, fully supporting cross builds
- Generate decl tags for bpf_fastcall for eligible kfuncs
- Add "distilled_base" BTF feature to split BTF generation.
- Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
- Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
- Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
- Serialize access to elfutils dwarf_getlocation().
- Honour --lang_exclude when merging LTO built CUs.
- Add the debuginfod client cache directory to the vmlinux search path.
- Print the CU's language when a tag isn't supported.
- Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
- Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
- Introduce a tests/ directory with regression tests</changelog>
  <changelog author="Gregory Bell &lt;grbell@redhat.com&gt; - 1.31-1" date="1763553600">- Rework the selection of functions to represent in BTF, for instance:
- Skip functions that passes values thru the stack when those structs don't
  have expected alignment due to some attribute usage that then causes
  problems with BTF trampolines due to lack of expressiveness in BTF to
  signal such special cases.
- Skip objects (compile units) without DWARF: don't stop a multi object
  encoding session just because one doesn't have any DWARF in it.
- Fix BTF dedup by updating libbpf. 
- Fix the inference of the explicit alignment attribute of zero length arrays,
  like struct skb_ext-&gt;data[] in the Linux kernel. Important as BTF has no no
  explicit alignment attribute encoding.
- Fix the inference of alignments after bitfields, such as in struct
  nft_rule_dp-&gt;data[] after -&gt;handle:42, also in the Linux kernel.
- Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct.
- Add comparision of functions encoded in BTF between baseline 'master' branch
  and current branch, i.e. 'next'.</changelog>
</package>
<package pkgid="1707de7d7d380cfab87729c393eb14f98a65ac0c89505efeedd42e5cbc3bed04" name="dwz" arch="x86_64">
  <version epoch="0" ver="0.16" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 0.15-6" date="1706788800">- Bump release for SPDX change.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.15-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Maciej W. Rozycki &lt;macro@redhat.com&gt; - 0.16-1" date="1751630400">- Update to dwz 0.16</changelog>
</package>
<package pkgid="8ea6a67addf6964ad82855e2153162b3903dea218c6a2fc9f10af72df153a76f" name="dyninst" arch="x86_64">
  <version epoch="0" ver="13.0.0" rel="1.el10"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 12.3.0-1" date="1688472000">- Update to 12.3.0
- Add patch for cmake 3.27 support</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 12.3.0-1" date="1688472001">- migrated to SPDX license</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 12.3.0-2" date="1689076800">- side-tag respin</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.3.0-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 12.3.0-4" date="1705492800">- Rebuilt for Boost 1.83</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.3.0-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.3.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 12.3.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 12.3.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 13.0.0-1" date="1746187200">- Rebased to dyninst 13.0.0 + buildability patches
- Dropping testsuite</changelog>
</package>
<package pkgid="1edd1d3994d1f9ac86e4891f874194e1d9438fdb8301191e8058f016e83b938a" name="dyninst-devel" arch="x86_64">
  <version epoch="0" ver="13.0.0" rel="1.el10"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 12.3.0-1" date="1688472000">- Update to 12.3.0
- Add patch for cmake 3.27 support</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 12.3.0-1" date="1688472001">- migrated to SPDX license</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 12.3.0-2" date="1689076800">- side-tag respin</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.3.0-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 12.3.0-4" date="1705492800">- Rebuilt for Boost 1.83</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.3.0-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.3.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 12.3.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 12.3.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 13.0.0-1" date="1746187200">- Rebased to dyninst 13.0.0 + buildability patches
- Dropping testsuite</changelog>
</package>
<package pkgid="cda26edf2684c47a2cc36f53325f746545528df622e985cce2a0210b02ee334e" name="dyninst-doc" arch="x86_64">
  <version epoch="0" ver="13.0.0" rel="1.el10"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 12.3.0-1" date="1688472000">- Update to 12.3.0
- Add patch for cmake 3.27 support</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 12.3.0-1" date="1688472001">- migrated to SPDX license</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 12.3.0-2" date="1689076800">- side-tag respin</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.3.0-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 12.3.0-4" date="1705492800">- Rebuilt for Boost 1.83</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.3.0-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.3.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 12.3.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 12.3.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 13.0.0-1" date="1746187200">- Rebased to dyninst 13.0.0 + buildability patches
- Dropping testsuite</changelog>
</package>
<package pkgid="af51bfb4e9929f6b7c97e830d2eb95e9cd822bb8a8cb059207013e2b5688fe2d" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.47.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47.0-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Brian J. Murrell &lt;brian@interlinx.bc.ca&gt; - 1.47.0-5" date="1707480000">- Recommends: /usr/sbin/sendmail rather than sendmail as many packages
  can provide a /usr/sbin/sendmail command</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.47.1-1" date="1719316800">- Rebase to new upstream
- Remove stale patch from the package</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.47.1-2" date="1721649600">- Disable metadata_csum_seed and orphan_file features in mke2fs.conf</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.47.1-4" date="1750766400">- debugfs: byteswap dirsearch dirent buf on big endian systems
  Resolves: RHEL-74431</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.47.1-5" date="1763553600">- Bump release for SPDX rebuild
- Related: RHEL-119484</changelog>
</package>
<package pkgid="45371ea77a5f1a87df20a253f1a9298a5bd56f0e94eb65733c75f39527a3e1a2" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.47.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47.0-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Brian J. Murrell &lt;brian@interlinx.bc.ca&gt; - 1.47.0-5" date="1707480000">- Recommends: /usr/sbin/sendmail rather than sendmail as many packages
  can provide a /usr/sbin/sendmail command</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.47.1-1" date="1719316800">- Rebase to new upstream
- Remove stale patch from the package</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.47.1-2" date="1721649600">- Disable metadata_csum_seed and orphan_file features in mke2fs.conf</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.47.1-4" date="1750766400">- debugfs: byteswap dirsearch dirent buf on big endian systems
  Resolves: RHEL-74431</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.47.1-5" date="1763553600">- Bump release for SPDX rebuild
- Related: RHEL-119484</changelog>
</package>
<package pkgid="c67507639d7bed62658f9872774e684ad905743aba69495f7bb3426f84a6e541" name="e2fsprogs-libs" arch="x86_64">
  <version epoch="0" ver="1.47.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47.0-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Brian J. Murrell &lt;brian@interlinx.bc.ca&gt; - 1.47.0-5" date="1707480000">- Recommends: /usr/sbin/sendmail rather than sendmail as many packages
  can provide a /usr/sbin/sendmail command</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.47.1-1" date="1719316800">- Rebase to new upstream
- Remove stale patch from the package</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.47.1-2" date="1721649600">- Disable metadata_csum_seed and orphan_file features in mke2fs.conf</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.47.1-4" date="1750766400">- debugfs: byteswap dirsearch dirent buf on big endian systems
  Resolves: RHEL-74431</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.47.1-5" date="1763553600">- Bump release for SPDX rebuild
- Related: RHEL-119484</changelog>
</package>
<package pkgid="c18136a84270d22cb2b96f6a14a12e774e76bb48d00b03db1302fbedc34ab21b" name="e2fsprogs-static" arch="x86_64">
  <version epoch="0" ver="1.47.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47.0-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Brian J. Murrell &lt;brian@interlinx.bc.ca&gt; - 1.47.0-5" date="1707480000">- Recommends: /usr/sbin/sendmail rather than sendmail as many packages
  can provide a /usr/sbin/sendmail command</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.47.1-1" date="1719316800">- Rebase to new upstream
- Remove stale patch from the package</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.47.1-2" date="1721649600">- Disable metadata_csum_seed and orphan_file features in mke2fs.conf</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.47.1-4" date="1750766400">- debugfs: byteswap dirsearch dirent buf on big endian systems
  Resolves: RHEL-74431</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.47.1-5" date="1763553600">- Bump release for SPDX rebuild
- Related: RHEL-119484</changelog>
</package>
<package pkgid="99adf8f17ec6967ce63266773ccfe0c1d4c44ed3b44c8e6fcbd0e2b6ae8a92b7" name="e2scrub" arch="x86_64">
  <version epoch="0" ver="1.47.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47.0-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Brian J. Murrell &lt;brian@interlinx.bc.ca&gt; - 1.47.0-5" date="1707480000">- Recommends: /usr/sbin/sendmail rather than sendmail as many packages
  can provide a /usr/sbin/sendmail command</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.47.1-1" date="1719316800">- Rebase to new upstream
- Remove stale patch from the package</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.47.1-2" date="1721649600">- Disable metadata_csum_seed and orphan_file features in mke2fs.conf</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.47.1-4" date="1750766400">- debugfs: byteswap dirsearch dirent buf on big endian systems
  Resolves: RHEL-74431</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.47.1-5" date="1763553600">- Bump release for SPDX rebuild
- Related: RHEL-119484</changelog>
</package>
<package pkgid="a5c0b447dde97177e0ba84d2f9f7a35b642372c9f14dc1c7c494405e5c0cde43" name="easymock" arch="noarch">
  <version epoch="0" ver="4.3" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="91c8fd528854da2ede0c62f30c1bacaf8a5e3ec367e634ce4b5ae4d662cce7c7" name="easymock-javadoc" arch="noarch">
  <version epoch="0" ver="4.3" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bcd3fbfc1966ef73815fe2a05e55201d856eb9104cd3a94e2de74dc49efad9d3" name="ecj" arch="noarch">
  <version epoch="1" ver="4.23" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.23-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.23-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1:4.23-6" date="1689768001">- Build with default Java version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.23-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.23-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.23-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Adam Krajcik &lt;akrajcik@redhat.com&gt; - 1:4.23-10" date="1722945600">- Add gating
- Resolves: RHEL-52907 - Switch to using Java 21 as the default JDK</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.23-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ab0b11795136b5f2bcc69c48ac072497459eb440e360dd6ac279e43d458ae918" name="ed" arch="x86_64">
  <version epoch="0" ver="1.20" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.19-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1.19-3" date="1682337600">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.19-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.19-5" date="1703246400">- Avoid lzip dependency in RHEL builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.19-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.20-1" date="1705838400">- Update to 1.20 - Closes rhbz#2259352</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20-2" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.20-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Frantisek Sumsal &lt;fsumsal@redhat.com&gt; - 1.20-4" date="1729771200">- Add gating configuration for C10S/RHEL10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.20-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="4f85ceefc4ff92a42d4018ef6acaff60e6215f18fbe239d5ff6391970ebcc9ae" name="editorconfig" arch="x86_64">
  <version epoch="0" ver="0.12.9" rel="3.el10"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.12.6-1" date="1674388800">- Update to 0.12.6 (close RHBZ#2162811)
- Update License to SPDX
- Document and/or unbundle all bundled libraries</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.6-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.6-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.6-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.12.6-5" date="1709899200">- Use bundled uthash in RHEL builds</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.12.7-1" date="1712145600">- Update to 0.12.7 (close RHBZ#2272370)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.12.8-1" date="1718280000">- Update to 0.12.8 (close RHBZ#2292212)</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 0.12.9-1" date="1718798400">- Update to 0.12.9</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.12.9-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.12.9-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="df245d74c08caf87328b97c3730dbfc43a6f55c5c8ec7b4a13a49618168da6d9" name="editorconfig-devel" arch="x86_64">
  <version epoch="0" ver="0.12.9" rel="3.el10"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.12.6-1" date="1674388800">- Update to 0.12.6 (close RHBZ#2162811)
- Update License to SPDX
- Document and/or unbundle all bundled libraries</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.6-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.6-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.6-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.12.6-5" date="1709899200">- Use bundled uthash in RHEL builds</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.12.7-1" date="1712145600">- Update to 0.12.7 (close RHBZ#2272370)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.12.8-1" date="1718280000">- Update to 0.12.8 (close RHBZ#2292212)</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 0.12.9-1" date="1718798400">- Update to 0.12.9</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.12.9-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.12.9-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8eea7cec8b44661e392b962808aa92a148bb3e641526f72f4b62508665fb0e53" name="editorconfig-libs" arch="x86_64">
  <version epoch="0" ver="0.12.9" rel="3.el10"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.12.6-1" date="1674388800">- Update to 0.12.6 (close RHBZ#2162811)
- Update License to SPDX
- Document and/or unbundle all bundled libraries</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.6-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.6-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.6-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.12.6-5" date="1709899200">- Use bundled uthash in RHEL builds</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.12.7-1" date="1712145600">- Update to 0.12.7 (close RHBZ#2272370)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.12.8-1" date="1718280000">- Update to 0.12.8 (close RHBZ#2292212)</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 0.12.9-1" date="1718798400">- Update to 0.12.9</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.12.9-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.12.9-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5350b11aef80978c27b88d7d7e3ff44caf66d94085b267a77be635777bb33573" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="20251114" rel="5.el10"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250523-2" date="1751284800">- edk2-add-qemu-vars-builds-to-build-config-and-file-lists.patch [RHEL-2908]
- edk2-add-dbx-update-script.patch [RHEL-96866]
- edk2-update-dbx-to-20250610.patch [RHEL-96866]
- Resolves: RHEL-2908
  ([aarch64][EDK2] UEFI writable variable service in QEMU)
- Resolves: RHEL-96866
  ([edk2,rhel-10] dbx update 20250610)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-1" date="1759838400">- Rebase to edk2-stable202508 [RHEL-111718]
- Resolves: RHEL-111718
  ([edk2,rhel-10] rebase to edk2-stable202508)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-2" date="1760356800">- edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548]
- Resolves: RHEL-109548
  ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-3" date="1762171200">- edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880]
- Resolves: RHEL-115880
  (CVE-2025-9230 edk2: Out-of-bounds read &amp; write in RFC 3211 KEK Unwrap [rhel-10.2])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-4" date="1762948800">- edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085]
- edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085]
- Resolves: RHEL-126085
  ([edk2,rhel-10] dbx update to 20251016 / v1.6.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-1" date="1765368000">- Rebase to edk2-stable202511 [RHEL-118386]
- Resolves: RHEL-118386
  ([edk2,rhel-10] rebase to edk2-stable202511)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-2" date="1767873600">- edk2-ArmPkg-UefiCpuPkg-Fix-boot-failure-on-FEAT_LPA-only-.patch [RHEL-138335]
- Resolves: RHEL-138335
  ([AmpereoneX] ArmConfigureMmu: The MaxAddress 0xFFFFFFFFFFFFF is not supported by this MMU configuration)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-3" date="1770638400">- edk2-OvmfPkg-AmdSev-add-memory-debug-log-support.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiLib-drop-duplicate-MemDebugLog.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiCoreLib-enable-for-PEIMs.patch [RHEL-139470]
- edk2-ArmVirtPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- edk2-OvmfPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- Resolves: RHEL-139470
  (Enable memory debug logging support in firmware image configs)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-4" date="1770897600">- edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch [RHEL-134956]
- edk2-update-openssl-rhel-submodule.patch [RHEL-147785]
- edk2-update-openssl-rhel-tarball.patch [RHEL-147785]
- Resolves: RHEL-134956
  (CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution [rhel-10.2])
- Resolves: RHEL-147785
  ([edk2] pick up openssl updates)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5" date="1773057600">- edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696]
- Resolves: RHEL-150696
  (edk2: Add JSON descriptors for uefi-vars builds)</changelog>
</package>
<package pkgid="265b732f29dbac4df05f7afbbb5a8b243b281aa90ec4212373389276610eb1e3" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="20251114" rel="5.el10_2.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-2" date="1760356800">- edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548]
- Resolves: RHEL-109548
  ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-3" date="1762171200">- edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880]
- Resolves: RHEL-115880
  (CVE-2025-9230 edk2: Out-of-bounds read &amp; write in RFC 3211 KEK Unwrap [rhel-10.2])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-4" date="1762948800">- edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085]
- edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085]
- Resolves: RHEL-126085
  ([edk2,rhel-10] dbx update to 20251016 / v1.6.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-1" date="1765368000">- Rebase to edk2-stable202511 [RHEL-118386]
- Resolves: RHEL-118386
  ([edk2,rhel-10] rebase to edk2-stable202511)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-2" date="1767873600">- edk2-ArmPkg-UefiCpuPkg-Fix-boot-failure-on-FEAT_LPA-only-.patch [RHEL-138335]
- Resolves: RHEL-138335
  ([AmpereoneX] ArmConfigureMmu: The MaxAddress 0xFFFFFFFFFFFFF is not supported by this MMU configuration)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-3" date="1770638400">- edk2-OvmfPkg-AmdSev-add-memory-debug-log-support.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiLib-drop-duplicate-MemDebugLog.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiCoreLib-enable-for-PEIMs.patch [RHEL-139470]
- edk2-ArmVirtPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- edk2-OvmfPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- Resolves: RHEL-139470
  (Enable memory debug logging support in firmware image configs)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-4" date="1770897600">- edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch [RHEL-134956]
- edk2-update-openssl-rhel-submodule.patch [RHEL-147785]
- edk2-update-openssl-rhel-tarball.patch [RHEL-147785]
- Resolves: RHEL-134956
  (CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution [rhel-10.2])
- Resolves: RHEL-147785
  ([edk2] pick up openssl updates)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5" date="1773057600">- edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696]
- Resolves: RHEL-150696
  (edk2: Add JSON descriptors for uefi-vars builds)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5.el10_2.1" date="1776945600">- edk2-Bumped-to-OpenSSL-3.5.5-2.patch [RHEL-161573]
- Resolves: RHEL-161573
  (CVE-2026-31790 edk2: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key [rhel-10.2])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5.el10_2.2" date="1781006400">- edk2-Revert-OvmfPkg-X86QemuLoadImageLib-flip-default-for-.patch [RHEL-182421]
- edk2-Bumped-to-OpenSSL-3.5.5-3.patch [RHEL-165699]
- Resolves: RHEL-182421
  (edk2/x64: re-enable legacy kernel loader [rhel-10.2.z])
- Resolves: RHEL-165699
  (CVE-2026-28390 edk2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [rhel-10.2])</changelog>
</package>
<package pkgid="5359ed95167aff9de81c6fe3303b207124d00363e1155055196a01d548755718" name="edk2-ovmf" arch="noarch">
  <version epoch="0" ver="20251114" rel="5.el10"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250523-2" date="1751284800">- edk2-add-qemu-vars-builds-to-build-config-and-file-lists.patch [RHEL-2908]
- edk2-add-dbx-update-script.patch [RHEL-96866]
- edk2-update-dbx-to-20250610.patch [RHEL-96866]
- Resolves: RHEL-2908
  ([aarch64][EDK2] UEFI writable variable service in QEMU)
- Resolves: RHEL-96866
  ([edk2,rhel-10] dbx update 20250610)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-1" date="1759838400">- Rebase to edk2-stable202508 [RHEL-111718]
- Resolves: RHEL-111718
  ([edk2,rhel-10] rebase to edk2-stable202508)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-2" date="1760356800">- edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548]
- Resolves: RHEL-109548
  ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-3" date="1762171200">- edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880]
- Resolves: RHEL-115880
  (CVE-2025-9230 edk2: Out-of-bounds read &amp; write in RFC 3211 KEK Unwrap [rhel-10.2])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-4" date="1762948800">- edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085]
- edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085]
- Resolves: RHEL-126085
  ([edk2,rhel-10] dbx update to 20251016 / v1.6.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-1" date="1765368000">- Rebase to edk2-stable202511 [RHEL-118386]
- Resolves: RHEL-118386
  ([edk2,rhel-10] rebase to edk2-stable202511)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-2" date="1767873600">- edk2-ArmPkg-UefiCpuPkg-Fix-boot-failure-on-FEAT_LPA-only-.patch [RHEL-138335]
- Resolves: RHEL-138335
  ([AmpereoneX] ArmConfigureMmu: The MaxAddress 0xFFFFFFFFFFFFF is not supported by this MMU configuration)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-3" date="1770638400">- edk2-OvmfPkg-AmdSev-add-memory-debug-log-support.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiLib-drop-duplicate-MemDebugLog.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiCoreLib-enable-for-PEIMs.patch [RHEL-139470]
- edk2-ArmVirtPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- edk2-OvmfPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- Resolves: RHEL-139470
  (Enable memory debug logging support in firmware image configs)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-4" date="1770897600">- edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch [RHEL-134956]
- edk2-update-openssl-rhel-submodule.patch [RHEL-147785]
- edk2-update-openssl-rhel-tarball.patch [RHEL-147785]
- Resolves: RHEL-134956
  (CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution [rhel-10.2])
- Resolves: RHEL-147785
  ([edk2] pick up openssl updates)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5" date="1773057600">- edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696]
- Resolves: RHEL-150696
  (edk2: Add JSON descriptors for uefi-vars builds)</changelog>
</package>
<package pkgid="4bb2cda1a65acef0c9aba7c15f779b0fd8a63cc370fad8029236ea1b4ae09997" name="edk2-ovmf" arch="noarch">
  <version epoch="0" ver="20251114" rel="5.el10_2.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-2" date="1760356800">- edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548]
- Resolves: RHEL-109548
  ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-3" date="1762171200">- edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880]
- Resolves: RHEL-115880
  (CVE-2025-9230 edk2: Out-of-bounds read &amp; write in RFC 3211 KEK Unwrap [rhel-10.2])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-4" date="1762948800">- edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085]
- edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085]
- Resolves: RHEL-126085
  ([edk2,rhel-10] dbx update to 20251016 / v1.6.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-1" date="1765368000">- Rebase to edk2-stable202511 [RHEL-118386]
- Resolves: RHEL-118386
  ([edk2,rhel-10] rebase to edk2-stable202511)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-2" date="1767873600">- edk2-ArmPkg-UefiCpuPkg-Fix-boot-failure-on-FEAT_LPA-only-.patch [RHEL-138335]
- Resolves: RHEL-138335
  ([AmpereoneX] ArmConfigureMmu: The MaxAddress 0xFFFFFFFFFFFFF is not supported by this MMU configuration)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-3" date="1770638400">- edk2-OvmfPkg-AmdSev-add-memory-debug-log-support.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiLib-drop-duplicate-MemDebugLog.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiCoreLib-enable-for-PEIMs.patch [RHEL-139470]
- edk2-ArmVirtPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- edk2-OvmfPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- Resolves: RHEL-139470
  (Enable memory debug logging support in firmware image configs)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-4" date="1770897600">- edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch [RHEL-134956]
- edk2-update-openssl-rhel-submodule.patch [RHEL-147785]
- edk2-update-openssl-rhel-tarball.patch [RHEL-147785]
- Resolves: RHEL-134956
  (CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution [rhel-10.2])
- Resolves: RHEL-147785
  ([edk2] pick up openssl updates)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5" date="1773057600">- edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696]
- Resolves: RHEL-150696
  (edk2: Add JSON descriptors for uefi-vars builds)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5.el10_2.1" date="1776945600">- edk2-Bumped-to-OpenSSL-3.5.5-2.patch [RHEL-161573]
- Resolves: RHEL-161573
  (CVE-2026-31790 edk2: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key [rhel-10.2])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5.el10_2.2" date="1781006400">- edk2-Revert-OvmfPkg-X86QemuLoadImageLib-flip-default-for-.patch [RHEL-182421]
- edk2-Bumped-to-OpenSSL-3.5.5-3.patch [RHEL-165699]
- Resolves: RHEL-182421
  (edk2/x64: re-enable legacy kernel loader [rhel-10.2.z])
- Resolves: RHEL-165699
  (CVE-2026-28390 edk2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [rhel-10.2])</changelog>
</package>
<package pkgid="83c49ddcf094760c6799279272a7ed74f04099b295545979a593cd39b6b687f3" name="edk2-riscv64" arch="noarch">
  <version epoch="0" ver="20251114" rel="5.el10"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250523-2" date="1751284800">- edk2-add-qemu-vars-builds-to-build-config-and-file-lists.patch [RHEL-2908]
- edk2-add-dbx-update-script.patch [RHEL-96866]
- edk2-update-dbx-to-20250610.patch [RHEL-96866]
- Resolves: RHEL-2908
  ([aarch64][EDK2] UEFI writable variable service in QEMU)
- Resolves: RHEL-96866
  ([edk2,rhel-10] dbx update 20250610)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-1" date="1759838400">- Rebase to edk2-stable202508 [RHEL-111718]
- Resolves: RHEL-111718
  ([edk2,rhel-10] rebase to edk2-stable202508)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-2" date="1760356800">- edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548]
- Resolves: RHEL-109548
  ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-3" date="1762171200">- edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880]
- Resolves: RHEL-115880
  (CVE-2025-9230 edk2: Out-of-bounds read &amp; write in RFC 3211 KEK Unwrap [rhel-10.2])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-4" date="1762948800">- edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085]
- edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085]
- Resolves: RHEL-126085
  ([edk2,rhel-10] dbx update to 20251016 / v1.6.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-1" date="1765368000">- Rebase to edk2-stable202511 [RHEL-118386]
- Resolves: RHEL-118386
  ([edk2,rhel-10] rebase to edk2-stable202511)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-2" date="1767873600">- edk2-ArmPkg-UefiCpuPkg-Fix-boot-failure-on-FEAT_LPA-only-.patch [RHEL-138335]
- Resolves: RHEL-138335
  ([AmpereoneX] ArmConfigureMmu: The MaxAddress 0xFFFFFFFFFFFFF is not supported by this MMU configuration)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-3" date="1770638400">- edk2-OvmfPkg-AmdSev-add-memory-debug-log-support.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiLib-drop-duplicate-MemDebugLog.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiCoreLib-enable-for-PEIMs.patch [RHEL-139470]
- edk2-ArmVirtPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- edk2-OvmfPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- Resolves: RHEL-139470
  (Enable memory debug logging support in firmware image configs)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-4" date="1770897600">- edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch [RHEL-134956]
- edk2-update-openssl-rhel-submodule.patch [RHEL-147785]
- edk2-update-openssl-rhel-tarball.patch [RHEL-147785]
- Resolves: RHEL-134956
  (CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution [rhel-10.2])
- Resolves: RHEL-147785
  ([edk2] pick up openssl updates)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5" date="1773057600">- edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696]
- Resolves: RHEL-150696
  (edk2: Add JSON descriptors for uefi-vars builds)</changelog>
</package>
<package pkgid="5a51654b1812845b52a0a7e621eb667cdbfda4ac21c533921082748d0a910c37" name="edk2-riscv64" arch="noarch">
  <version epoch="0" ver="20251114" rel="5.el10_2.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-2" date="1760356800">- edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548]
- Resolves: RHEL-109548
  ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-3" date="1762171200">- edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880]
- Resolves: RHEL-115880
  (CVE-2025-9230 edk2: Out-of-bounds read &amp; write in RFC 3211 KEK Unwrap [rhel-10.2])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-4" date="1762948800">- edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085]
- edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085]
- Resolves: RHEL-126085
  ([edk2,rhel-10] dbx update to 20251016 / v1.6.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-1" date="1765368000">- Rebase to edk2-stable202511 [RHEL-118386]
- Resolves: RHEL-118386
  ([edk2,rhel-10] rebase to edk2-stable202511)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-2" date="1767873600">- edk2-ArmPkg-UefiCpuPkg-Fix-boot-failure-on-FEAT_LPA-only-.patch [RHEL-138335]
- Resolves: RHEL-138335
  ([AmpereoneX] ArmConfigureMmu: The MaxAddress 0xFFFFFFFFFFFFF is not supported by this MMU configuration)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-3" date="1770638400">- edk2-OvmfPkg-AmdSev-add-memory-debug-log-support.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiLib-drop-duplicate-MemDebugLog.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiCoreLib-enable-for-PEIMs.patch [RHEL-139470]
- edk2-ArmVirtPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- edk2-OvmfPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- Resolves: RHEL-139470
  (Enable memory debug logging support in firmware image configs)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-4" date="1770897600">- edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch [RHEL-134956]
- edk2-update-openssl-rhel-submodule.patch [RHEL-147785]
- edk2-update-openssl-rhel-tarball.patch [RHEL-147785]
- Resolves: RHEL-134956
  (CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution [rhel-10.2])
- Resolves: RHEL-147785
  ([edk2] pick up openssl updates)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5" date="1773057600">- edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696]
- Resolves: RHEL-150696
  (edk2: Add JSON descriptors for uefi-vars builds)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5.el10_2.1" date="1776945600">- edk2-Bumped-to-OpenSSL-3.5.5-2.patch [RHEL-161573]
- Resolves: RHEL-161573
  (CVE-2026-31790 edk2: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key [rhel-10.2])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5.el10_2.2" date="1781006400">- edk2-Revert-OvmfPkg-X86QemuLoadImageLib-flip-default-for-.patch [RHEL-182421]
- edk2-Bumped-to-OpenSSL-3.5.5-3.patch [RHEL-165699]
- Resolves: RHEL-182421
  (edk2/x64: re-enable legacy kernel loader [rhel-10.2.z])
- Resolves: RHEL-165699
  (CVE-2026-28390 edk2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [rhel-10.2])</changelog>
</package>
<package pkgid="8e36a75ed9da168e0310cb5ba12b1bf2bb33879e3d4626d3bb0ec1d3a2079bf1" name="edk2-tools" arch="x86_64">
  <version epoch="0" ver="20251114" rel="5.el10"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250523-2" date="1751284800">- edk2-add-qemu-vars-builds-to-build-config-and-file-lists.patch [RHEL-2908]
- edk2-add-dbx-update-script.patch [RHEL-96866]
- edk2-update-dbx-to-20250610.patch [RHEL-96866]
- Resolves: RHEL-2908
  ([aarch64][EDK2] UEFI writable variable service in QEMU)
- Resolves: RHEL-96866
  ([edk2,rhel-10] dbx update 20250610)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-1" date="1759838400">- Rebase to edk2-stable202508 [RHEL-111718]
- Resolves: RHEL-111718
  ([edk2,rhel-10] rebase to edk2-stable202508)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-2" date="1760356800">- edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548]
- Resolves: RHEL-109548
  ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-3" date="1762171200">- edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880]
- Resolves: RHEL-115880
  (CVE-2025-9230 edk2: Out-of-bounds read &amp; write in RFC 3211 KEK Unwrap [rhel-10.2])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-4" date="1762948800">- edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085]
- edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085]
- Resolves: RHEL-126085
  ([edk2,rhel-10] dbx update to 20251016 / v1.6.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-1" date="1765368000">- Rebase to edk2-stable202511 [RHEL-118386]
- Resolves: RHEL-118386
  ([edk2,rhel-10] rebase to edk2-stable202511)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-2" date="1767873600">- edk2-ArmPkg-UefiCpuPkg-Fix-boot-failure-on-FEAT_LPA-only-.patch [RHEL-138335]
- Resolves: RHEL-138335
  ([AmpereoneX] ArmConfigureMmu: The MaxAddress 0xFFFFFFFFFFFFF is not supported by this MMU configuration)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-3" date="1770638400">- edk2-OvmfPkg-AmdSev-add-memory-debug-log-support.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiLib-drop-duplicate-MemDebugLog.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiCoreLib-enable-for-PEIMs.patch [RHEL-139470]
- edk2-ArmVirtPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- edk2-OvmfPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- Resolves: RHEL-139470
  (Enable memory debug logging support in firmware image configs)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-4" date="1770897600">- edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch [RHEL-134956]
- edk2-update-openssl-rhel-submodule.patch [RHEL-147785]
- edk2-update-openssl-rhel-tarball.patch [RHEL-147785]
- Resolves: RHEL-134956
  (CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution [rhel-10.2])
- Resolves: RHEL-147785
  ([edk2] pick up openssl updates)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5" date="1773057600">- edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696]
- Resolves: RHEL-150696
  (edk2: Add JSON descriptors for uefi-vars builds)</changelog>
</package>
<package pkgid="eabdfee5d01144b633360e456ed19ee41f24eb4c714aacb84c055c3a91457495" name="edk2-tools" arch="x86_64">
  <version epoch="0" ver="20251114" rel="5.el10_2.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-2" date="1760356800">- edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548]
- Resolves: RHEL-109548
  ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-3" date="1762171200">- edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880]
- Resolves: RHEL-115880
  (CVE-2025-9230 edk2: Out-of-bounds read &amp; write in RFC 3211 KEK Unwrap [rhel-10.2])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-4" date="1762948800">- edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085]
- edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085]
- Resolves: RHEL-126085
  ([edk2,rhel-10] dbx update to 20251016 / v1.6.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-1" date="1765368000">- Rebase to edk2-stable202511 [RHEL-118386]
- Resolves: RHEL-118386
  ([edk2,rhel-10] rebase to edk2-stable202511)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-2" date="1767873600">- edk2-ArmPkg-UefiCpuPkg-Fix-boot-failure-on-FEAT_LPA-only-.patch [RHEL-138335]
- Resolves: RHEL-138335
  ([AmpereoneX] ArmConfigureMmu: The MaxAddress 0xFFFFFFFFFFFFF is not supported by this MMU configuration)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-3" date="1770638400">- edk2-OvmfPkg-AmdSev-add-memory-debug-log-support.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiLib-drop-duplicate-MemDebugLog.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiCoreLib-enable-for-PEIMs.patch [RHEL-139470]
- edk2-ArmVirtPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- edk2-OvmfPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- Resolves: RHEL-139470
  (Enable memory debug logging support in firmware image configs)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-4" date="1770897600">- edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch [RHEL-134956]
- edk2-update-openssl-rhel-submodule.patch [RHEL-147785]
- edk2-update-openssl-rhel-tarball.patch [RHEL-147785]
- Resolves: RHEL-134956
  (CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution [rhel-10.2])
- Resolves: RHEL-147785
  ([edk2] pick up openssl updates)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5" date="1773057600">- edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696]
- Resolves: RHEL-150696
  (edk2: Add JSON descriptors for uefi-vars builds)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5.el10_2.1" date="1776945600">- edk2-Bumped-to-OpenSSL-3.5.5-2.patch [RHEL-161573]
- Resolves: RHEL-161573
  (CVE-2026-31790 edk2: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key [rhel-10.2])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5.el10_2.2" date="1781006400">- edk2-Revert-OvmfPkg-X86QemuLoadImageLib-flip-default-for-.patch [RHEL-182421]
- edk2-Bumped-to-OpenSSL-3.5.5-3.patch [RHEL-165699]
- Resolves: RHEL-182421
  (edk2/x64: re-enable legacy kernel loader [rhel-10.2.z])
- Resolves: RHEL-165699
  (CVE-2026-28390 edk2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [rhel-10.2])</changelog>
</package>
<package pkgid="cdc61336c5c1259354e478e6bfde4594ad6965f7747bcd121eeb45a10299e61e" name="edk2-tools-doc" arch="noarch">
  <version epoch="0" ver="20251114" rel="5.el10"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250523-2" date="1751284800">- edk2-add-qemu-vars-builds-to-build-config-and-file-lists.patch [RHEL-2908]
- edk2-add-dbx-update-script.patch [RHEL-96866]
- edk2-update-dbx-to-20250610.patch [RHEL-96866]
- Resolves: RHEL-2908
  ([aarch64][EDK2] UEFI writable variable service in QEMU)
- Resolves: RHEL-96866
  ([edk2,rhel-10] dbx update 20250610)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-1" date="1759838400">- Rebase to edk2-stable202508 [RHEL-111718]
- Resolves: RHEL-111718
  ([edk2,rhel-10] rebase to edk2-stable202508)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-2" date="1760356800">- edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548]
- Resolves: RHEL-109548
  ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-3" date="1762171200">- edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880]
- Resolves: RHEL-115880
  (CVE-2025-9230 edk2: Out-of-bounds read &amp; write in RFC 3211 KEK Unwrap [rhel-10.2])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-4" date="1762948800">- edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085]
- edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085]
- Resolves: RHEL-126085
  ([edk2,rhel-10] dbx update to 20251016 / v1.6.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-1" date="1765368000">- Rebase to edk2-stable202511 [RHEL-118386]
- Resolves: RHEL-118386
  ([edk2,rhel-10] rebase to edk2-stable202511)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-2" date="1767873600">- edk2-ArmPkg-UefiCpuPkg-Fix-boot-failure-on-FEAT_LPA-only-.patch [RHEL-138335]
- Resolves: RHEL-138335
  ([AmpereoneX] ArmConfigureMmu: The MaxAddress 0xFFFFFFFFFFFFF is not supported by this MMU configuration)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-3" date="1770638400">- edk2-OvmfPkg-AmdSev-add-memory-debug-log-support.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiLib-drop-duplicate-MemDebugLog.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiCoreLib-enable-for-PEIMs.patch [RHEL-139470]
- edk2-ArmVirtPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- edk2-OvmfPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- Resolves: RHEL-139470
  (Enable memory debug logging support in firmware image configs)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-4" date="1770897600">- edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch [RHEL-134956]
- edk2-update-openssl-rhel-submodule.patch [RHEL-147785]
- edk2-update-openssl-rhel-tarball.patch [RHEL-147785]
- Resolves: RHEL-134956
  (CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution [rhel-10.2])
- Resolves: RHEL-147785
  ([edk2] pick up openssl updates)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5" date="1773057600">- edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696]
- Resolves: RHEL-150696
  (edk2: Add JSON descriptors for uefi-vars builds)</changelog>
</package>
<package pkgid="961e2deea6693d7fadec222ce63d740542d1436250da184b94a70bac1d2e6ff8" name="edk2-tools-doc" arch="noarch">
  <version epoch="0" ver="20251114" rel="5.el10_2.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-2" date="1760356800">- edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548]
- Resolves: RHEL-109548
  ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-3" date="1762171200">- edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880]
- Resolves: RHEL-115880
  (CVE-2025-9230 edk2: Out-of-bounds read &amp; write in RFC 3211 KEK Unwrap [rhel-10.2])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20250822-4" date="1762948800">- edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085]
- edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085]
- Resolves: RHEL-126085
  ([edk2,rhel-10] dbx update to 20251016 / v1.6.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-1" date="1765368000">- Rebase to edk2-stable202511 [RHEL-118386]
- Resolves: RHEL-118386
  ([edk2,rhel-10] rebase to edk2-stable202511)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-2" date="1767873600">- edk2-ArmPkg-UefiCpuPkg-Fix-boot-failure-on-FEAT_LPA-only-.patch [RHEL-138335]
- Resolves: RHEL-138335
  ([AmpereoneX] ArmConfigureMmu: The MaxAddress 0xFFFFFFFFFFFFF is not supported by this MMU configuration)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-3" date="1770638400">- edk2-OvmfPkg-AmdSev-add-memory-debug-log-support.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiLib-drop-duplicate-MemDebugLog.patch [RHEL-139470]
- edk2-OvmfPkg-MemDebugLogPeiCoreLib-enable-for-PEIMs.patch [RHEL-139470]
- edk2-ArmVirtPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- edk2-OvmfPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
- Resolves: RHEL-139470
  (Enable memory debug logging support in firmware image configs)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-4" date="1770897600">- edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch [RHEL-134956]
- edk2-update-openssl-rhel-submodule.patch [RHEL-147785]
- edk2-update-openssl-rhel-tarball.patch [RHEL-147785]
- Resolves: RHEL-134956
  (CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution [rhel-10.2])
- Resolves: RHEL-147785
  ([edk2] pick up openssl updates)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5" date="1773057600">- edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696]
- Resolves: RHEL-150696
  (edk2: Add JSON descriptors for uefi-vars builds)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5.el10_2.1" date="1776945600">- edk2-Bumped-to-OpenSSL-3.5.5-2.patch [RHEL-161573]
- Resolves: RHEL-161573
  (CVE-2026-31790 edk2: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key [rhel-10.2])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20251114-5.el10_2.2" date="1781006400">- edk2-Revert-OvmfPkg-X86QemuLoadImageLib-flip-default-for-.patch [RHEL-182421]
- edk2-Bumped-to-OpenSSL-3.5.5-3.patch [RHEL-165699]
- Resolves: RHEL-182421
  (edk2/x64: re-enable legacy kernel loader [rhel-10.2.z])
- Resolves: RHEL-165699
  (CVE-2026-28390 edk2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [rhel-10.2])</changelog>
</package>
<package pkgid="1f67f02947705fb686ef4e4b23301df30dde7c10eabc83aa937d5724e19135fc" name="efi-filesystem" arch="noarch">
  <version epoch="0" ver="6" rel="7.el10.rocky.0.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 6-3" date="1722340800">- Update to efi-rpm-macros version 6
- Resolves: #RHEL-50848</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 6-4" date="1726833600">- source: Updated the archive to match upstream
- Resolves: #RHEL-54694</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 6-6" date="1734004800">- Bump release for previous commit
- Related: #RHELMISC-8249</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 6-7" date="1743076800">- Add riscv64 support
- Resolves: #RHEL-83387</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 6-7.rocky.0.1" date="1773576000">- Add riscv64 to efi arches</changelog>
</package>
<package pkgid="d212996164fd048e7253eeaa96725336c5a301b5ffc7a5043bd5aa1dbd02a434" name="efi-srpm-macros" arch="noarch">
  <version epoch="0" ver="6" rel="7.el10.rocky.0.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 6-3" date="1722340800">- Update to efi-rpm-macros version 6
- Resolves: #RHEL-50848</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 6-4" date="1726833600">- source: Updated the archive to match upstream
- Resolves: #RHEL-54694</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 6-6" date="1734004800">- Bump release for previous commit
- Related: #RHELMISC-8249</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 6-7" date="1743076800">- Add riscv64 support
- Resolves: #RHEL-83387</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 6-7.rocky.0.1" date="1773576000">- Add riscv64 to efi arches</changelog>
</package>
<package pkgid="30ef2bb20dc88b39f0da68711b8f8bc3d65438465aebb88d804edab4de81e3e7" name="efibootmgr" arch="x86_64">
  <version epoch="0" ver="18" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt;" date="1702468800">- Migrate to SPDX license
- Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7464eff512d6b87e09230b14bb603254c43debe07410931394e645730b4b8616" name="efivar" arch="x86_64">
  <version epoch="0" ver="39" rel="3.el10"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-6" date="1673352000">- Fix inheritance of buildflags</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 39-1" date="1706702400">- Update to efivar-39</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b164e2ecf5ff0690df7e9af28882eb844494a9c143750d19ef80ccdbf4100c64" name="efivar-devel" arch="x86_64">
  <version epoch="0" ver="39" rel="3.el10"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-6" date="1673352000">- Fix inheritance of buildflags</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 39-1" date="1706702400">- Update to efivar-39</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="60464728c961a66b6ca189f325825a2d6b5414d978d5848b36b11cf2abe98c8a" name="efivar-libs" arch="x86_64">
  <version epoch="0" ver="39" rel="3.el10"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 38-6" date="1673352000">- Fix inheritance of buildflags</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 39-1" date="1706702400">- Update to efivar-39</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="49dd198fcfd376fbb7793ea104b9d228818169d21642796dcba73cda5f27e017" name="efs-utils" arch="noarch">
  <version epoch="0" ver="1.35.1" rel="1.el10"/>
  <changelog author="Rocky Linux Build System (Peridot) &lt;releng@rockylinux.org&gt; - 1.35.1-1.el10" date="1709467200">- local build</changelog>
</package>
<package pkgid="f9a0fb2673a8f714902d439aeab33fa73ea16e249d6552f967aa1c14c24b77a4" name="efs-utils-selinux" arch="noarch">
  <version epoch="0" ver="1.35.1" rel="1.el10"/>
  <changelog author="Rocky Linux Build System (Peridot) &lt;releng@rockylinux.org&gt; - 1.35.1-1.el10" date="1709467200">- local build</changelog>
</package>
<package pkgid="3d1d67d50e5666b6f3b580405be0819d481a099932674b32e0a3e1bc477433d5" name="egl-utils" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="8.el10"/>
  <changelog author="Erico Nunes &lt;ernunes@redhat.com&gt; - 8.5.0-1" date="1675425600">- Update to 8.5.0
- Change build system to meson</changelog>
  <changelog author="Erico Nunes &lt;ernunes@redhat.com&gt; - 9.0.0-1" date="1679918400">- Update to 9.0.0
- Enable vulkan demos</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.0.0-2" date="1682424000">- Install all necessary shader files (#1373299)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt;" date="1694088000">- SPDX migration: license is already SPDX compatible</changelog>
  <changelog author="Erico Nunes &lt;ernunes@redhat.com&gt; - 9.0.0-4" date="1696334400">- Split xdriinfo into its own package
- Remove xdriinfo additional source build and autotools dependencies</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.0-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.0-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fc77cb63e137c2916d44e3971ba69876fc012eb26c48cb2ab5b117e15cf8c548" name="egl-wayland" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="2.el10"/>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 1.1.12-2" date="1689768000">- Add patch to fix rhbz#2223856</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.12-3" date="1689768001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.12-4" date="1694088000">- SPDX migration: license is already SPDX compatible</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 1.1.13-1" date="1697803200">- Update to 1.1.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.13-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.13-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.13-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.15-1" date="1724068800">- Update to 1.1.15</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.16-1" date="1724673600">- Update to 1.1.16</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.16-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ef824af10544cbb4f10312e25f99ce0be20829651334e74f6d4bb0a97ed5f7d8" name="egl-wayland-devel" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="2.el10"/>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 1.1.12-2" date="1689768000">- Add patch to fix rhbz#2223856</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.12-3" date="1689768001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.12-4" date="1694088000">- SPDX migration: license is already SPDX compatible</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 1.1.13-1" date="1697803200">- Update to 1.1.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.13-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.13-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.13-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.15-1" date="1724068800">- Update to 1.1.15</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.16-1" date="1724673600">- Update to 1.1.16</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.16-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5a61707af0723b02321fa69d85a818d4fbfa21de33ac27bb5e9fb2ab4cbadd6e" name="eglexternalplatform-devel" arch="noarch">
  <version epoch="0" ver="1.2.1" rel="1.el10"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 1.2-2" date="1725451200">- Adjust path of generated pkg-config file so it's still considered noarch.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-3" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 1.2.1-1" date="1743076800">- Update to 1.2.1.
- Trim changelog.</changelog>
</package>
<package pkgid="2b2cecc7135fd155f4c0063b1f179f4d2b0933aabe65a026e6754dc5a39c913d" name="eigen3-devel" arch="noarch">
  <version epoch="0" ver="3.4.0" rel="17.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.4.0-10" date="1686830400">- Avoid extra test dependencies in RHEL builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-11" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.4.0-12" date="1691064000">- Drop unused glew build dependency</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-13" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-14" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 3.4.0-15" date="1707048000">- Rebuild with suitesparse 7.6.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.0-16" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.0-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c369c8829aa50031352f260c297037e2e8bb94768638f18a4beb14a68aa72f2b" name="eigen3-doc" arch="noarch">
  <version epoch="0" ver="3.4.0" rel="17.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.4.0-10" date="1686830400">- Avoid extra test dependencies in RHEL builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-11" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.4.0-12" date="1691064000">- Drop unused glew build dependency</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-13" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-14" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 3.4.0-15" date="1707048000">- Rebuild with suitesparse 7.6.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.0-16" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.0-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c46ed718f4fb26c4d87d448c637b157ff9f34d91c44664314e5ae15bd583d8c6" name="elfutils" arch="x86_64">
  <version epoch="0" ver="0.194" rel="2.el10.rocky.0.1"/>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-2.rocky.0.1" date="1773144000">- Remove debuginfod URL until it is available</changelog>
</package>
<package pkgid="523d5e25fe2b3a676d59450a6866c40fb4ed0b35102542674cebcce6e56919cb" name="elfutils-debuginfod" arch="x86_64">
  <version epoch="0" ver="0.194" rel="2.el10.rocky.0.1"/>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-2.rocky.0.1" date="1773144000">- Remove debuginfod URL until it is available</changelog>
</package>
<package pkgid="c043431e8e0695f1bb0d36f341c41a6e4c23c1d5aa5ca5ea57de848bf6e6f0d3" name="elfutils-debuginfod-client" arch="x86_64">
  <version epoch="0" ver="0.194" rel="2.el10.rocky.0.1"/>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-2.rocky.0.1" date="1773144000">- Remove debuginfod URL until it is available</changelog>
</package>
<package pkgid="6dac0339b2456100b1e3d20879850a201d261e816947b354ddc6f6e19c489cdf" name="elfutils-debuginfod-client-devel" arch="x86_64">
  <version epoch="0" ver="0.194" rel="2.el10.rocky.0.1"/>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-2.rocky.0.1" date="1773144000">- Remove debuginfod URL until it is available</changelog>
</package>
<package pkgid="d8e8f00a4f1cfc0271506c72991545948a1abf34aff5a0e5b522a1c6acf56a34" name="elfutils-default-yama-scope" arch="noarch">
  <version epoch="0" ver="0.194" rel="2.el10.rocky.0.1"/>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-2.rocky.0.1" date="1773144000">- Remove debuginfod URL until it is available</changelog>
</package>
<package pkgid="199769bbfb4611c4fe1ee33844a0b6d27885c6894b23bb69e5d3ee6876f1594d" name="elfutils-devel" arch="x86_64">
  <version epoch="0" ver="0.194" rel="2.el10.rocky.0.1"/>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-2.rocky.0.1" date="1773144000">- Remove debuginfod URL until it is available</changelog>
</package>
<package pkgid="3d6dce240b1095082b9f4673c6bd418fe74f050e4cb9a710aa2435854ca3cfe5" name="elfutils-libelf" arch="x86_64">
  <version epoch="0" ver="0.194" rel="2.el10.rocky.0.1"/>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-2.rocky.0.1" date="1773144000">- Remove debuginfod URL until it is available</changelog>
</package>
<package pkgid="9a0ac76897188c51f39cf3024a9c2f860ba0b93b07a2e691e6242a66fcfeea72" name="elfutils-libelf-devel" arch="x86_64">
  <version epoch="0" ver="0.194" rel="2.el10.rocky.0.1"/>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-2.rocky.0.1" date="1773144000">- Remove debuginfod URL until it is available</changelog>
</package>
<package pkgid="e96f25d599d8b39c6f37d52e5d0377a8901a132d226b3d9bb61ca77bac8a8dbc" name="elfutils-libs" arch="x86_64">
  <version epoch="0" ver="0.194" rel="2.el10.rocky.0.1"/>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.194-2.rocky.0.1" date="1773144000">- Remove debuginfod URL until it is available</changelog>
</package>
<package pkgid="2dbf3d7510a3d4e47185bbb033f75403eab630b0d9b4df578342a3c8e291030e" name="elinks" arch="x86_64">
  <version epoch="0" ver="0.17.0" rel="6.el10"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 0.16.0-4" date="1679659200">- Port configure script to C99</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.16.0-5" date="1681214400">- migrate to SPDX license format</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.16.1.1-1" date="1683028800">- new upstream release (rhbz#2192272)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16.1.1-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.17.0-1" date="1704196800">- rebase to latest upstream release (rhbz#2255830)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.17.0-4" date="1706788800">- disable gpm integration for RHEL 10 (RHEL-23701)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.17.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.17.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e5cca368da587d9549337fed66d3d4004eecaf30ed535ab7635394ddaaf181ca" name="elrepo-release" arch="noarch">
  <version epoch="0" ver="10.0" rel="1.el10"/>
  <changelog author="Akemi Yagi &lt;toracat@elrepo.org&gt; - 10.0-1" date="1740571200">- Initial elrepo-release package for rhel10</changelog>
</package>
<package pkgid="f2f653a2ebcba08352c3aadd9085ce8754387361ba1fc28b1f4710a147dc5d7c" name="emacs" arch="x86_64">
  <version epoch="1" ver="29.4" rel="12.el10"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-3" date="1724328000">- Improve the security of the generated code by hardening</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-4" date="1724328001">- Unset custom linker flags</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-5" date="1726660800">- tests: fix URL to internal tests repo</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-6" date="1726660801">- tests: fix filter to include missing gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:29.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-8" date="1731499200">- Bump release</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-9" date="1731585600">- Add libtree-sitter as runtime dependency</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-10" date="1741608000">- Fix man.el shell injection vulnerability</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-11" date="1750161600">- Pong and Tetris are excluded</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-12" date="1750161601">- Fix flymake tests with GCC 14</changelog>
</package>
<package pkgid="b95c591d08a8b00f2e7ac60945358e7ffdd0ec5bd9674c5ed002ce43ae08488d" name="emacs" arch="x86_64">
  <version epoch="1" ver="29.4" rel="13.el10_2"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-4" date="1724328000">- Unset custom linker flags</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-5" date="1726660800">- tests: fix URL to internal tests repo</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-6" date="1726660801">- tests: fix filter to include missing gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:29.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-8" date="1731499200">- Bump release</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-9" date="1731585600">- Add libtree-sitter as runtime dependency</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-10" date="1741608000">- Fix man.el shell injection vulnerability</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-11" date="1750161600">- Pong and Tetris are excluded</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-12" date="1750161601">- Fix flymake tests with GCC 14</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-13" date="1772798400">- Fix CVE-2024-53920 arbitrary code execution vulnerability</changelog>
</package>
<package pkgid="c1df9b8f9569deac743b9f18975929cccd97497af3c790472a94d25fe999c8ab" name="emacs-anthy-unicode" arch="noarch">
  <version epoch="0" ver="1.0.0.20240502" rel="12.el10"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.0.0.20240502-11" date="1723982400">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.0.20240502-12" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="9583c3cad8a3fa2bbcd4230fc17f36a019c27728ec1e47c2087cee0739a9fac2" name="emacs-auctex" arch="noarch">
  <version epoch="0" ver="13.3" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.1-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 13.2-1" date="1682337600">- Version 13.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 13.3-1" date="1705492800">- Version 13.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.3-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.3-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 13.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 13.3-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="26aa1fa0524f39f6b89a2566fab426a29ad54dcafada73896977393cbb3e14c0" name="emacs-auctex-doc" arch="noarch">
  <version epoch="0" ver="13.3" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.1-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 13.2-1" date="1682337600">- Version 13.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 13.3-1" date="1705492800">- Version 13.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.3-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.3-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 13.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 13.3-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="aef46a82bc3e92c5fc59ec8aa3b1d5764aa78e58657e3c09654c7433683555ac" name="emacs-common" arch="x86_64">
  <version epoch="1" ver="29.4" rel="12.el10"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-3" date="1724328000">- Improve the security of the generated code by hardening</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-4" date="1724328001">- Unset custom linker flags</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-5" date="1726660800">- tests: fix URL to internal tests repo</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-6" date="1726660801">- tests: fix filter to include missing gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:29.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-8" date="1731499200">- Bump release</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-9" date="1731585600">- Add libtree-sitter as runtime dependency</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-10" date="1741608000">- Fix man.el shell injection vulnerability</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-11" date="1750161600">- Pong and Tetris are excluded</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-12" date="1750161601">- Fix flymake tests with GCC 14</changelog>
</package>
<package pkgid="847654bd3a9ff80297a2eb3c2e14f4510e2109de790241ee3aeaf920ad2fd42d" name="emacs-common" arch="x86_64">
  <version epoch="1" ver="29.4" rel="13.el10_2"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-4" date="1724328000">- Unset custom linker flags</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-5" date="1726660800">- tests: fix URL to internal tests repo</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-6" date="1726660801">- tests: fix filter to include missing gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:29.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-8" date="1731499200">- Bump release</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-9" date="1731585600">- Add libtree-sitter as runtime dependency</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-10" date="1741608000">- Fix man.el shell injection vulnerability</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-11" date="1750161600">- Pong and Tetris are excluded</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-12" date="1750161601">- Fix flymake tests with GCC 14</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-13" date="1772798400">- Fix CVE-2024-53920 arbitrary code execution vulnerability</changelog>
</package>
<package pkgid="f12152a887103714b97899ca9687cb5c6243a0d22186c4d7b2a20ff550ae3d20" name="emacs-devel" arch="x86_64">
  <version epoch="1" ver="29.4" rel="12.el10"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-3" date="1724328000">- Improve the security of the generated code by hardening</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-4" date="1724328001">- Unset custom linker flags</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-5" date="1726660800">- tests: fix URL to internal tests repo</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-6" date="1726660801">- tests: fix filter to include missing gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:29.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-8" date="1731499200">- Bump release</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-9" date="1731585600">- Add libtree-sitter as runtime dependency</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-10" date="1741608000">- Fix man.el shell injection vulnerability</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-11" date="1750161600">- Pong and Tetris are excluded</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-12" date="1750161601">- Fix flymake tests with GCC 14</changelog>
</package>
<package pkgid="9c1f8aa4a854a09512b5fa77935a2806b3113ea1a8d983bfd1463d7bf6cde364" name="emacs-devel" arch="x86_64">
  <version epoch="1" ver="29.4" rel="13.el10_2"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-4" date="1724328000">- Unset custom linker flags</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-5" date="1726660800">- tests: fix URL to internal tests repo</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-6" date="1726660801">- tests: fix filter to include missing gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:29.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-8" date="1731499200">- Bump release</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-9" date="1731585600">- Add libtree-sitter as runtime dependency</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-10" date="1741608000">- Fix man.el shell injection vulnerability</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-11" date="1750161600">- Pong and Tetris are excluded</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-12" date="1750161601">- Fix flymake tests with GCC 14</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-13" date="1772798400">- Fix CVE-2024-53920 arbitrary code execution vulnerability</changelog>
</package>
<package pkgid="ab52533bd745212834e1071abec480c913f1dd9b8672e92912e7deff1b5ca08c" name="emacs-filesystem" arch="noarch">
  <version epoch="1" ver="29.4" rel="12.el10"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-3" date="1724328000">- Improve the security of the generated code by hardening</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-4" date="1724328001">- Unset custom linker flags</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-5" date="1726660800">- tests: fix URL to internal tests repo</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-6" date="1726660801">- tests: fix filter to include missing gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:29.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-8" date="1731499200">- Bump release</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-9" date="1731585600">- Add libtree-sitter as runtime dependency</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-10" date="1741608000">- Fix man.el shell injection vulnerability</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-11" date="1750161600">- Pong and Tetris are excluded</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-12" date="1750161601">- Fix flymake tests with GCC 14</changelog>
</package>
<package pkgid="55e36fa5b5bf696b92e393432215dbe9f0cf94df7f3d301dc4d0727172dc2007" name="emacs-filesystem" arch="noarch">
  <version epoch="1" ver="29.4" rel="13.el10_2"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-4" date="1724328000">- Unset custom linker flags</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-5" date="1726660800">- tests: fix URL to internal tests repo</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-6" date="1726660801">- tests: fix filter to include missing gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:29.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-8" date="1731499200">- Bump release</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-9" date="1731585600">- Add libtree-sitter as runtime dependency</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-10" date="1741608000">- Fix man.el shell injection vulnerability</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-11" date="1750161600">- Pong and Tetris are excluded</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-12" date="1750161601">- Fix flymake tests with GCC 14</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-13" date="1772798400">- Fix CVE-2024-53920 arbitrary code execution vulnerability</changelog>
</package>
<package pkgid="fa353de43ef2c367c8b9b5c3c0920d12a91cc0bc139fb2001c777d4432fd07c7" name="emacs-gettext" arch="noarch">
  <version epoch="0" ver="0.22.5" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.4-1" date="1707480000">- update to 0.22.4 release
- https://savannah.gnu.org/news/?id=10544</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.4-2" date="1708516800">- Add back libtextstyle library for rawhide (#2264128)</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-1" date="1709553600">- update to 0.22.5 release
- https://savannah.gnu.org/news/?id=10597</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.22.5-2" date="1709899200">- condition libtextstyle obsoletes</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.5-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-4" date="1720094400">- Add explicit package version requirement for libtextstyle</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-5" date="1720699200">- CI gating tests migration to tmt</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4e16dc6cff8303bde4ce596eb949760b525e0e597004e0a7a5c337b6555489ee" name="emacs-gtk+x11" arch="x86_64">
  <version epoch="1" ver="29.4" rel="12.el10"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-3" date="1724328000">- Improve the security of the generated code by hardening</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-4" date="1724328001">- Unset custom linker flags</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-5" date="1726660800">- tests: fix URL to internal tests repo</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-6" date="1726660801">- tests: fix filter to include missing gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:29.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-8" date="1731499200">- Bump release</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-9" date="1731585600">- Add libtree-sitter as runtime dependency</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-10" date="1741608000">- Fix man.el shell injection vulnerability</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-11" date="1750161600">- Pong and Tetris are excluded</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-12" date="1750161601">- Fix flymake tests with GCC 14</changelog>
</package>
<package pkgid="847b27c6a1eed705cce4e6a89c6eefe0502580979da1a36235292d6af7795d7e" name="emacs-gtk+x11" arch="x86_64">
  <version epoch="1" ver="29.4" rel="13.el10_2"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-4" date="1724328000">- Unset custom linker flags</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-5" date="1726660800">- tests: fix URL to internal tests repo</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-6" date="1726660801">- tests: fix filter to include missing gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:29.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-8" date="1731499200">- Bump release</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-9" date="1731585600">- Add libtree-sitter as runtime dependency</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-10" date="1741608000">- Fix man.el shell injection vulnerability</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-11" date="1750161600">- Pong and Tetris are excluded</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-12" date="1750161601">- Fix flymake tests with GCC 14</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-13" date="1772798400">- Fix CVE-2024-53920 arbitrary code execution vulnerability</changelog>
</package>
<package pkgid="6598b9bd684812f4a6fc25630587b2ecb3263ab19f6784bd4bb3d302aa8ee017" name="emacs-lucid" arch="x86_64">
  <version epoch="1" ver="29.4" rel="12.el10"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-3" date="1724328000">- Improve the security of the generated code by hardening</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-4" date="1724328001">- Unset custom linker flags</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-5" date="1726660800">- tests: fix URL to internal tests repo</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-6" date="1726660801">- tests: fix filter to include missing gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:29.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-8" date="1731499200">- Bump release</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-9" date="1731585600">- Add libtree-sitter as runtime dependency</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-10" date="1741608000">- Fix man.el shell injection vulnerability</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-11" date="1750161600">- Pong and Tetris are excluded</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-12" date="1750161601">- Fix flymake tests with GCC 14</changelog>
</package>
<package pkgid="927b879ed8bede4590412d1d420a73d49f9874cf60ba060f6b6c1da12209cd2e" name="emacs-lucid" arch="x86_64">
  <version epoch="1" ver="29.4" rel="13.el10_2"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-4" date="1724328000">- Unset custom linker flags</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-5" date="1726660800">- tests: fix URL to internal tests repo</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-6" date="1726660801">- tests: fix filter to include missing gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:29.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-8" date="1731499200">- Bump release</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-9" date="1731585600">- Add libtree-sitter as runtime dependency</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-10" date="1741608000">- Fix man.el shell injection vulnerability</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-11" date="1750161600">- Pong and Tetris are excluded</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-12" date="1750161601">- Fix flymake tests with GCC 14</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-13" date="1772798400">- Fix CVE-2024-53920 arbitrary code execution vulnerability</changelog>
</package>
<package pkgid="00f0b6d3cbb8f918d510f360d722c7b80fa9234231c28d587a9a5470df038654" name="emacs-nw" arch="x86_64">
  <version epoch="1" ver="29.4" rel="12.el10"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-3" date="1724328000">- Improve the security of the generated code by hardening</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-4" date="1724328001">- Unset custom linker flags</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-5" date="1726660800">- tests: fix URL to internal tests repo</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-6" date="1726660801">- tests: fix filter to include missing gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:29.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-8" date="1731499200">- Bump release</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-9" date="1731585600">- Add libtree-sitter as runtime dependency</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-10" date="1741608000">- Fix man.el shell injection vulnerability</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-11" date="1750161600">- Pong and Tetris are excluded</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-12" date="1750161601">- Fix flymake tests with GCC 14</changelog>
</package>
<package pkgid="578891dab0f375db8258a43526d37a5ad6a38c0ae472948603610a3483f6e84e" name="emacs-nw" arch="x86_64">
  <version epoch="1" ver="29.4" rel="13.el10_2"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-4" date="1724328000">- Unset custom linker flags</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-5" date="1726660800">- tests: fix URL to internal tests repo</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-6" date="1726660801">- tests: fix filter to include missing gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:29.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-8" date="1731499200">- Bump release</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-9" date="1731585600">- Add libtree-sitter as runtime dependency</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-10" date="1741608000">- Fix man.el shell injection vulnerability</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-11" date="1750161600">- Pong and Tetris are excluded</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-12" date="1750161601">- Fix flymake tests with GCC 14</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-13" date="1772798400">- Fix CVE-2024-53920 arbitrary code execution vulnerability</changelog>
</package>
<package pkgid="296884846038c012cc20db63b7f1632f2a9f758131457ef28af4b9c47678b7e5" name="emacs-terminal" arch="noarch">
  <version epoch="1" ver="29.4" rel="12.el10"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-3" date="1724328000">- Improve the security of the generated code by hardening</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-4" date="1724328001">- Unset custom linker flags</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-5" date="1726660800">- tests: fix URL to internal tests repo</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-6" date="1726660801">- tests: fix filter to include missing gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:29.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-8" date="1731499200">- Bump release</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-9" date="1731585600">- Add libtree-sitter as runtime dependency</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-10" date="1741608000">- Fix man.el shell injection vulnerability</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-11" date="1750161600">- Pong and Tetris are excluded</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-12" date="1750161601">- Fix flymake tests with GCC 14</changelog>
</package>
<package pkgid="71feb5e4d466f66b1b12cd6b993eef46f34d4742f4b00170140980957982da99" name="emacs-terminal" arch="noarch">
  <version epoch="1" ver="29.4" rel="13.el10_2"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-4" date="1724328000">- Unset custom linker flags</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-5" date="1726660800">- tests: fix URL to internal tests repo</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:29.4-6" date="1726660801">- tests: fix filter to include missing gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:29.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-8" date="1731499200">- Bump release</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-9" date="1731585600">- Add libtree-sitter as runtime dependency</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-10" date="1741608000">- Fix man.el shell injection vulnerability</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-11" date="1750161600">- Pong and Tetris are excluded</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-12" date="1750161601">- Fix flymake tests with GCC 14</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:29.4-13" date="1772798400">- Fix CVE-2024-53920 arbitrary code execution vulnerability</changelog>
</package>
<package pkgid="844dbeb723f5988da390506f9d03a05055b08fca3e6c24f7fb983c97422c5893" name="emoji-picker" arch="noarch">
  <version epoch="0" ver="2.25.13" rel="2.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.4-1" date="1713182400">- Resolves: RHEL-31506 Update to 2.25.4
- Pass key which triggered cancel command to application if
  self._min_char_complete == 0 and there are no candidates (Resolves:
  https://github.com/mike-fabian/ibus-typing-booster/issues/505)
- Update emoji annotations from CLDR
- Translation update from Weblate (ka 100%)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.6-1" date="1713182401">- Resolves: RHEL-31506 Update to 2.25.6
- If Shift+something is pressed and then released, do not swallow the
  release of the Shift key (Resolves: https://github.com/mike-fabian/ibus-
  typing-booster/issues/504)
- Decrease grid_row_spacing from 5 to 1 pixels to make the setup tool still
  fit on a 1024x768 pixel screen</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.7-1" date="1713182402">- Resolves: RHEL-31506 Release 2.25.7
- Don’t use forward_key_event() on Gnome Wayland if the key might be a
  keyboard shortcut using a modifier (Resolves: https://github.com/mike-
  fabian/ibus-typing-booster/issues/507)</changelog>
  <changelog author="Pooja Yadav &lt;poyadav@redhat.com&gt; - 2.25.7-2" date="1713960000">- adding gating.yaml</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.9-1" date="1718798400">- Resolves: RHEL-36638 Update to 2.25.9 and Remove dependency on Xvfb from
  CI tests
- Translation update from Weblate (cs 100%)
- Update emoji annotations from CLDR
- Drop Python &lt; 3.6 support
- Fix test_0_gtk.py: typing booster now avoids clearing the input in
  do_reset() when the preedit is empty
- Remove dependency on Xvfb from ibus-typing-booster.spec
- Support compose sequences containing ASCII keys written as &lt;U00XX&gt; code
  points (Resolves: https://github.com/mike-fabian/ibus-typing-
  booster/issues/510)
- Translation update from Weblate (pt 91.3%)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.25.9-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.11-1" date="1719921600">- Resolves: RHEL-31506 Update to 2.25.11
- Yet another fix to make it possible again to use keys with Unicode
  keysyms in keybindings and make it work with all known versions of ibus
  (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/497)
- Use NFC when doing the cursor correction after committing a preedit using
  space (Resolves: https://github.com/mike-fabian/ibus-typing-
  booster/issues/515)
- Fix for ibus-1.5.30: Make it possible again to use keys with Unicode
  keysyms in keybindings (Resolves: https://github.com/mike-fabian/ibus-
  typing-booster/issues/497)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.12-1" date="1720526400">- Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome-
  desktop-testing, ibus-desktop-testing, gnome-shell-extension-no-overview
  for the CI test</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.13-1" date="1721390400">- Resolves: RHEL-36638 Fix CI test</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.25.13-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="5923ca6755373085cc949954a3907917c60a4e9626f09c708e3f044fdb1cf3ee" name="enchant2" arch="x86_64">
  <version epoch="0" ver="2.6.9" rel="1.el10"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.6.5-1" date="1704801600">- Update to 2.6.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 2.6.5-4" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.6.6-1" date="1707134400">- Update to 2.6.6</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.6.6-2" date="1707134401">- Rebuild (icu)</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.6.7-1" date="1707739200">- Update to 2.6.7</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.7-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.7-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.6.9-1" date="1743076800">- Update to 2.6.9
  Resolves: RHEL-32770</changelog>
</package>
<package pkgid="b7663de1c58e709e01bffdb9bfab482c0552aeaef05693496f0ad76270132e5f" name="enchant2-devel" arch="x86_64">
  <version epoch="0" ver="2.6.9" rel="1.el10"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.6.5-1" date="1704801600">- Update to 2.6.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 2.6.5-4" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.6.6-1" date="1707134400">- Update to 2.6.6</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.6.6-2" date="1707134401">- Rebuild (icu)</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.6.7-1" date="1707739200">- Update to 2.6.7</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.7-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.7-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.6.9-1" date="1743076800">- Update to 2.6.9
  Resolves: RHEL-32770</changelog>
</package>
<package pkgid="e0e607b8e7bfe142a63922a04abfb066928ada64828a40efb6aa0db08d970bed" name="enchant2-voikko" arch="x86_64">
  <version epoch="0" ver="2.6.9" rel="1.el10"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.6.5-1" date="1704801600">- Update to 2.6.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 2.6.5-4" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.6.6-1" date="1707134400">- Update to 2.6.6</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.6.6-2" date="1707134401">- Rebuild (icu)</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.6.7-1" date="1707739200">- Update to 2.6.7</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.7-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.7-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.6.9-1" date="1743076800">- Update to 2.6.9
  Resolves: RHEL-32770</changelog>
</package>
<package pkgid="51151851e5138a7d5d625b7f1de6897482e3e1d7d44fde1416ebc82fc355b98f" name="enscript" arch="x86_64">
  <version epoch="0" ver="1.6.6" rel="36.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.6-30" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.6-31" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.6.6-32" date="1698408000">- SPDX license scan and migration
- %patch macro migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.6-33" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.6-34" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.6-35" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.6-36" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dd000d13894310fcbde3967f04ebc9d64440648716beb7b99a02e4dddd09930e" name="environment-modules" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.1-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.1-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 5.3.1-6" date="1729080000">- fix source-sh test with non-default manpath (RHEL-62847)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 5.3.1-7" date="1730203200">- fix intermittent test failures (RHEL-62847)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.1-8" date="1730203201">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 5.6.1-1" date="1765540800">- rebase to 5.6.1 (RHEL-132336)
  + Based on spec by Xavier Delaruelle in Fedora Rawhide.  Thanks a lot!</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 5.6.1-2" date="1768478400">- remove recommends on nagelfar (RHEL-139084)</changelog>
</package>
<package pkgid="96a697095c8642b98fbc3cc0c4eaf57aaccf6704285a11a1613a1f9b9cbb26e5" name="epel-release" arch="noarch">
  <version epoch="0" ver="10" rel="7.el10_1"/>
  <changelog author="Carl George &lt;carlwgeorge@fedoraproject.org&gt; - 10-1" date="1723809600">- Initial package for EPEL 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10-2" date="1728388800">- Add epel crb script Add license file for script, since this repo is
  upstream</changelog>
  <changelog author="Carl George &lt;carlwgeorge@fedoraproject.org&gt; - 10-3" date="1732536000">- Relax dependency on redhat-release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 10-4" date="1741089600">- Recommend selinux-policy-epel</changelog>
  <changelog author="Carl George &lt;carlwgeorge@fedoraproject.org&gt; - 10-5" date="1743681600">- Change metalinks/baseurls to new repo naming scheme</changelog>
  <changelog author="Martin Hoyer &lt;mhoyer@redhat.com&gt; - 10-6" date="1744891200">- Add FORCE_DNF option to crb script</changelog>
  <changelog author="Carl George &lt;carlwgeorge@fedoraproject.org&gt; - 10-7" date="1763553600">- Recommend selinux-policy-extra instead of selinux-policy-epel</changelog>
</package>
<package pkgid="08824f69356053378679fc08a65e01cfaeb20263b4fd27c616c351f67e50cdee" name="erofs-fuse" arch="x86_64">
  <version epoch="0" ver="1.8.10" rel="1.el10"/>
  <changelog author="Abhi Das &lt;adas@redhat.com&gt; - 1.7.1-4" date="1721217600">- Import 1.7.1 to RHEL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Abhi Das &lt;adas@redhat.com&gt; - 1.8.2-2" date="1732104000">- Rebase to 1.8.2-2 for zstd and multithreading support and
  Remove erroneously added gating.yaml
  Resolves: RHEL-68370</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 1.8.4-2" date="1735819200">- Rebase to 1.8.4-2 for performance and compression fixes
  Resolves: RHEL-72588</changelog>
  <changelog author="Abhi Das &lt;adas@redhat.com&gt; - 1.8.4-3" date="1746446400">- erofs-utils: fix endianness issue
  Resolves: RHEL-86463</changelog>
  <changelog author="Abhi Das &lt;adas@redhat.com&gt; - 1.8.10-1" date="1754913600">- Update to the 1.8.10 release.
  Resolves: RHEL-106459</changelog>
</package>
<package pkgid="fbdb2b777dccb49da189f8d0ad6d6e4c7cd1a8768ee7802f96c0c9619c085f65" name="erofs-utils" arch="x86_64">
  <version epoch="0" ver="1.8.10" rel="1.el10"/>
  <changelog author="Abhi Das &lt;adas@redhat.com&gt; - 1.7.1-4" date="1721217600">- Import 1.7.1 to RHEL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Abhi Das &lt;adas@redhat.com&gt; - 1.8.2-2" date="1732104000">- Rebase to 1.8.2-2 for zstd and multithreading support and
  Remove erroneously added gating.yaml
  Resolves: RHEL-68370</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 1.8.4-2" date="1735819200">- Rebase to 1.8.4-2 for performance and compression fixes
  Resolves: RHEL-72588</changelog>
  <changelog author="Abhi Das &lt;adas@redhat.com&gt; - 1.8.4-3" date="1746446400">- erofs-utils: fix endianness issue
  Resolves: RHEL-86463</changelog>
  <changelog author="Abhi Das &lt;adas@redhat.com&gt; - 1.8.10-1" date="1754913600">- Update to the 1.8.10 release.
  Resolves: RHEL-106459</changelog>
</package>
<package pkgid="6b1dc213ff8c7d6b82bc4b6e5cf0810ecf5268b9cf6e9b097bcbd59bc47c8f5d" name="espeak-ng" arch="x86_64">
  <version epoch="0" ver="1.51.1" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.1-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.1-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.51.1-5" date="1704196800">- Change license tag so it fully conforms to SPDX</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.51.1-6" date="1704283200">- Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
  Resolves: CVE-2023-49990
- Fixed buffer underflow in CountVowelPosition function at synthdata.c
  Resolves: CVE-2023-49991
- Fixed buffer overflow in RemoveEnding at dictionary.c
  Resolves: CVE-2023-49992
- Fixed buffer overflow in ReadClause function at readclause.c
  Resolves: CVE-2023-49993
- Fixed floating point exception in PeaksToHarmspect at wavegen.c
  Resolves: CVE-2023-49994</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.51.1-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.51.1-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8504b081a6b84bdfc648ad9e8aa483aebef9019594074a5b8363c53d7fb51189" name="espeak-ng-devel" arch="x86_64">
  <version epoch="0" ver="1.51.1" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.1-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.1-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.51.1-5" date="1704196800">- Change license tag so it fully conforms to SPDX</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.51.1-6" date="1704283200">- Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
  Resolves: CVE-2023-49990
- Fixed buffer underflow in CountVowelPosition function at synthdata.c
  Resolves: CVE-2023-49991
- Fixed buffer overflow in RemoveEnding at dictionary.c
  Resolves: CVE-2023-49992
- Fixed buffer overflow in ReadClause function at readclause.c
  Resolves: CVE-2023-49993
- Fixed floating point exception in PeaksToHarmspect at wavegen.c
  Resolves: CVE-2023-49994</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.51.1-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.51.1-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4a961a7dfdd56597742b3be4266623ad91d23c87181d33a61e1a3f5bcaf01b9f" name="espeak-ng-doc" arch="noarch">
  <version epoch="0" ver="1.51.1" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.1-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.1-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.51.1-5" date="1704196800">- Change license tag so it fully conforms to SPDX</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.51.1-6" date="1704283200">- Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
  Resolves: CVE-2023-49990
- Fixed buffer underflow in CountVowelPosition function at synthdata.c
  Resolves: CVE-2023-49991
- Fixed buffer overflow in RemoveEnding at dictionary.c
  Resolves: CVE-2023-49992
- Fixed buffer overflow in ReadClause function at readclause.c
  Resolves: CVE-2023-49993
- Fixed floating point exception in PeaksToHarmspect at wavegen.c
  Resolves: CVE-2023-49994</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.51.1-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.51.1-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="487ebdad559c370f8166dcbb682e96fc225ae7f5a602e8a15af06c943af45a98" name="espeak-ng-vim" arch="noarch">
  <version epoch="0" ver="1.51.1" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.1-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.1-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.51.1-5" date="1704196800">- Change license tag so it fully conforms to SPDX</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.51.1-6" date="1704283200">- Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
  Resolves: CVE-2023-49990
- Fixed buffer underflow in CountVowelPosition function at synthdata.c
  Resolves: CVE-2023-49991
- Fixed buffer overflow in RemoveEnding at dictionary.c
  Resolves: CVE-2023-49992
- Fixed buffer overflow in ReadClause function at readclause.c
  Resolves: CVE-2023-49993
- Fixed floating point exception in PeaksToHarmspect at wavegen.c
  Resolves: CVE-2023-49994</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.51.1-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.51.1-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="41a76322bafdca0362ca90374c66f37c7c771557cf801e7d0eaddb0457ed5f6a" name="ethtool" arch="x86_64">
  <version epoch="2" ver="6.15" rel="2.el10"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 2:6.7-1" date="1706529600">- Upgrade to 6.7 (#2260796)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:6.7-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ivan Vecera &lt;ivecera@redhat.com&gt; - 2:6.10-1" date="1727265600">- Upgrade to 6.10 (RHEL-56323)</changelog>
  <changelog author="Ivan Vecera &lt;ivecera@redhat.com&gt; - 2:6.11-1" date="1728475200">- Upgrade to 6.11 (RHEL-56323)</changelog>
  <changelog author="Ivan Vecera &lt;ivecera@redhat.com&gt; - 2:6.11-2" date="1728475201">- Fixed gating (RHEL-56323)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:6.11-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ivan Vecera &lt;ivecera@redhat.com&gt; - 2:6.11-4" date="1733745600">- Fixed gating</changelog>
  <changelog author="Michal Schmidt &lt;mschmidt@redhat.com&gt; - 2:6.11-5" date="1745841600">- Fix MDI-X showing as Unknown (RHEL-75979)</changelog>
  <changelog author="Mohammad Heib &lt;mheib@redhat.com&gt; - 2:6.15-1" date="1750766400">- Update to latest upstream release v6.15.
  Resolves RHEL-99667.</changelog>
  <changelog author="Mohammad Heib &lt;mheib@redhat.com&gt;" date="1754049600">- netlink: fix missing headers in text output.
  Resolves: RHEL-106544</changelog>
</package>
<package pkgid="7c8b4743cf1b4f5ccf7979b457ca4c66c3aafcd48ea86d69512284eafce1c57a" name="evolution-data-server" arch="x86_64">
  <version epoch="0" ver="3.52.4" rel="3.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 3.51.1-4" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.51.2-1" date="1707480000">- Update to 3.51.2</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.0-1" date="1711368000">- Resolves: RHEL-30204 (Backport Fedora 40 changes)
- Update to 3.52.0
- Add patch to allow reconfiguring the dbus-prefix without rebuilding;
  this is needed to make EDS work with the new Flatpak infrastructure.
- Remove support _eds_dbus_services_prefix - this was only used by
  F38 and earlier Flatpak builds.</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.1-1" date="1713787200">- Resolves: RHEL-33592 (Backport Fedora 40 changes)
- Update to 3.52.1</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.2-1" date="1716897600">- Resolves: RHEL-38639 (Update to 3.52.2)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.52.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.3-1" date="1719835200">- Resolves: RHEL-45599 (Update to 3.52.3)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.4-1" date="1724068800">- Resolves: RHEL-52806 (Update to 3.52.4)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.52.4-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.4-3" date="1738584000">- Resolves: RHEL-77352 (EBackend: Change when adding signal handler for "network-changed")</changelog>
</package>
<package pkgid="59ea77fb8c49db7c34a965f3a63e61198253d0c5ed4085b0a0160b1ffb2194c9" name="evolution-data-server-devel" arch="x86_64">
  <version epoch="0" ver="3.52.4" rel="3.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 3.51.1-4" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.51.2-1" date="1707480000">- Update to 3.51.2</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.0-1" date="1711368000">- Resolves: RHEL-30204 (Backport Fedora 40 changes)
- Update to 3.52.0
- Add patch to allow reconfiguring the dbus-prefix without rebuilding;
  this is needed to make EDS work with the new Flatpak infrastructure.
- Remove support _eds_dbus_services_prefix - this was only used by
  F38 and earlier Flatpak builds.</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.1-1" date="1713787200">- Resolves: RHEL-33592 (Backport Fedora 40 changes)
- Update to 3.52.1</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.2-1" date="1716897600">- Resolves: RHEL-38639 (Update to 3.52.2)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.52.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.3-1" date="1719835200">- Resolves: RHEL-45599 (Update to 3.52.3)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.4-1" date="1724068800">- Resolves: RHEL-52806 (Update to 3.52.4)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.52.4-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.4-3" date="1738584000">- Resolves: RHEL-77352 (EBackend: Change when adding signal handler for "network-changed")</changelog>
</package>
<package pkgid="4ef7d148536d4fb29fbd12d292c6ff28352a2e9d243f0c239d4a3b2983683de0" name="evolution-data-server-doc" arch="noarch">
  <version epoch="0" ver="3.52.4" rel="3.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 3.51.1-4" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.51.2-1" date="1707480000">- Update to 3.51.2</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.0-1" date="1711368000">- Resolves: RHEL-30204 (Backport Fedora 40 changes)
- Update to 3.52.0
- Add patch to allow reconfiguring the dbus-prefix without rebuilding;
  this is needed to make EDS work with the new Flatpak infrastructure.
- Remove support _eds_dbus_services_prefix - this was only used by
  F38 and earlier Flatpak builds.</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.1-1" date="1713787200">- Resolves: RHEL-33592 (Backport Fedora 40 changes)
- Update to 3.52.1</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.2-1" date="1716897600">- Resolves: RHEL-38639 (Update to 3.52.2)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.52.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.3-1" date="1719835200">- Resolves: RHEL-45599 (Update to 3.52.3)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.4-1" date="1724068800">- Resolves: RHEL-52806 (Update to 3.52.4)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.52.4-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.4-3" date="1738584000">- Resolves: RHEL-77352 (EBackend: Change when adding signal handler for "network-changed")</changelog>
</package>
<package pkgid="998a055d9847b8ac4e627541c1709adb23f29691abf78bac1a3008c80f09e75d" name="evolution-data-server-langpacks" arch="noarch">
  <version epoch="0" ver="3.52.4" rel="3.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 3.51.1-4" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.51.2-1" date="1707480000">- Update to 3.51.2</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.0-1" date="1711368000">- Resolves: RHEL-30204 (Backport Fedora 40 changes)
- Update to 3.52.0
- Add patch to allow reconfiguring the dbus-prefix without rebuilding;
  this is needed to make EDS work with the new Flatpak infrastructure.
- Remove support _eds_dbus_services_prefix - this was only used by
  F38 and earlier Flatpak builds.</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.1-1" date="1713787200">- Resolves: RHEL-33592 (Backport Fedora 40 changes)
- Update to 3.52.1</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.2-1" date="1716897600">- Resolves: RHEL-38639 (Update to 3.52.2)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.52.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.3-1" date="1719835200">- Resolves: RHEL-45599 (Update to 3.52.3)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.4-1" date="1724068800">- Resolves: RHEL-52806 (Update to 3.52.4)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.52.4-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.4-3" date="1738584000">- Resolves: RHEL-77352 (EBackend: Change when adding signal handler for "network-changed")</changelog>
</package>
<package pkgid="96aded78c583d54c3668fadd2190219c6cf7a9cccf0368b6e37ebbebc71acf1b" name="evolution-data-server-perl" arch="x86_64">
  <version epoch="0" ver="3.52.4" rel="3.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 3.51.1-4" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.51.2-1" date="1707480000">- Update to 3.51.2</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.0-1" date="1711368000">- Resolves: RHEL-30204 (Backport Fedora 40 changes)
- Update to 3.52.0
- Add patch to allow reconfiguring the dbus-prefix without rebuilding;
  this is needed to make EDS work with the new Flatpak infrastructure.
- Remove support _eds_dbus_services_prefix - this was only used by
  F38 and earlier Flatpak builds.</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.1-1" date="1713787200">- Resolves: RHEL-33592 (Backport Fedora 40 changes)
- Update to 3.52.1</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.2-1" date="1716897600">- Resolves: RHEL-38639 (Update to 3.52.2)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.52.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.3-1" date="1719835200">- Resolves: RHEL-45599 (Update to 3.52.3)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.4-1" date="1724068800">- Resolves: RHEL-52806 (Update to 3.52.4)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.52.4-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.4-3" date="1738584000">- Resolves: RHEL-77352 (EBackend: Change when adding signal handler for "network-changed")</changelog>
</package>
<package pkgid="fcc22086ade5b469a7fd99dc059718c65e2c58a649568a26f542bd32d9f70b5d" name="evolution-data-server-tests" arch="x86_64">
  <version epoch="0" ver="3.52.4" rel="3.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 3.51.1-4" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.51.2-1" date="1707480000">- Update to 3.51.2</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.0-1" date="1711368000">- Resolves: RHEL-30204 (Backport Fedora 40 changes)
- Update to 3.52.0
- Add patch to allow reconfiguring the dbus-prefix without rebuilding;
  this is needed to make EDS work with the new Flatpak infrastructure.
- Remove support _eds_dbus_services_prefix - this was only used by
  F38 and earlier Flatpak builds.</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.1-1" date="1713787200">- Resolves: RHEL-33592 (Backport Fedora 40 changes)
- Update to 3.52.1</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.2-1" date="1716897600">- Resolves: RHEL-38639 (Update to 3.52.2)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.52.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.3-1" date="1719835200">- Resolves: RHEL-45599 (Update to 3.52.3)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.4-1" date="1724068800">- Resolves: RHEL-52806 (Update to 3.52.4)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.52.4-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.4-3" date="1738584000">- Resolves: RHEL-77352 (EBackend: Change when adding signal handler for "network-changed")</changelog>
</package>
<package pkgid="47ff14ba99795280d25172a16ebee616ffb1d772f0c16c0b54d3d4b29aa4665a" name="exchange-bmc-os-info" arch="noarch">
  <version epoch="0" ver="1.8.19" rel="10.el10_1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.19-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.19-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.19-7" date="1707739200">- Update IANA numbers
- Apply patch from CentOS Stream, never applied upstream:
  Disable retry of pre-session "Get cipher suites" command as some
  BMCs are ignoring it (#1831158)
- Apply patches from Debian, never applied upstream:
  - fix tsol buffer overflow,
    https://sourceforge.net/p/ipmitool/mailman/message/24405281/
  - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/
- Update /var/run to /run in ipmievd.service that systemd warns about (#2100475)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.19-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.19-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.19-10" date="1764849600">- Apply Debian/upstream patch: 137aeb64, fixes ipmitool lan print
- Add patch that partially reverts 6e037d6bfb to fix regression in 1.8.19
  Among others fixes ipmievd startup (fedora#2303185)</changelog>
</package>
<package pkgid="ef8b037b83c975c019d3cedec26caf89e3b9995b4cec562c9db086e10aa1c0bf" name="exec-maven-plugin" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.1.1-1" date="1703592000">- Update to upstream version 3.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.3.0-1" date="1723464000">- Synchronize with Fedora version</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.3.0-2" date="1723550400">- Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="90bf723193ebce94535e27abc1a988e26aa2d5b949fad2f75669c8a1eb14a989" name="exec-maven-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.1.1-1" date="1703592000">- Update to upstream version 3.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.3.0-1" date="1723464000">- Synchronize with Fedora version</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.3.0-2" date="1723550400">- Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f7292bf900d66dcbfe3f2718de86a3c588dbc711e42914ba57b09aa6bb27e58f" name="execstack" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="31.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.5.0-24" date="1669118400">- Avoid implicit function declarations in configure (#2144890)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-26" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 0.5.0-25" date="1700568000">- Convert license tag to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.0-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 0.5.0-29" date="1719316800">- Add riscv64 support.</changelog>
  <changelog author="Jakub Heger &lt;jheger@redhat.com&gt; - 0.5.0-30" date="1727092800">- Setup gating for c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.0-31" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="010952ce417f6f6808f6325d3a3a2e76051e997bac5f86dbc772a225f40ad1ff" name="exempi" arch="x86_64">
  <version epoch="0" ver="2.6.4" rel="7.el10"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.6.3-1" date="1670846400">- Update to version 2.6.3
  Resolves #2152330</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.3-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.6.4-1" date="1688990400">- Update to version 2.6.4
  Resolves #2221013</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 2.6.4-5" date="1706529600">- migrated to SPDX license</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1e6090a7f49bc0a33c010efda22a97eb1e0e1d4f778927c7772a75ca8a7ce6e1" name="exempi-devel" arch="x86_64">
  <version epoch="0" ver="2.6.4" rel="7.el10"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.6.3-1" date="1670846400">- Update to version 2.6.3
  Resolves #2152330</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.3-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 2.6.4-1" date="1688990400">- Update to version 2.6.4
  Resolves #2221013</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 2.6.4-5" date="1706529600">- migrated to SPDX license</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0718ae22e8a26b0f2ea9697ae99f858359cb2798af106d1b2e194ac1a190e056" name="exfatprogs" arch="x86_64">
  <version epoch="0" ver="1.2.8" rel="1.el10"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 1.2.1-1" date="1684756800">- Update to 1.2.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 1.2.2-1" date="1698494400">- Update to 1.2.2.</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.2.2-2" date="1698667200">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.2-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.2.2-5" date="1719835200">- Fix High impact true positive findings</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.2-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.2.8-1" date="1743422400">- Rebase to the latest upstream version
  Related: RHEL-66219</changelog>
</package>
<package pkgid="5d94a9c416c8fa95be4607eb297717cad1a2ebd5e5bf9b567a6855cc8b370a2b" name="exiv2" arch="x86_64">
  <version epoch="0" ver="0.28.3" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.27.6-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.27.6-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.27.6-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.27.6-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.28.3-1" date="1722945600">- 0.28.3
  Resolves: RHEL-45267</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.28.3-2" date="1722945601">- Backport RHEL9 patch for RPATH
  Resolves: RHEL-45267</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.28.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.28.3-4" date="1740398400">- Fix CVE-2025-26623 exiv2: Use After Free
  Resolves: RHEL-80106</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.28.3-5" date="1740398401">- Revert: remove rpath patch
  Resolves: RHEL-80106</changelog>
</package>
<package pkgid="c8a52251a213ace0ca04516c8527989871e2436d2d3a96464bb96a65e3963215" name="exiv2-devel" arch="x86_64">
  <version epoch="0" ver="0.28.3" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.27.6-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.27.6-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.27.6-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.27.6-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.28.3-1" date="1722945600">- 0.28.3
  Resolves: RHEL-45267</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.28.3-2" date="1722945601">- Backport RHEL9 patch for RPATH
  Resolves: RHEL-45267</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.28.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.28.3-4" date="1740398400">- Fix CVE-2025-26623 exiv2: Use After Free
  Resolves: RHEL-80106</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.28.3-5" date="1740398401">- Revert: remove rpath patch
  Resolves: RHEL-80106</changelog>
</package>
<package pkgid="d7dbc58c7047da488839cdcbdd9342e5fe41bb642f8efdfd00814ccb44b03922" name="exiv2-doc" arch="noarch">
  <version epoch="0" ver="0.28.3" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.27.6-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.27.6-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.27.6-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.27.6-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.28.3-1" date="1722945600">- 0.28.3
  Resolves: RHEL-45267</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.28.3-2" date="1722945601">- Backport RHEL9 patch for RPATH
  Resolves: RHEL-45267</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.28.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.28.3-4" date="1740398400">- Fix CVE-2025-26623 exiv2: Use After Free
  Resolves: RHEL-80106</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.28.3-5" date="1740398401">- Revert: remove rpath patch
  Resolves: RHEL-80106</changelog>
</package>
<package pkgid="7700f4813c3f99627b4363b4ba7b36792042e0de5d1f2131ad016d5f81dd5d82" name="exiv2-libs" arch="x86_64">
  <version epoch="0" ver="0.28.3" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.27.6-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.27.6-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.27.6-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.27.6-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.28.3-1" date="1722945600">- 0.28.3
  Resolves: RHEL-45267</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.28.3-2" date="1722945601">- Backport RHEL9 patch for RPATH
  Resolves: RHEL-45267</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.28.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.28.3-4" date="1740398400">- Fix CVE-2025-26623 exiv2: Use After Free
  Resolves: RHEL-80106</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.28.3-5" date="1740398401">- Revert: remove rpath patch
  Resolves: RHEL-80106</changelog>
</package>
<package pkgid="c72e2c16c08ba3f484a989e425f09c8b7ddd021204805f4105b1c7452e88d87a" name="expat" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.0-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 2.5.0-6" date="1718971200">- Update of fmf plans and gating for c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.6.2-1" date="1720008000">- Rebase to 2.6.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.2-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.6.4-1" date="1730980800">- Rebase to 2.6.4</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.7.0-1" date="1741953600">- Fix CVE-2024-8176</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.7.1-1" date="1743163200">- Fix behavior change caused by fix for CVE-2024-8176</changelog>
  <changelog author="psklenar@redhat.com &lt;psklenar@redhat.com&gt; - 2.7.1-2" date="1749124800">- https://issues.redhat.com/browse/RHELMISC-13073</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.7.3-1" date="1764676800">- Rebase to 2.7.3 and add VCS tag</changelog>
</package>
<package pkgid="ce1631d71fd271e110ef09bea5386803b29127f2509761ba8ce82424d3948160" name="expat" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="1.el10_2.1"/>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt;" date="1718971200">- Update of fmf plans and gating for c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt;" date="1720008000">- Rebase to 2.6.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt;" date="1730980800">- Rebase to 2.6.4</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt;" date="1741953600">- Fix CVE-2024-8176</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt;" date="1743163200">- Fix behavior change caused by fix for CVE-2024-8176</changelog>
  <changelog author="psklenar@redhat.com &lt;psklenar@redhat.com&gt;" date="1749124800">- https://issues.redhat.com/browse/RHELMISC-13073</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.7.3-56" date="1764676800">- Rebase to 2.7.3 and add VCS tag</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.7.3-57" date="1779883200">- expat: backport CVE-2026-45186 fix (attribute collision check DoS)</changelog>
</package>
<package pkgid="216f96e92aeb2bb6d3462256d268e96b9542d833d04b66bfa2c1691dae352296" name="expat-devel" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.0-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 2.5.0-6" date="1718971200">- Update of fmf plans and gating for c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.6.2-1" date="1720008000">- Rebase to 2.6.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.2-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.6.4-1" date="1730980800">- Rebase to 2.6.4</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.7.0-1" date="1741953600">- Fix CVE-2024-8176</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.7.1-1" date="1743163200">- Fix behavior change caused by fix for CVE-2024-8176</changelog>
  <changelog author="psklenar@redhat.com &lt;psklenar@redhat.com&gt; - 2.7.1-2" date="1749124800">- https://issues.redhat.com/browse/RHELMISC-13073</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.7.3-1" date="1764676800">- Rebase to 2.7.3 and add VCS tag</changelog>
</package>
<package pkgid="bd814961779611fc6cf2509df11949f4716d10651b913f502f573e29a72cdc58" name="expat-devel" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="1.el10_2.1"/>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt;" date="1718971200">- Update of fmf plans and gating for c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt;" date="1720008000">- Rebase to 2.6.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt;" date="1730980800">- Rebase to 2.6.4</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt;" date="1741953600">- Fix CVE-2024-8176</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt;" date="1743163200">- Fix behavior change caused by fix for CVE-2024-8176</changelog>
  <changelog author="psklenar@redhat.com &lt;psklenar@redhat.com&gt;" date="1749124800">- https://issues.redhat.com/browse/RHELMISC-13073</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.7.3-56" date="1764676800">- Rebase to 2.7.3 and add VCS tag</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.7.3-57" date="1779883200">- expat: backport CVE-2026-45186 fix (attribute collision check DoS)</changelog>
</package>
<package pkgid="fd72fdc7fc9b7502cef56765efb8fd99fadb5c05af51919062c22b996f539605" name="expat-static" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.0-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 2.5.0-6" date="1718971200">- Update of fmf plans and gating for c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.6.2-1" date="1720008000">- Rebase to 2.6.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.2-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.6.4-1" date="1730980800">- Rebase to 2.6.4</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.7.0-1" date="1741953600">- Fix CVE-2024-8176</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.7.1-1" date="1743163200">- Fix behavior change caused by fix for CVE-2024-8176</changelog>
  <changelog author="psklenar@redhat.com &lt;psklenar@redhat.com&gt; - 2.7.1-2" date="1749124800">- https://issues.redhat.com/browse/RHELMISC-13073</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.7.3-1" date="1764676800">- Rebase to 2.7.3 and add VCS tag</changelog>
</package>
<package pkgid="c3548b1e5b138781fb0a321fb9027eb29f009bd858849b181b55d7d2164a3b37" name="expat-static" arch="x86_64">
  <version epoch="0" ver="2.7.3" rel="1.el10_2.1"/>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt;" date="1718971200">- Update of fmf plans and gating for c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt;" date="1720008000">- Rebase to 2.6.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt;" date="1730980800">- Rebase to 2.6.4</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt;" date="1741953600">- Fix CVE-2024-8176</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt;" date="1743163200">- Fix behavior change caused by fix for CVE-2024-8176</changelog>
  <changelog author="psklenar@redhat.com &lt;psklenar@redhat.com&gt;" date="1749124800">- https://issues.redhat.com/browse/RHELMISC-13073</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.7.3-56" date="1764676800">- Rebase to 2.7.3 and add VCS tag</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.7.3-57" date="1779883200">- expat: backport CVE-2026-45186 fix (attribute collision check DoS)</changelog>
</package>
<package pkgid="b17b652cba14092b5c4513bb28c015a58c3ecd75d53186e38b84cac152a4014e" name="expect" arch="x86_64">
  <version epoch="0" ver="5.45.4" rel="25.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 5.45.4-17" date="1668772800">- Update configure for building in strict C99 mode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.45.4-18" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 5.45.4-19" date="1680091200">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.45.4-20" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 5.45.4-21" date="1705492800">- Use Tcl 8.4 channel type (GCC 14 compatibility)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.45.4-22" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.45.4-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.45.4-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.45.4-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="46f7fa998b883e4c0c75dc03c1e1e8f391cfe8409841bf68a5f1718ba10ba830" name="expect-devel" arch="x86_64">
  <version epoch="0" ver="5.45.4" rel="25.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 5.45.4-17" date="1668772800">- Update configure for building in strict C99 mode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.45.4-18" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 5.45.4-19" date="1680091200">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.45.4-20" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 5.45.4-21" date="1705492800">- Use Tcl 8.4 channel type (GCC 14 compatibility)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.45.4-22" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.45.4-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.45.4-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.45.4-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ac45e2f88f2554f51025e0cb43d68c898c6b59d2e552fde2e89a9e3d24d7c542" name="expectk" arch="x86_64">
  <version epoch="0" ver="5.45.4" rel="25.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 5.45.4-17" date="1668772800">- Update configure for building in strict C99 mode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.45.4-18" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 5.45.4-19" date="1680091200">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.45.4-20" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 5.45.4-21" date="1705492800">- Use Tcl 8.4 channel type (GCC 14 compatibility)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.45.4-22" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.45.4-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.45.4-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.45.4-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="92e81b2cab0d92881748088d7a55543f6d3bc1029f69c9375cccf74fcafddcbf" name="extra-enforcer-rules" arch="noarch">
  <version epoch="0" ver="1.7.0" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.1-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-1" date="1692273600">- Update to upstream version 1.7.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-6" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d1280516cfc755315d89dd67d47dc389255e166b4d85c5020c6c78dedd6f0bc2" name="extra-enforcer-rules-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.0" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.1-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-1" date="1692273600">- Update to upstream version 1.7.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-6" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f9dab2e49cc0086f846f0d0929f7d0024c07cc31158ecb7e33e3ec57d37e7817" name="fabtests" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Brian Chae &lt;bchae@redhat.com&gt; - 1.18.0-7" date="1723204800">- Adding files for c10s gating test</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 1.22.0-1" date="1735992000">- Update to upstream release 1.22.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 2.1.0-1" date="1753963200">- Update to upstream release 2.1.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 2.3.1-1" date="1771416000">- Update to upstream release 2.3.1</changelog>
</package>
<package pkgid="1448481ea265e1176639d798a07da8d3ce812488e8e3b8a230ed3c9fc913d41e" name="fapolicyd" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="1.2.el10_2"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.3.7-1" date="1760616000">- fapolicyd-1.3.7 and fapolicyd-selinux-0.9</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.4-1" date="1761825600">- fapolicyd-1.4 and fapolicyd-selinux-1.0
  https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.4.1-1" date="1761912000">- Fix deadlock on reconfigure
- On reconfigure, update the trust list and reload the rpm filter</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.4.1-2" date="1762516800">- Install SELinux policy hardening module</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.4.2-1" date="1764158400">- fapolicyd-1.4.2
  https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.2</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.4.3-1" date="1768305600">- fapolicyd-1.4.3
  https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
  https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.4.3-2" date="1769515200">- Fix binary path of rpm-loader
- Map file with MAP_SHARED instead of MAP_PRIVATE
- Fix segfault when interrupting fapolicyd startup</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.4.3-3" date="1770379200">- Fix 32-bit ELF dynamic section parsing</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.4.4-1" date="1773921600">- fapolicyd-1.4.4
  https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.4</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.4.5-1.2" date="1774872000">- fapolicyd-1.4.5
  https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.5</changelog>
</package>
<package pkgid="408623330a8047c2a71bae3ee737c0c339ef8c59ad4c4a2a9d8b0da57f7677a1" name="fapolicyd-selinux" arch="noarch">
  <version epoch="0" ver="1.4.5" rel="1.2.el10_2"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.3.7-1" date="1760616000">- fapolicyd-1.3.7 and fapolicyd-selinux-0.9</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.4-1" date="1761825600">- fapolicyd-1.4 and fapolicyd-selinux-1.0
  https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.4.1-1" date="1761912000">- Fix deadlock on reconfigure
- On reconfigure, update the trust list and reload the rpm filter</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.4.1-2" date="1762516800">- Install SELinux policy hardening module</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.4.2-1" date="1764158400">- fapolicyd-1.4.2
  https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.2</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.4.3-1" date="1768305600">- fapolicyd-1.4.3
  https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
  https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.4.3-2" date="1769515200">- Fix binary path of rpm-loader
- Map file with MAP_SHARED instead of MAP_PRIVATE
- Fix segfault when interrupting fapolicyd startup</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.4.3-3" date="1770379200">- Fix 32-bit ELF dynamic section parsing</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.4.4-1" date="1773921600">- fapolicyd-1.4.4
  https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.4</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 1.4.5-1.2" date="1774872000">- fapolicyd-1.4.5
  https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.5</changelog>
</package>
<package pkgid="1680ff9a2b395b5c17c9f11b88571e890c8fbb4b2eae6011ce5e74fbbe47fcf7" name="fcoe-utils" arch="x86_64">
  <version epoch="0" ver="1.0.34" rel="11.gitb233050.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.34-4.gitb233050" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.34-5.gitb233050" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.34-6.gitb233050" date="1698667200">- use SPDX in license tag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.34-7.gitb233050" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.34-8.gitb233050" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.0.34-9.gitb233050" date="1707220800">- FTBFS: Don't attempt to memcpy() zero bytes</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.34-10.gitb233050" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.34-11.gitb233050" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="379eccb38e0726f35e802bbe9b8dd6803d5ad7affafbe49b3d1442597b7b9a64" name="fdk-aac-free" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="15.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-11" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-12" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-13" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.0-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="94b8208cdb7302fd2b307d0a1ad6412e729545d355f5e71c7bb38f551c92c9ef" name="fdk-aac-free-devel" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="15.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-11" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-12" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-13" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.0-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1b0990148b6a9da87e8160e767067c285b56e3d599e9510a0c9c59f2b9351106" name="fdo-admin-cli" arch="x86_64">
  <version epoch="0" ver="0.5.3" rel="2.el10"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.9-5" date="1686744000">- More spec updates</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.10-1" date="1687521600">- Update to 0.4.10</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.10-2" date="1688385600">- Updates for eln/c9s building</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.11-1" date="1688385601">- Update to 0.4.11</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.12-1" date="1690372800">- Update to 0.4.12</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.13-1" date="1706184000">- Update to 0.4.13</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.5.0-1" date="1708430400">- Update to 0.5.0</changelog>
  <changelog author="Antonio Murdaca &lt;amurdaca@redhat.com&gt; - 0.5.1-1" date="1732190400">- Update to 0.5.1</changelog>
  <changelog author="Miguel Mart&#xED;n &lt;mmartinv@redhat.com&gt; - 0.5.3-1" date="1738929600">* chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721
 * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722
 * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725
 * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726
 * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733
 * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738


 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3
- Resolves: RHEL-77724</changelog>
  <changelog author="Miguel Mart&#xED;n &lt;mmartinv@redhat.com&gt; - 0.5.3-2" date="1739793600">- Fix vendored sources.</changelog>
</package>
<package pkgid="d822deb7c08f64541b908ee6efd4f300418efe7a6764bb6db5fdffa5c509d4ad" name="fdo-client" arch="x86_64">
  <version epoch="0" ver="0.5.3" rel="2.el10"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.9-5" date="1686744000">- More spec updates</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.10-1" date="1687521600">- Update to 0.4.10</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.10-2" date="1688385600">- Updates for eln/c9s building</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.11-1" date="1688385601">- Update to 0.4.11</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.12-1" date="1690372800">- Update to 0.4.12</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.13-1" date="1706184000">- Update to 0.4.13</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.5.0-1" date="1708430400">- Update to 0.5.0</changelog>
  <changelog author="Antonio Murdaca &lt;amurdaca@redhat.com&gt; - 0.5.1-1" date="1732190400">- Update to 0.5.1</changelog>
  <changelog author="Miguel Mart&#xED;n &lt;mmartinv@redhat.com&gt; - 0.5.3-1" date="1738929600">* chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721
 * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722
 * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725
 * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726
 * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733
 * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738


 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3
- Resolves: RHEL-77724</changelog>
  <changelog author="Miguel Mart&#xED;n &lt;mmartinv@redhat.com&gt; - 0.5.3-2" date="1739793600">- Fix vendored sources.</changelog>
</package>
<package pkgid="a9a4cc5bc90b8e17c4e8d03b708781021f8e9f9f46e97888122b6e976119ec3b" name="fdo-init" arch="x86_64">
  <version epoch="0" ver="0.5.3" rel="2.el10"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.9-5" date="1686744000">- More spec updates</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.10-1" date="1687521600">- Update to 0.4.10</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.10-2" date="1688385600">- Updates for eln/c9s building</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.11-1" date="1688385601">- Update to 0.4.11</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.12-1" date="1690372800">- Update to 0.4.12</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.13-1" date="1706184000">- Update to 0.4.13</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.5.0-1" date="1708430400">- Update to 0.5.0</changelog>
  <changelog author="Antonio Murdaca &lt;amurdaca@redhat.com&gt; - 0.5.1-1" date="1732190400">- Update to 0.5.1</changelog>
  <changelog author="Miguel Mart&#xED;n &lt;mmartinv@redhat.com&gt; - 0.5.3-1" date="1738929600">* chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721
 * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722
 * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725
 * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726
 * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733
 * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738


 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3
- Resolves: RHEL-77724</changelog>
  <changelog author="Miguel Mart&#xED;n &lt;mmartinv@redhat.com&gt; - 0.5.3-2" date="1739793600">- Fix vendored sources.</changelog>
</package>
<package pkgid="9b986821fc46096465bc222a01c923946ff1b5a8b69022a9af8fd9e9e2f78486" name="fdo-manufacturing-server" arch="x86_64">
  <version epoch="0" ver="0.5.3" rel="2.el10"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.9-5" date="1686744000">- More spec updates</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.10-1" date="1687521600">- Update to 0.4.10</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.10-2" date="1688385600">- Updates for eln/c9s building</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.11-1" date="1688385601">- Update to 0.4.11</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.12-1" date="1690372800">- Update to 0.4.12</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.13-1" date="1706184000">- Update to 0.4.13</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.5.0-1" date="1708430400">- Update to 0.5.0</changelog>
  <changelog author="Antonio Murdaca &lt;amurdaca@redhat.com&gt; - 0.5.1-1" date="1732190400">- Update to 0.5.1</changelog>
  <changelog author="Miguel Mart&#xED;n &lt;mmartinv@redhat.com&gt; - 0.5.3-1" date="1738929600">* chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721
 * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722
 * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725
 * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726
 * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733
 * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738


 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3
- Resolves: RHEL-77724</changelog>
  <changelog author="Miguel Mart&#xED;n &lt;mmartinv@redhat.com&gt; - 0.5.3-2" date="1739793600">- Fix vendored sources.</changelog>
</package>
<package pkgid="eced082c958410f902c9d250ead4a9f376f34de8c8887846a8ece5edf3fa65f0" name="fdo-owner-cli" arch="x86_64">
  <version epoch="0" ver="0.5.3" rel="2.el10"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.9-5" date="1686744000">- More spec updates</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.10-1" date="1687521600">- Update to 0.4.10</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.10-2" date="1688385600">- Updates for eln/c9s building</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.11-1" date="1688385601">- Update to 0.4.11</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.12-1" date="1690372800">- Update to 0.4.12</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.13-1" date="1706184000">- Update to 0.4.13</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.5.0-1" date="1708430400">- Update to 0.5.0</changelog>
  <changelog author="Antonio Murdaca &lt;amurdaca@redhat.com&gt; - 0.5.1-1" date="1732190400">- Update to 0.5.1</changelog>
  <changelog author="Miguel Mart&#xED;n &lt;mmartinv@redhat.com&gt; - 0.5.3-1" date="1738929600">* chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721
 * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722
 * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725
 * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726
 * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733
 * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738


 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3
- Resolves: RHEL-77724</changelog>
  <changelog author="Miguel Mart&#xED;n &lt;mmartinv@redhat.com&gt; - 0.5.3-2" date="1739793600">- Fix vendored sources.</changelog>
</package>
<package pkgid="06b40228d6a4a40bf42de838adb04e108fd639a177f96b9adffc3fd7f628bdf4" name="fdo-owner-onboarding-server" arch="x86_64">
  <version epoch="0" ver="0.5.3" rel="2.el10"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.9-5" date="1686744000">- More spec updates</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.10-1" date="1687521600">- Update to 0.4.10</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.10-2" date="1688385600">- Updates for eln/c9s building</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.11-1" date="1688385601">- Update to 0.4.11</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.12-1" date="1690372800">- Update to 0.4.12</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.13-1" date="1706184000">- Update to 0.4.13</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.5.0-1" date="1708430400">- Update to 0.5.0</changelog>
  <changelog author="Antonio Murdaca &lt;amurdaca@redhat.com&gt; - 0.5.1-1" date="1732190400">- Update to 0.5.1</changelog>
  <changelog author="Miguel Mart&#xED;n &lt;mmartinv@redhat.com&gt; - 0.5.3-1" date="1738929600">* chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721
 * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722
 * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725
 * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726
 * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733
 * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738


 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3
- Resolves: RHEL-77724</changelog>
  <changelog author="Miguel Mart&#xED;n &lt;mmartinv@redhat.com&gt; - 0.5.3-2" date="1739793600">- Fix vendored sources.</changelog>
</package>
<package pkgid="2238eb0a770e103a612df6c34f93b2c5e4570e9c6ce375197e7ad3e273ed7adb" name="fdo-rendezvous-server" arch="x86_64">
  <version epoch="0" ver="0.5.3" rel="2.el10"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.9-5" date="1686744000">- More spec updates</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.10-1" date="1687521600">- Update to 0.4.10</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.10-2" date="1688385600">- Updates for eln/c9s building</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.11-1" date="1688385601">- Update to 0.4.11</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.12-1" date="1690372800">- Update to 0.4.12</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.4.13-1" date="1706184000">- Update to 0.4.13</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.5.0-1" date="1708430400">- Update to 0.5.0</changelog>
  <changelog author="Antonio Murdaca &lt;amurdaca@redhat.com&gt; - 0.5.1-1" date="1732190400">- Update to 0.5.1</changelog>
  <changelog author="Miguel Mart&#xED;n &lt;mmartinv@redhat.com&gt; - 0.5.3-1" date="1738929600">* chore: update CONTRIBUTING with additional deps by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/721
 * Fix the aws-nitro-enclaves patches and serveral problems reported by clippy by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/722
 * New makefile targets by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/725
 * Packit changes by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/726
 * chore: bump openssl from 0.10.66 to 0.10.70 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/733
 * chore: bump for 0.5.3 release by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/738


 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.2...v0.5.3
- Resolves: RHEL-77724</changelog>
  <changelog author="Miguel Mart&#xED;n &lt;mmartinv@redhat.com&gt; - 0.5.3-2" date="1739793600">- Fix vendored sources.</changelog>
</package>
<package pkgid="a46945d50e37584eb15c228f994f9968224f682f55f54c5b74dde714ee7f508f" name="felix-parent" arch="noarch">
  <version epoch="0" ver="8" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7-11" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7-12" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 8-1" date="1702036800">- Update to upstream version 8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ecc0fa5d0055f735c96fdf370b0ffc146f1d728dd0f17e88113479220a6d1006" name="felix-utils" arch="noarch">
  <version epoch="0" ver="1.11.8" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.8-5" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11.8-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11.8-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.8-9" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52688</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11.8-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="13badc3ac62414244af08a79156967b13200d38a5c99ec418268e7a8765a50ae" name="felix-utils-javadoc" arch="noarch">
  <version epoch="0" ver="1.11.8" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.8-5" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11.8-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11.8-9" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.8-9" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52688</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11.8-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="301421833879b1c5a2fd94bd0b95152017762d076ceaf2db7d8f812ee329ee7b" name="fence-agents-aliyun" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="7df37624ff5e649c8ba745e5dc1ae2c07416add9b0c56501ea2b9680f02e1d7c" name="fence-agents-aliyun" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="0177d93b4bda5a566b1804369991f09b0939b775e328bdffaea009f48fda6ff3" name="fence-agents-aliyun" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="49c73db06f12b51a5a9e6e630ef3d96272ec1d6caee8f3d8ac6ee77eeddc8723" name="fence-agents-all" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="91e41f746e4ff92f5b7f6318be7570feecc1b32dbbb9244a9a11a02c16347ce0" name="fence-agents-all" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="ee3b89e499d2e8df578710684d35d882f5b896f2ba1cb9ad947adc84f039d5f4" name="fence-agents-all" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="eb71027624d94c6d4e9035a77cf79591a237785ac7c92e6a368eeb0fb84e50dd" name="fence-agents-amt-ws" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="9f5b7e37d1a66a11f43dcb2002a0b5fdcae06aa5c24385fd4193f96b5005c7a8" name="fence-agents-amt-ws" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="81bfa8fbe3f60ebc84915f32a5c29f0a9865458eb279debec5ff8e311a6f3e7b" name="fence-agents-amt-ws" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="f18807196e8d5904ea18f6fe1f18db55ca016ade12f9e391c08e8732d3fe6e97" name="fence-agents-apc" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="42e7496f98820e0a66d492a28be45b616d29c1909c52417e9f11cd5c9bc23067" name="fence-agents-apc" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="ee9b94ae3f10a84088e033510095e34469fc691c9dfc74755b38f7540074d16e" name="fence-agents-apc" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="6f1579857dae4eef545f855dabb98bb4a6d67f7267581daac3c580fd902a85e8" name="fence-agents-apc-snmp" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="9fe456f72e690050b8acd2ce9d792a0589a36847221a5e14129946a3c5c91b6d" name="fence-agents-apc-snmp" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="887674a34578e496bfd582117d518043f00b9ed10eac15c2b764206b87843a0c" name="fence-agents-apc-snmp" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="0903731299198a17cdcd523cac313d79d021996447c729352850a0afa7e9aed7" name="fence-agents-aws" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="ed1db40d4d896c6f30e70e97065aefc760e10b0da28d1692d63bebfe805be997" name="fence-agents-aws" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="13ed48447f1544ca66b65ee5ef86f462dff85f3802a78439e5625b712094c983" name="fence-agents-aws" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="5b8275ad18af32cb2882c6a71e36d5fcc6c69bb89053bf67069ab2ae5d68c65c" name="fence-agents-azure-arm" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="b563f6eed2b9dede5aac86384cc13314ed4a41fdd9a7805c29614ff065f4154c" name="fence-agents-azure-arm" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="f182bf3aee1a3b2e5f924308e99bcc69d6b8d1b6aa10a0c9499eb46981f83b99" name="fence-agents-azure-arm" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="6b2026aebecd13fd7563ec67616f51d7452bd4443663172ddcc76d103b9a3c0d" name="fence-agents-bladecenter" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="5cabf3e5fd13f792fa90931aacaed7815f8af215def824ce8489c7b290950346" name="fence-agents-bladecenter" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="37f5eb2fb70419fede41ab7e521697797f9b94aa2baa43de491431d4f187b904" name="fence-agents-bladecenter" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="8e4fa97fe5d874c338208294d8fa1048ab001800de29771a3c2cabcccfa594ff" name="fence-agents-brocade" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="39f0479ac0e928033d5dbc2eca282d249e08b362247b4a928e91ecdf852f21c9" name="fence-agents-brocade" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="4e4ea13fe04063049aeac2404e3b82827e00a2583dfa413cf124fb3c43260dc4" name="fence-agents-brocade" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="e313ae76fb6cca6044434a05c706606664e2d6c4f1de77db499fc7d76f490b04" name="fence-agents-cisco-mds" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="b0d5a890be78eb8b4f6810a9b24e7e272fc78f8a9d5907ef7366aa838879422f" name="fence-agents-cisco-mds" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="785e1d15ef3d75b2816f553246523d4d8db0f97dc4bcfa6d89b11eb4519000b6" name="fence-agents-cisco-mds" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="8aa2e8862cda55e507a8f04bafea483e8915fa857e68984a9c5e0ede6aba2653" name="fence-agents-cisco-ucs" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="ce7ecc02ad1cebebad855d3ead182d11f7c5b52122e4b33355d13b5138168434" name="fence-agents-cisco-ucs" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="e6e558384ad15ff101b5a7ff5dfc1fc2e269bcfa11d4336fef222f4d7e669c8f" name="fence-agents-cisco-ucs" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="6fddb7721133102847b29174ce2faed60f95653d4d86d74da02980e9c0bfd822" name="fence-agents-common" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="f6b01bc96ac15d953a59a8381afea814a9fcade39c33b43e725a85d4a49e66d3" name="fence-agents-common" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="dd59063ac7c82a1cf819fbb513c927e90dd5fd5b3140797ed027bf174d0cd5a7" name="fence-agents-common" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="e6623dfaf57cddcfe844180fd57ebd8b47e62191adbd6ee2665541ee127dc77e" name="fence-agents-drac5" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="4d3eb3ce101fa985f24b37cf3e2c4205d6ac8ceb67a2e1223a029f052f11a64c" name="fence-agents-drac5" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="094091bbc1ccd444f45ea74f227c3d89bf9765a3d178119e3e89b42b5b973cc8" name="fence-agents-drac5" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="7e891ac7bb4361a3c733157c9bacba0d4c5c26eae6346df10b017c3b4ebfaa2c" name="fence-agents-eaton-snmp" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="b4594a24614a58065a1e66e5551f3ab8e44483ddd38a4930a00b99e976444b2f" name="fence-agents-eaton-snmp" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="9de9efea407a133c83670c0cd43be9cd30aca9096d869846a7882fd3a9f7527b" name="fence-agents-eaton-snmp" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="6a665963f998e86c6de70eb27f84f4e0df0eba68ef8274533172559c0c435b79" name="fence-agents-emerson" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="3faf24842c258c8e308549157712d21e1f03cc04c96d11f412ab2adc27d21720" name="fence-agents-emerson" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="ffa597dcbbafe049e98a6bde3de767238c542c59ecac75f57dfd181277a27a38" name="fence-agents-emerson" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="7f77d3f655424098372cde5f06c753389f79b3b49cadb8da10feb9a1380b80f5" name="fence-agents-eps" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="ec40d40ccd7f96facd18c9ab3b0c405f608b3532eb170e0be7bf7ef93ffcb65b" name="fence-agents-eps" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="7d46ddfc5502966c2f7e5575f87898bc4ac7e3d653c84039909b38ee6ba39d47" name="fence-agents-eps" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="5301b979dea215365574c75301b2ebb8fcdd1f88d57b7a578ced41dec3efe832" name="fence-agents-gce" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="5c7a49ab56290d2cbf2ce8882c6d10dcf4374da479dde28507db54cc70c2cc11" name="fence-agents-gce" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="996d31cd208c5eb530a6a5bb923554d65ff5b32c3820510e2d219132a5300ce4" name="fence-agents-gce" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="dfed46d93e17ce7bb3982962e3cf70117ed35da32ef02b3c35c8faa6449291c2" name="fence-agents-heuristics-ping" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="7280a79ab531d3bf1d907246bcfbbea84c19979bb8c25d0a06263bf88e6da99c" name="fence-agents-heuristics-ping" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="d016c4880a2886145eefb1f39ba538c65c159898a2df8ffee2ada393a0875c62" name="fence-agents-heuristics-ping" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="97dade5d762a9a66c52c8b27296d4c72a656f3b1e4c6ca966a0de3277a17d27e" name="fence-agents-hpblade" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="6461f8ea3e4fa542446901f04688ded33d95b056a82fda36a35135cf54783eb2" name="fence-agents-hpblade" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="9fe92feae99f1e47c321781875fc7adc7c149763bba9c770e4d93e2c32e1887b" name="fence-agents-hpblade" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="8dd59bb28a870bc7cf2538ba05b0218e009bd791cb8cfe8f99c12f0fb8fc659f" name="fence-agents-ibm-powervs" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="3e56a0b2beb70886d5d5dcdc01a59d314ca81f71bad6ba8892dcf7c6db254abc" name="fence-agents-ibm-powervs" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="dcf8a4e12fded2f6b7ea41918f4290995cd21b44c5d7c4f9fb492e015e5d49e0" name="fence-agents-ibm-powervs" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="7b09b8e17314d5e0f86ca83535057a0e66ec708e0f51fb4afe90d0467470096f" name="fence-agents-ibm-vpc" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="650c8554bd516b004d54879cfc798768219732e816eb47465757ccfd13189747" name="fence-agents-ibm-vpc" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="093a85a7af0982f2d6cd6bb8f7e60f7796d69cf053b79fdc3565e3f2181af975" name="fence-agents-ibm-vpc" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="5d59b9a4a44d559842ae1e8603da2059c2c009a20074177a8bc9caa5a6d61ca0" name="fence-agents-ibmblade" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="ac6c086f9d9631aaf77e904c57ebfeef17dad8e9c7c6db089e4d8f85de67e462" name="fence-agents-ibmblade" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="8cf7840bb0ac47a166eaff38274b1fa07a3aaf03c39d42a1bdaf6b7826be14fb" name="fence-agents-ibmblade" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="6c5aa019be07f43d9930f3175bfc84b0d9e6b47c00e037b74454decaa0b4e38f" name="fence-agents-ifmib" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="866aa56aa02a41eb21a9ad02831745b0fc69f6baa56c35bb737ace02cf9748e4" name="fence-agents-ifmib" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="ecda603c11806861bda6b27153f09b9325fbc7a7537855d8b64446f7e1e49d7f" name="fence-agents-ifmib" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="93dd4f6c42a5163d0b0ab3e9c7f0efa3908bc448cada2cc2aa65553722425533" name="fence-agents-ilo-moonshot" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="7fde0ae738b52e154be0dbc0e8a0312c4d1fdd6c04be23f824f330ae366115d2" name="fence-agents-ilo-moonshot" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="e71e28435f2322d192f66730a4c63c3db9ab8475a2179fcd6bd3f72b368c1a89" name="fence-agents-ilo-moonshot" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="0405b53d9c8814aa1a7e4e2c10d7ffa723bff98f47bfbf22780b7e8bed8afd87" name="fence-agents-ilo-mp" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="4df4cbbf79926440db1efec7cb11b57c4e63c02f4d371bc4babb219ae6b27297" name="fence-agents-ilo-mp" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="e1a88b605045ee3a7f13af69d486e6fe4ae764a7039246c8ac60473faba6e267" name="fence-agents-ilo-mp" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="7290f1a1b3add3d5cd6d87bdc403e8124bff5f53384e4106e1f81c2b72427587" name="fence-agents-ilo-ssh" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="90166bf1834f577fa8084ffbc36b178df7fca43562b1b66a009eb106b7a2d580" name="fence-agents-ilo-ssh" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="0f92ccb996f58765d2eb9ed7a6855d407e368e3914cb2b76a761cc6d36802100" name="fence-agents-ilo-ssh" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="13707c8f341986d0ec1deabfdd9d7afc0a62152a547f15cd18de19b2772fb06e" name="fence-agents-ilo2" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="08a768531d320b46fe7824096bfd9a98b255bf71d6abb9ecb52fd77e72ad5e76" name="fence-agents-ilo2" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="539e426fefc3801ca3e0b3d618af10bc7cc50d38615775d45fac811ee3125f40" name="fence-agents-ilo2" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="09803b5e0f4a072a8570b994fe778463d20191f9652abd3609662e21d564b448" name="fence-agents-intelmodular" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="dbd04405803d021d3e60fcec2f4178d36eb02641ea256627a4e7b94363d3f210" name="fence-agents-intelmodular" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="1ec12a9ddc2146285a5fc345b9a8c4de1846a6ea239f6a62666ff613735276e1" name="fence-agents-intelmodular" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="97f7504c710ee2a7167a655bd952fd34ed4620a0d859b3d7fc0f057fc934a3ac" name="fence-agents-ipdu" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="4f44d7f5137dd8912b12fd3948465f9b1427a4cedc6e5565e125a38fbc066477" name="fence-agents-ipdu" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="ffdc63429aa521264c86978e209e15d3f2dce8ea70774fae08da8d16c82265fe" name="fence-agents-ipdu" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="22b7b0b4d7da4260c8ccc3047be464f596ee83a02e9d6c610661c20401adaabe" name="fence-agents-ipmilan" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="3601e643dc546a384f3fe041da330d5a0a54191af5d7bea51881e578f2c55e24" name="fence-agents-ipmilan" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="8853e4308f723ed0bccf174bf5efc2d53842a8aee350d28d0a114580cf2381b8" name="fence-agents-ipmilan" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="c9b6e5603d98ba15bea9455c34886c2a31ee28df2fcb18f8c33b77b59db3fff3" name="fence-agents-kdump" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="e95c8e774c2627582a6d8e5a397ac6f7a5c6ff3729de95fbef95a6ab7a04760e" name="fence-agents-kdump" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="deba8783667d34fb1c73d7f9acd4207475ffde2c702e0d28378d9344fcc46841" name="fence-agents-kdump" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="7248b363a84091368eb6305abce6f1c8e2e2e98aaa5e625d5a7dd2ac3af325fd" name="fence-agents-kubevirt" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="99044ef89ae2b6b7bda1f94aa005074c63a00494b8534716ef9772c2c06e4df0" name="fence-agents-kubevirt" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="31d999b3b93ed800c74683c52a65714108ee9c5c27fc89c7579099ce88091f2e" name="fence-agents-kubevirt" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="74cc0b85b794d1dd22ad67291d073cfbb0bcebe1708fd6dbc1cd8a9f8de632da" name="fence-agents-lpar" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="3a7d74165230f672d9c30b4ad5660ed2208619b7be122ded1b3fe00d31eef084" name="fence-agents-lpar" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="2a1ca79f90f6a810be1d2d60f32fbbfe93f63be40b68170d09edb8e620dbfc05" name="fence-agents-lpar" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="6f23c4a2f8affb83ab9877768d5b75244949eee12184e209ed0d14e398e73853" name="fence-agents-mpath" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="96f9b2808b4760790a08847f2d155df84e343eba0c23b7f30e0c5a5aaaef7812" name="fence-agents-mpath" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="18c590a346e02019583d073c7374b36e414904016a8d9ece4c4db4b1532dc703" name="fence-agents-mpath" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="2467d6ee4c601d1d7e5e02b3bdea56d95ec3c8ad414cbb58d7da81333502e9c1" name="fence-agents-nutanix-ahv" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="0f83a2b48daf607f9ae0a98244e082a4326304570575b2dd4a295ef6e12ad3f4" name="fence-agents-nutanix-ahv" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="8c31470e36b97d09fdcdf87c9fb89e2fb53cea376cb45327671ef3bbc0060a77" name="fence-agents-nutanix-ahv" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="83b439c0cbd3c00b27bc8d4bf999ebb643eca0341e8fafd2a567ed100f8723cb" name="fence-agents-openstack" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="2192d7129643deead7f6c0465078544150e02b4b4f9d391aed14a76440f53256" name="fence-agents-openstack" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="f8a5954161a0cebb977ae8c3251df9268a35c00ca0ed823ac0e5044a9cc9e129" name="fence-agents-openstack" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="66d95336b4ca96a5a0c55e04464c37fe64ec3b7eaafa71e6411e3b0c8a44b229" name="fence-agents-redfish" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="eea784bbfb97a7fb2fb8fcf9af2dd86fbfde673423eba449049c3254e2933e85" name="fence-agents-redfish" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="f09e228fc7c5b1fb4c05b23b25cd8f12425f71dff2363263461432f893ca049c" name="fence-agents-redfish" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="85d369f63f858e394f14ac9ffd86ab7612bb11793c2738c6c10760dad380f3f8" name="fence-agents-rhevm" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="90b61f4b4425d2b96a9c0e47fd39536c86318cb9f4e757bec383966a867e0f31" name="fence-agents-rhevm" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="c189dd30f6bdf230ba7572c39d57d36d7ed5729354f08c3ddda842c864eb80d7" name="fence-agents-rhevm" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="435b24d9fc09de1029567e5332592e7843d73ecc779c4401804769b304a57edf" name="fence-agents-rsa" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="df9ad371fd8f15e87b4b643e99d6475e00bbeb92aea69bad5b29d75ea3e39883" name="fence-agents-rsa" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="3a685fb042203cba4f8f3d8e83a46b81375b1ead8e61f883e5686df3c53bfa4b" name="fence-agents-rsa" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="6c40740e4b3302416d7331fdce5a2967412d6a8d72bae94501faed33b61f6245" name="fence-agents-rsb" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="b18b6d6fcb015c929d5ea263729eb13ec3651da16c486eaa42a0b8770a5ccc75" name="fence-agents-rsb" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="f01dd80eabca6ef2021c06e4dd74de87c4c12626147e5840a952ad639a545490" name="fence-agents-rsb" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="cf8e151e7383dedfed17e855b7b3127c7a501f86c55a952bf476eb241793def7" name="fence-agents-sbd" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="d8652b7c8757c69601c9bc91ac33e822d425aefc22cea2c4cca0e60652650523" name="fence-agents-sbd" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="23187adbcb3dc7cfc6ee4981baf48b7d14995a10a36b22e4ab07dc24219f7ac6" name="fence-agents-sbd" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="5d4dee6a654eaca81c146a27aa22564a256570027f9f92cd4d8d4b8a4ee4382c" name="fence-agents-scsi" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="fe2f6e28bdfb367287a4a91b0d956100d8ff4124cd56aed94dcf149d47af5011" name="fence-agents-scsi" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="fdbc072133a930085d4d8a0b87d48fdbb5b1b763c133c7246754a6274dcc7afa" name="fence-agents-scsi" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="087f1f81fcb50f1de534ff6308dfd11f67104ded8de1f847075163061b1c3cf4" name="fence-agents-virsh" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="befa344470325ca7f137105af90beab96c1750caafbf11dba82eab4ce58f8a44" name="fence-agents-virsh" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="04d915d14e3dc1f68b30c77e4503a3d7bae59e11230d9cba46ca8ad5ad4890eb" name="fence-agents-virsh" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="eb417f3f391c9f5819c3c544fc829f18f2c9db5192f1709a49c0d259acef4d1c" name="fence-agents-vmware-rest" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="397a7c742aafd02b74abdfc2c2060801722fcb0bae789428680d01c82c72033c" name="fence-agents-vmware-rest" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="f467ef98694e8fd5c415eb0a2e94656c4a95fb2b26ae963b01124d8e31309067" name="fence-agents-vmware-rest" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="0f0042a54c972ff0c5098925a8b21dc3ae863a569b2e640d83da14095a0eab86" name="fence-agents-vmware-soap" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="5e19ee27e91a51d6393d86248c78df1128061c8366c8a22791653b9ea5976313" name="fence-agents-vmware-soap" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="bd4cd89002023975b3e1d48ded768401e07db295ae1e6f0e8c304dc2dfb0d300" name="fence-agents-vmware-soap" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="472ab4e4f241fefa16ed42e8502cbc3a84dbf71b20650dda2a29ef4cbb11808b" name="fence-agents-wti" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="32665580179857637d1e19142389549af5a6dc17e6eb9e5a86681085d40fe21b" name="fence-agents-wti" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="05f5ac08c3f21973e1bc6d0954ab5a29cbc9755b7a3d045103df5f68d0f0231a" name="fence-agents-wti" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="c077ecfd66fd5c8c2f1c4377ff5e5b73d89c5332b5f5c88b77b3931c7edfe5cd" name="fence-virt" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="060e9574ba8e7fdb2790a28d907b9ea23e79af4f5e6364c49b7e1d6333f67f85" name="fence-virt" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="75e20e4d9d5b2b4bb7db73cc351e503a873ade1eb5d25c28e215de892307bc74" name="fence-virt" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="d55f5c3b980ebebeff9063c59c7176cb396eddd9437b6f614515a728f6608077" name="fence-virtd" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="3bbcb03a14a42f84ac979ce866dde7adc5e56d477b46cb98e681b5abc38c86b4" name="fence-virtd" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="d177e008f493fcc98d9cff80a74d88662b145f0b339b779d8e179887ea86bd55" name="fence-virtd" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="c01da8fe524905acf42a2fde11a24e25b2f5b9550f5debcf177c253cde658d7a" name="fence-virtd-cpg" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="32613d016fed968b116896051045ca2eec7f121d980239fb61eaa68da52f06d5" name="fence-virtd-cpg" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="7d380a41b64fd737a4a990887ba0b59f9363a4a26480b21ca3c2dcb89b2c4afc" name="fence-virtd-cpg" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="581e7b02864b4ef0255dfc257523b0b415a9a5ead105c4ab2cecf58be1656fb2" name="fence-virtd-libvirt" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="6453c5a7e94929f63d13ccd3b238b98ff2f118a56393c5e0050c9af4926dc2c7" name="fence-virtd-libvirt" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="bff4880d67661202cec20236242227aad5976b1b44d6597573958cd60877c76f" name="fence-virtd-libvirt" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="d18ed97eb3bd3c26072a93106761325f4fa95da5e4b0d88c7122b01b63335da5" name="fence-virtd-multicast" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="3ad8c022111b65e641966e12a3e6e30259bf04c0bca9a807acccd75a6e6fed6a" name="fence-virtd-multicast" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="394fb6955d343ee7a357e783952cca37b1321c1708d430d842bde1c5667f87c1" name="fence-virtd-multicast" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="e51f008d32a7d9982084b4ee2a00aa562b9eb71e06a5678da59615c306be4acb" name="fence-virtd-serial" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="8ad4626da1afbaf7554136203b861221f302c21f18c666a95a3c6100064a6c58" name="fence-virtd-serial" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="5b942c9a1f006a3194bd1593675f7f3453655995fe7f465a12eb4eda1ad718fa" name="fence-virtd-serial" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="f0a2fc48caf380d9958fc6749fbfb4f984fc0c466b42c79549e59055a59dcd8d" name="fence-virtd-tcp" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="4f08e119d6d69b56cfc56fbc8655447d8998ea2afd0aeed7e3662dc55dc495ce" name="fence-virtd-tcp" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="997e16e59897d2ffd3061bfa5a69f38c7dcc4f3cd7c88c8508a8baafa8ef1c80" name="fence-virtd-tcp" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="d5e1e903b68975c55f03b0a5f3212468fc5691c06831b946e01dcaa7615bffd9" name="fetchmail" arch="x86_64">
  <version epoch="0" ver="6.4.38" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.4.35-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 6.4.36-1" date="1675080000">- Update to fetchmail-6.4.36</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 6.4.37-1" date="1678363200">- Update to fetchmail-6.4.37</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 6.4.37-2" date="1685016000">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.4.37-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.4.37-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.4.37-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 6.4.38-1" date="1706788800">- Update to fetchmail-6.4.38</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.4.38-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.4.38-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="56a39767e08652e4a944a0571f7ab33a4fcf6bbf9516914b6f833ad160ebfa76" name="fftw" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="15.el10"/>
  <changelog author="Trent Piepho &lt;tpiepho@gmail.com&gt; - 3.3.10-6" date="1679918400">- Enable AVX2 on x86-86
- Enable NEON on aarch64
- Clean up precision list
- Fix for OpenMPI build with &lt; 4 processors
- Fix building with no enabled MPI types
- Enable single precision Altivec on PPC
- Enable CNTVCT_EL0 support on ARMv8</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.3.10-7" date="1680004800">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 3.3.10-9" date="1690459200">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Fix i686 build by disabling openmpi
- Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
  https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
- Disable mpich on s390x to fix the build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-14" date="1731931200">- Re-enable openmpi for s390x
- Resolves: RHEL-65277</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-15" date="1732536000">- Enable openmpi for RHEL
- Resolves: RHEL-65277</changelog>
</package>
<package pkgid="5de07b8ee5f97f58162bd92df61048d35812eb6832a672bbe4ae691a173c2bc0" name="fftw-devel" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="15.el10"/>
  <changelog author="Trent Piepho &lt;tpiepho@gmail.com&gt; - 3.3.10-6" date="1679918400">- Enable AVX2 on x86-86
- Enable NEON on aarch64
- Clean up precision list
- Fix for OpenMPI build with &lt; 4 processors
- Fix building with no enabled MPI types
- Enable single precision Altivec on PPC
- Enable CNTVCT_EL0 support on ARMv8</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.3.10-7" date="1680004800">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 3.3.10-9" date="1690459200">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Fix i686 build by disabling openmpi
- Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
  https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
- Disable mpich on s390x to fix the build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-14" date="1731931200">- Re-enable openmpi for s390x
- Resolves: RHEL-65277</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-15" date="1732536000">- Enable openmpi for RHEL
- Resolves: RHEL-65277</changelog>
</package>
<package pkgid="811ff87dad388e1820f7cc7fb8865b60cbe75b66be75e158c7e07e0ef4940bfa" name="fftw-doc" arch="noarch">
  <version epoch="0" ver="3.3.10" rel="15.el10"/>
  <changelog author="Trent Piepho &lt;tpiepho@gmail.com&gt; - 3.3.10-6" date="1679918400">- Enable AVX2 on x86-86
- Enable NEON on aarch64
- Clean up precision list
- Fix for OpenMPI build with &lt; 4 processors
- Fix building with no enabled MPI types
- Enable single precision Altivec on PPC
- Enable CNTVCT_EL0 support on ARMv8</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.3.10-7" date="1680004800">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 3.3.10-9" date="1690459200">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Fix i686 build by disabling openmpi
- Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
  https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
- Disable mpich on s390x to fix the build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-14" date="1731931200">- Re-enable openmpi for s390x
- Resolves: RHEL-65277</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-15" date="1732536000">- Enable openmpi for RHEL
- Resolves: RHEL-65277</changelog>
</package>
<package pkgid="eb75b597829bd7508b66b6fd12ff69de39e9614be47ab91b75c04853d011ed6a" name="fftw-libs" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="15.el10"/>
  <changelog author="Trent Piepho &lt;tpiepho@gmail.com&gt; - 3.3.10-6" date="1679918400">- Enable AVX2 on x86-86
- Enable NEON on aarch64
- Clean up precision list
- Fix for OpenMPI build with &lt; 4 processors
- Fix building with no enabled MPI types
- Enable single precision Altivec on PPC
- Enable CNTVCT_EL0 support on ARMv8</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.3.10-7" date="1680004800">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 3.3.10-9" date="1690459200">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Fix i686 build by disabling openmpi
- Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
  https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
- Disable mpich on s390x to fix the build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-14" date="1731931200">- Re-enable openmpi for s390x
- Resolves: RHEL-65277</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-15" date="1732536000">- Enable openmpi for RHEL
- Resolves: RHEL-65277</changelog>
</package>
<package pkgid="31138286932f11f1ad7c58348d596403be2df4c25d23226cc7549a0748158324" name="fftw-libs-double" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="15.el10"/>
  <changelog author="Trent Piepho &lt;tpiepho@gmail.com&gt; - 3.3.10-6" date="1679918400">- Enable AVX2 on x86-86
- Enable NEON on aarch64
- Clean up precision list
- Fix for OpenMPI build with &lt; 4 processors
- Fix building with no enabled MPI types
- Enable single precision Altivec on PPC
- Enable CNTVCT_EL0 support on ARMv8</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.3.10-7" date="1680004800">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 3.3.10-9" date="1690459200">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Fix i686 build by disabling openmpi
- Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
  https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
- Disable mpich on s390x to fix the build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-14" date="1731931200">- Re-enable openmpi for s390x
- Resolves: RHEL-65277</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-15" date="1732536000">- Enable openmpi for RHEL
- Resolves: RHEL-65277</changelog>
</package>
<package pkgid="baebe1306518956cab2735c15585c32228d4ce5eafe5789fa1813034d2be944a" name="fftw-libs-long" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="15.el10"/>
  <changelog author="Trent Piepho &lt;tpiepho@gmail.com&gt; - 3.3.10-6" date="1679918400">- Enable AVX2 on x86-86
- Enable NEON on aarch64
- Clean up precision list
- Fix for OpenMPI build with &lt; 4 processors
- Fix building with no enabled MPI types
- Enable single precision Altivec on PPC
- Enable CNTVCT_EL0 support on ARMv8</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.3.10-7" date="1680004800">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 3.3.10-9" date="1690459200">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Fix i686 build by disabling openmpi
- Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
  https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
- Disable mpich on s390x to fix the build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-14" date="1731931200">- Re-enable openmpi for s390x
- Resolves: RHEL-65277</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-15" date="1732536000">- Enable openmpi for RHEL
- Resolves: RHEL-65277</changelog>
</package>
<package pkgid="5122e8a67131236de160f8894213e4ff5c8a2fde7089617024df7dbe93ebf9d6" name="fftw-libs-quad" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="15.el10"/>
  <changelog author="Trent Piepho &lt;tpiepho@gmail.com&gt; - 3.3.10-6" date="1679918400">- Enable AVX2 on x86-86
- Enable NEON on aarch64
- Clean up precision list
- Fix for OpenMPI build with &lt; 4 processors
- Fix building with no enabled MPI types
- Enable single precision Altivec on PPC
- Enable CNTVCT_EL0 support on ARMv8</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.3.10-7" date="1680004800">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 3.3.10-9" date="1690459200">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Fix i686 build by disabling openmpi
- Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
  https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
- Disable mpich on s390x to fix the build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-14" date="1731931200">- Re-enable openmpi for s390x
- Resolves: RHEL-65277</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-15" date="1732536000">- Enable openmpi for RHEL
- Resolves: RHEL-65277</changelog>
</package>
<package pkgid="a51524bb02c03adf210fe4f4b17147c70a050c3c3eb2dc5c66cac28d01978cbe" name="fftw-libs-single" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="15.el10"/>
  <changelog author="Trent Piepho &lt;tpiepho@gmail.com&gt; - 3.3.10-6" date="1679918400">- Enable AVX2 on x86-86
- Enable NEON on aarch64
- Clean up precision list
- Fix for OpenMPI build with &lt; 4 processors
- Fix building with no enabled MPI types
- Enable single precision Altivec on PPC
- Enable CNTVCT_EL0 support on ARMv8</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.3.10-7" date="1680004800">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 3.3.10-9" date="1690459200">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Fix i686 build by disabling openmpi
- Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
  https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
- Disable mpich on s390x to fix the build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-14" date="1731931200">- Re-enable openmpi for s390x
- Resolves: RHEL-65277</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-15" date="1732536000">- Enable openmpi for RHEL
- Resolves: RHEL-65277</changelog>
</package>
<package pkgid="0df3710cc809900240fd7558ca244bc6e53aedbcdb41fc86d71cfc422c710fa0" name="fftw-openmpi-devel" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="15.el10"/>
  <changelog author="Trent Piepho &lt;tpiepho@gmail.com&gt; - 3.3.10-6" date="1679918400">- Enable AVX2 on x86-86
- Enable NEON on aarch64
- Clean up precision list
- Fix for OpenMPI build with &lt; 4 processors
- Fix building with no enabled MPI types
- Enable single precision Altivec on PPC
- Enable CNTVCT_EL0 support on ARMv8</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.3.10-7" date="1680004800">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 3.3.10-9" date="1690459200">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Fix i686 build by disabling openmpi
- Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
  https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
- Disable mpich on s390x to fix the build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-14" date="1731931200">- Re-enable openmpi for s390x
- Resolves: RHEL-65277</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-15" date="1732536000">- Enable openmpi for RHEL
- Resolves: RHEL-65277</changelog>
</package>
<package pkgid="1ed64fe01a94b33b1e31aa5041fa7489c2dce7a56e2a6d714ae3fb197636f210" name="fftw-openmpi-libs" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="15.el10"/>
  <changelog author="Trent Piepho &lt;tpiepho@gmail.com&gt; - 3.3.10-6" date="1679918400">- Enable AVX2 on x86-86
- Enable NEON on aarch64
- Clean up precision list
- Fix for OpenMPI build with &lt; 4 processors
- Fix building with no enabled MPI types
- Enable single precision Altivec on PPC
- Enable CNTVCT_EL0 support on ARMv8</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.3.10-7" date="1680004800">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 3.3.10-9" date="1690459200">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Fix i686 build by disabling openmpi
- Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
  https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
- Disable mpich on s390x to fix the build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-14" date="1731931200">- Re-enable openmpi for s390x
- Resolves: RHEL-65277</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-15" date="1732536000">- Enable openmpi for RHEL
- Resolves: RHEL-65277</changelog>
</package>
<package pkgid="ecb2f330ea4f5b1df163216e9b597877c7820e28fe835a30da66295db744b2a8" name="fftw-openmpi-libs-double" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="15.el10"/>
  <changelog author="Trent Piepho &lt;tpiepho@gmail.com&gt; - 3.3.10-6" date="1679918400">- Enable AVX2 on x86-86
- Enable NEON on aarch64
- Clean up precision list
- Fix for OpenMPI build with &lt; 4 processors
- Fix building with no enabled MPI types
- Enable single precision Altivec on PPC
- Enable CNTVCT_EL0 support on ARMv8</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.3.10-7" date="1680004800">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 3.3.10-9" date="1690459200">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Fix i686 build by disabling openmpi
- Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
  https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
- Disable mpich on s390x to fix the build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-14" date="1731931200">- Re-enable openmpi for s390x
- Resolves: RHEL-65277</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-15" date="1732536000">- Enable openmpi for RHEL
- Resolves: RHEL-65277</changelog>
</package>
<package pkgid="6e783390ecb38a795f95ee6f47a29663577b69165293bdea7bc3b10f5c67f94f" name="fftw-openmpi-libs-long" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="15.el10"/>
  <changelog author="Trent Piepho &lt;tpiepho@gmail.com&gt; - 3.3.10-6" date="1679918400">- Enable AVX2 on x86-86
- Enable NEON on aarch64
- Clean up precision list
- Fix for OpenMPI build with &lt; 4 processors
- Fix building with no enabled MPI types
- Enable single precision Altivec on PPC
- Enable CNTVCT_EL0 support on ARMv8</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.3.10-7" date="1680004800">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 3.3.10-9" date="1690459200">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Fix i686 build by disabling openmpi
- Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
  https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
- Disable mpich on s390x to fix the build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-14" date="1731931200">- Re-enable openmpi for s390x
- Resolves: RHEL-65277</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-15" date="1732536000">- Enable openmpi for RHEL
- Resolves: RHEL-65277</changelog>
</package>
<package pkgid="b6471d29a86d126acc067de7d5b55f21d006f52860472ab788d76c86410c2ccb" name="fftw-openmpi-libs-single" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="15.el10"/>
  <changelog author="Trent Piepho &lt;tpiepho@gmail.com&gt; - 3.3.10-6" date="1679918400">- Enable AVX2 on x86-86
- Enable NEON on aarch64
- Clean up precision list
- Fix for OpenMPI build with &lt; 4 processors
- Fix building with no enabled MPI types
- Enable single precision Altivec on PPC
- Enable CNTVCT_EL0 support on ARMv8</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.3.10-7" date="1680004800">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 3.3.10-9" date="1690459200">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Fix i686 build by disabling openmpi
- Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
  https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
- Disable mpich on s390x to fix the build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-14" date="1731931200">- Re-enable openmpi for s390x
- Resolves: RHEL-65277</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-15" date="1732536000">- Enable openmpi for RHEL
- Resolves: RHEL-65277</changelog>
</package>
<package pkgid="37ab03355baf091ea055de9243c62c2c51a0dba8d946f4da2a46c6ea5b17ce95" name="fftw-openmpi-static" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="15.el10"/>
  <changelog author="Trent Piepho &lt;tpiepho@gmail.com&gt; - 3.3.10-6" date="1679918400">- Enable AVX2 on x86-86
- Enable NEON on aarch64
- Clean up precision list
- Fix for OpenMPI build with &lt; 4 processors
- Fix building with no enabled MPI types
- Enable single precision Altivec on PPC
- Enable CNTVCT_EL0 support on ARMv8</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.3.10-7" date="1680004800">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 3.3.10-9" date="1690459200">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Fix i686 build by disabling openmpi
- Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
  https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
- Disable mpich on s390x to fix the build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-14" date="1731931200">- Re-enable openmpi for s390x
- Resolves: RHEL-65277</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-15" date="1732536000">- Enable openmpi for RHEL
- Resolves: RHEL-65277</changelog>
</package>
<package pkgid="facba2e18b913c8911041ff8aec805d2985f52d862ad138b30ff37150a17fab4" name="fftw-static" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="15.el10"/>
  <changelog author="Trent Piepho &lt;tpiepho@gmail.com&gt; - 3.3.10-6" date="1679918400">- Enable AVX2 on x86-86
- Enable NEON on aarch64
- Clean up precision list
- Fix for OpenMPI build with &lt; 4 processors
- Fix building with no enabled MPI types
- Enable single precision Altivec on PPC
- Enable CNTVCT_EL0 support on ARMv8</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 3.3.10-7" date="1680004800">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 3.3.10-9" date="1690459200">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Fix i686 build by disabling openmpi
- Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
  https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
- Disable mpich on s390x to fix the build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-14" date="1731931200">- Re-enable openmpi for s390x
- Resolves: RHEL-65277</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.3.10-15" date="1732536000">- Enable openmpi for RHEL
- Resolves: RHEL-65277</changelog>
</package>
<package pkgid="8e21060c73a70b28d2fdd2e23a79a42d6d262258b1f3dff00708ebfda1501cdc" name="fido2-tools" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="7.el10"/>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 1.13.0-1" date="1676980800">- Update to 1.13.0 release ( resolves: rhbz#2172297 )
- Perform some deglobing of files per packaging guidelines</changelog>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 1.13.0-2" date="1678190400">- Rebuilt for libcbor 0.10.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 1.14.0-1" date="1699876800">- Update to 1.14.0 release ( resolves: rhbz#2249531 )</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 1.14.0-4" date="1707134400">- Rebuilt for libcbor 0.11.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.14.0-6" date="1729684800">- Fix memory leak in credman
  Resolves: RHEL-35253</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="07a69ecaf7597ac04de81e333b2c3c0e342dff9af9124890769d62d9991bfd43" name="file" arch="x86_64">
  <version epoch="0" ver="5.45" rel="9.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.45-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.45-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 5.45-8" date="1742990400">- magic: Use the bcachefs-uuid for erofs
  Resolves: RHEL-76142</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 5.45-9" date="1771848000">- Fix TypeError: 'NoneType' object is not callable in magic.close()
  Resolves: RHEL-151423</changelog>
</package>
<package pkgid="6aa33fbffed37fc6c6ab4ae15179cb03413f3ce1b9d555701d5f40c9a84b03b3" name="file-devel" arch="x86_64">
  <version epoch="0" ver="5.45" rel="9.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.45-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.45-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 5.45-8" date="1742990400">- magic: Use the bcachefs-uuid for erofs
  Resolves: RHEL-76142</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 5.45-9" date="1771848000">- Fix TypeError: 'NoneType' object is not callable in magic.close()
  Resolves: RHEL-151423</changelog>
</package>
<package pkgid="1a2ffc2a117ffccf12bc6d62f1f9e0a8a7ba357b5721adb027bd6060973dbb9b" name="file-libs" arch="x86_64">
  <version epoch="0" ver="5.45" rel="9.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.45-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.45-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 5.45-8" date="1742990400">- magic: Use the bcachefs-uuid for erofs
  Resolves: RHEL-76142</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 5.45-9" date="1771848000">- Fix TypeError: 'NoneType' object is not callable in magic.close()
  Resolves: RHEL-151423</changelog>
</package>
<package pkgid="053e0a20bee088c32a59718953519e0adff7605444891ed9ae5b0d614c67a430" name="file-static" arch="x86_64">
  <version epoch="0" ver="5.45" rel="9.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.45-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.45-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 5.45-8" date="1742990400">- magic: Use the bcachefs-uuid for erofs
  Resolves: RHEL-76142</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 5.45-9" date="1771848000">- Fix TypeError: 'NoneType' object is not callable in magic.close()
  Resolves: RHEL-151423</changelog>
</package>
<package pkgid="cc8b303041adc1c9834a1eb961b262e86b03d6050f8ec2d11ded7d5c47d60152" name="filesystem" arch="x86_64">
  <version epoch="0" ver="3.18" rel="17.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.18-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 3.18-6" date="1689940800">- Add /etc/keys for initrd/kernel related keys</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.18-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.18-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.18-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.18-15" date="1719316800">- Add ownership of /etc/default</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.18-16" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 3.18-17" date="1743595200">- Add lp64d symlink to parent directory on riscv64</changelog>
</package>
<package pkgid="cfe3c25c3e4ce702bb7870de68da4a086154fb74458a3c785362e7d13150c1a5" name="filesystem-content" arch="x86_64">
  <version epoch="0" ver="3.18" rel="17.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.18-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 3.18-6" date="1689940800">- Add /etc/keys for initrd/kernel related keys</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.18-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.18-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.18-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.18-15" date="1719316800">- Add ownership of /etc/default</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.18-16" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 3.18-17" date="1743595200">- Add lp64d symlink to parent directory on riscv64</changelog>
</package>
<package pkgid="bf7897bd9a7966c0a80d2d6eb221653994f9955d1a1ec333e894cd901db2d8c0" name="findutils" arch="x86_64">
  <version epoch="1" ver="4.10.0" rel="5.el10"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:4.9.0-4" date="1681300800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.9.0-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:4.9.0-6" date="1694520000">- fix find not obeying -ignore_readdir_race in symlink_loop (rhbz#2232278)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.9.0-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.9.0-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:4.10.0-1" date="1717416000">- rebase to latest upstream version (RHEL-39698)
- add GPG tarball verification</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:4.10.0-2" date="1717502400">- enable LTO on ppc64le to fix rpminspect warnings</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.10.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:4.10.0-4" date="1719921600">- fix autofs patch when stat was not performed (RHEL-43285)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.10.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="90b06626609f4205413b7bbe35e0cf1bd372a6461cc91a207021d35a3f08c6de" name="fio" arch="x86_64">
  <version epoch="0" ver="3.36" rel="5.el10"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.35-1" date="1684929600">- New upstream version (RHBZ#2209407)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.35-2" date="1686571200">- Drop libpmem support from RHEL 10+ builds</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.35-3" date="1688644800">- Re-enable rados, rbd on ppc64le</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.35-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.35-5" date="1696334400">- Convert License tag to SPDX format</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.36.1" date="1697803200">- Rebase to upstream version 3.36
- Related: rhbz#2245247</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="77301fb2305eb79e6f9fe85e96ad94737100ca26f0df5043ab70842ed5d95254" name="fio-engine-http" arch="x86_64">
  <version epoch="0" ver="3.36" rel="5.el10"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.35-1" date="1684929600">- New upstream version (RHBZ#2209407)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.35-2" date="1686571200">- Drop libpmem support from RHEL 10+ builds</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.35-3" date="1688644800">- Re-enable rados, rbd on ppc64le</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.35-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.35-5" date="1696334400">- Convert License tag to SPDX format</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.36.1" date="1697803200">- Rebase to upstream version 3.36
- Related: rhbz#2245247</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3387e2d7e6b0d8fc13b1a775e66a43bba06a817a41d6012f0f637473719b026c" name="fio-engine-libaio" arch="x86_64">
  <version epoch="0" ver="3.36" rel="5.el10"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.35-1" date="1684929600">- New upstream version (RHBZ#2209407)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.35-2" date="1686571200">- Drop libpmem support from RHEL 10+ builds</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.35-3" date="1688644800">- Re-enable rados, rbd on ppc64le</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.35-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.35-5" date="1696334400">- Convert License tag to SPDX format</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.36.1" date="1697803200">- Rebase to upstream version 3.36
- Related: rhbz#2245247</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2de477717e81101ae58c8b9a208e102f93d58f38425cd4cdbe262c544f04521f" name="fio-engine-nbd" arch="x86_64">
  <version epoch="0" ver="3.36" rel="5.el10"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.35-1" date="1684929600">- New upstream version (RHBZ#2209407)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.35-2" date="1686571200">- Drop libpmem support from RHEL 10+ builds</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.35-3" date="1688644800">- Re-enable rados, rbd on ppc64le</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.35-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.35-5" date="1696334400">- Convert License tag to SPDX format</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.36.1" date="1697803200">- Rebase to upstream version 3.36
- Related: rhbz#2245247</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="08bbb256305d092ebb91be0cf7697f435d0bb2ac76e48f7ad743a4c99507a4fd" name="fio-engine-rados" arch="x86_64">
  <version epoch="0" ver="3.36" rel="5.el10"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.35-1" date="1684929600">- New upstream version (RHBZ#2209407)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.35-2" date="1686571200">- Drop libpmem support from RHEL 10+ builds</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.35-3" date="1688644800">- Re-enable rados, rbd on ppc64le</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.35-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.35-5" date="1696334400">- Convert License tag to SPDX format</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.36.1" date="1697803200">- Rebase to upstream version 3.36
- Related: rhbz#2245247</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="729a2018aa26b317ff9aedbf3ddb35e735e0225531077719564dd4c852fd8644" name="fio-engine-rbd" arch="x86_64">
  <version epoch="0" ver="3.36" rel="5.el10"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.35-1" date="1684929600">- New upstream version (RHBZ#2209407)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.35-2" date="1686571200">- Drop libpmem support from RHEL 10+ builds</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.35-3" date="1688644800">- Re-enable rados, rbd on ppc64le</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.35-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.35-5" date="1696334400">- Convert License tag to SPDX format</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.36.1" date="1697803200">- Rebase to upstream version 3.36
- Related: rhbz#2245247</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="43d58f2a8ca5b10307b599f4418cf18020e55e28ba3b1dc6c0cbebbeab19349a" name="fio-engine-rdma" arch="x86_64">
  <version epoch="0" ver="3.36" rel="5.el10"/>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.35-1" date="1684929600">- New upstream version (RHBZ#2209407)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.35-2" date="1686571200">- Drop libpmem support from RHEL 10+ builds</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.35-3" date="1688644800">- Re-enable rados, rbd on ppc64le</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.35-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.35-5" date="1696334400">- Convert License tag to SPDX format</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.36.1" date="1697803200">- Rebase to upstream version 3.36
- Related: rhbz#2245247</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8cb0d8545befcecd508f0431097d0ee4f13117d1e8157fbf061563f9a580e9a1" name="fips-provider-next" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="3.el10_1"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.0-1" date="1753272000">- Initial commit on c10s</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.0-2" date="1757332800">- Fix FIPS module name/version</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.0-3" date="1759492800">- Add OpenSSL patch to fix RSA X.931 padding check</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 1.2.0-3" date="1760961600">- Add RISCV64 support to fips-provider-next</changelog>
</package>
<package pkgid="4c9427b2082e0905eef39c58b23d511251ebfbc7e1259ab75cfd2f2a5fa29810" name="firefox" arch="x86_64">
  <version epoch="0" ver="140.10.2" rel="1.el10_2"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.5.0-1" date="1762516800">- Update to 140.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.6.0-1" date="1764676800">- Update to 140.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.7.0-1" date="1767787200">- Update to 140.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.8.0-2" date="1771329600">- Update to 140.8.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.0-1" date="1773835200">- Update to 140.9.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.1-1" date="1775649600">- Update to 140.9.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.0-1" date="1776340800">- Update to 140.10.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.1-1" date="1778068800">- Update to 140.10.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.2-1" date="1778760000">- Update to 140.10.2 ESR</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 140.10.2-1" date="1779278400">- Add custom Rocky Linux firefox prefs (Louis Abel)
- Ensure mozilla API key is set for Rocky Linux (Mustafa Gezen)
- Ensure s390x and riscv64 are locked to 3 CPU's (Louis Abel)</changelog>
</package>
<package pkgid="dcb501bca02b9a8c5710f1a939489ea75fb047408ab59ed08aa2b4540f27c57f" name="firefox" arch="x86_64">
  <version epoch="0" ver="140.11.0" rel="1.el10_2"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.6.0-1" date="1764676800">- Update to 140.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.7.0-1" date="1767787200">- Update to 140.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.8.0-2" date="1771329600">- Update to 140.8.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.0-1" date="1773835200">- Update to 140.9.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.1-1" date="1775649600">- Update to 140.9.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.0-1" date="1776340800">- Update to 140.10.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.1-1" date="1778068800">- Update to 140.10.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.2-1" date="1778760000">- Update to 140.10.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.11.0-1" date="1779278400">- Update to 140.11.0 ESR</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 140.11.0-1" date="1779969600">- Add custom Rocky Linux firefox prefs (Louis Abel)
- Ensure mozilla API key is set for Rocky Linux (Mustafa Gezen)
- Ensure s390x and riscv64 are locked to 3 CPU's (Louis Abel)</changelog>
</package>
<package pkgid="f5130b8797448e84dd94ccdefa9561daa8d736f14ee151fa2d2c6ce1ba7c6eec" name="firefox" arch="x86_64">
  <version epoch="0" ver="140.12.0" rel="1.el10_2"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.7.0-1" date="1767787200">- Update to 140.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.8.0-2" date="1771329600">- Update to 140.8.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.0-1" date="1773835200">- Update to 140.9.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.1-1" date="1775649600">- Update to 140.9.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.0-1" date="1776340800">- Update to 140.10.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.1-1" date="1778068800">- Update to 140.10.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.2-1" date="1778760000">- Update to 140.10.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.11.0-1" date="1779278400">- Update to 140.11.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.12.0-1" date="1781092800">- Update to 140.12.0 ESR</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 140.12.0-1" date="1782216000">- Add custom Rocky Linux firefox prefs (Louis Abel)
- Ensure mozilla API key is set for Rocky Linux (Mustafa Gezen)
- Ensure s390x and riscv64 are locked to 3 CPU's (Louis Abel)</changelog>
</package>
<package pkgid="bfe1b7d7f63922de06d94b2b2b67bbc4925636088bc88f6849c45dc9faa66063" name="firefox" arch="x86_64">
  <version epoch="0" ver="140.13.0" rel="1.el10_2"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.8.0-2" date="1771329600">- Update to 140.8.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.0-1" date="1773835200">- Update to 140.9.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.1-1" date="1775649600">- Update to 140.9.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.0-1" date="1776340800">- Update to 140.10.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.1-1" date="1778068800">- Update to 140.10.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.2-1" date="1778760000">- Update to 140.10.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.11.0-1" date="1779278400">- Update to 140.11.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.12.0-1" date="1781092800">- Update to 140.12.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.13.0-1" date="1784203200">- Update to 140.13.0 ESR</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 140.13.0-1" date="1785326400">- Add custom Rocky Linux firefox prefs (Louis Abel)
- Ensure mozilla API key is set for Rocky Linux (Mustafa Gezen)
- Ensure s390x and riscv64 are locked to 3 CPU's (Louis Abel)</changelog>
</package>
<package pkgid="fd16b193630a92fa8e25361bbc39848d32f37b2535f3e431bfa2417aa0f0b9a0" name="firefox" arch="x86_64">
  <version epoch="0" ver="140.14.0" rel="1.el10_2"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.0-1" date="1773835200">- Update to 140.9.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.1-1" date="1775649600">- Update to 140.9.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.0-1" date="1776340800">- Update to 140.10.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.1-1" date="1778068800">- Update to 140.10.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.2-1" date="1778760000">- Update to 140.10.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.11.0-1" date="1779278400">- Update to 140.11.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.12.0-1" date="1781092800">- Update to 140.12.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.13.0-1" date="1784203200">- Update to 140.13.0 ESR</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 140.14.0-1" date="1786536000">- Update to 140.14.0 ESR</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 140.14.0-1" date="1787572800">- Add custom Rocky Linux firefox prefs (Louis Abel)
- Ensure mozilla API key is set for Rocky Linux (Mustafa Gezen)
- Ensure s390x and riscv64 are locked to 3 CPU's (Louis Abel)</changelog>
</package>
<package pkgid="52bcb2fa5056c50e9a406502a4ca8b753ceb44863ca32af9d8ec24a6cc0f68b6" name="firefox-x11" arch="x86_64">
  <version epoch="0" ver="140.10.2" rel="1.el10_2"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.5.0-1" date="1762516800">- Update to 140.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.6.0-1" date="1764676800">- Update to 140.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.7.0-1" date="1767787200">- Update to 140.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.8.0-2" date="1771329600">- Update to 140.8.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.0-1" date="1773835200">- Update to 140.9.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.1-1" date="1775649600">- Update to 140.9.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.0-1" date="1776340800">- Update to 140.10.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.1-1" date="1778068800">- Update to 140.10.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.2-1" date="1778760000">- Update to 140.10.2 ESR</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 140.10.2-1" date="1779278400">- Add custom Rocky Linux firefox prefs (Louis Abel)
- Ensure mozilla API key is set for Rocky Linux (Mustafa Gezen)
- Ensure s390x and riscv64 are locked to 3 CPU's (Louis Abel)</changelog>
</package>
<package pkgid="6c85363813426d86885f242a46274e29b27b4137af415af0469a2e2defdde0f4" name="firefox-x11" arch="x86_64">
  <version epoch="0" ver="140.11.0" rel="1.el10_2"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.6.0-1" date="1764676800">- Update to 140.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.7.0-1" date="1767787200">- Update to 140.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.8.0-2" date="1771329600">- Update to 140.8.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.0-1" date="1773835200">- Update to 140.9.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.1-1" date="1775649600">- Update to 140.9.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.0-1" date="1776340800">- Update to 140.10.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.1-1" date="1778068800">- Update to 140.10.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.2-1" date="1778760000">- Update to 140.10.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.11.0-1" date="1779278400">- Update to 140.11.0 ESR</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 140.11.0-1" date="1779969600">- Add custom Rocky Linux firefox prefs (Louis Abel)
- Ensure mozilla API key is set for Rocky Linux (Mustafa Gezen)
- Ensure s390x and riscv64 are locked to 3 CPU's (Louis Abel)</changelog>
</package>
<package pkgid="635075ffd499e61cfe379970e7e506cb79d0440cd83956b60e9b0aa2ccf91cc5" name="firefox-x11" arch="x86_64">
  <version epoch="0" ver="140.12.0" rel="1.el10_2"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.7.0-1" date="1767787200">- Update to 140.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.8.0-2" date="1771329600">- Update to 140.8.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.0-1" date="1773835200">- Update to 140.9.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.1-1" date="1775649600">- Update to 140.9.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.0-1" date="1776340800">- Update to 140.10.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.1-1" date="1778068800">- Update to 140.10.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.2-1" date="1778760000">- Update to 140.10.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.11.0-1" date="1779278400">- Update to 140.11.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.12.0-1" date="1781092800">- Update to 140.12.0 ESR</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 140.12.0-1" date="1782216000">- Add custom Rocky Linux firefox prefs (Louis Abel)
- Ensure mozilla API key is set for Rocky Linux (Mustafa Gezen)
- Ensure s390x and riscv64 are locked to 3 CPU's (Louis Abel)</changelog>
</package>
<package pkgid="326207b8270554dba89bcbd4f81153dfbd659e2b16507d5fa828033d2539c8dc" name="firefox-x11" arch="x86_64">
  <version epoch="0" ver="140.13.0" rel="1.el10_2"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.8.0-2" date="1771329600">- Update to 140.8.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.0-1" date="1773835200">- Update to 140.9.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.1-1" date="1775649600">- Update to 140.9.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.0-1" date="1776340800">- Update to 140.10.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.1-1" date="1778068800">- Update to 140.10.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.2-1" date="1778760000">- Update to 140.10.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.11.0-1" date="1779278400">- Update to 140.11.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.12.0-1" date="1781092800">- Update to 140.12.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.13.0-1" date="1784203200">- Update to 140.13.0 ESR</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 140.13.0-1" date="1785326400">- Add custom Rocky Linux firefox prefs (Louis Abel)
- Ensure mozilla API key is set for Rocky Linux (Mustafa Gezen)
- Ensure s390x and riscv64 are locked to 3 CPU's (Louis Abel)</changelog>
</package>
<package pkgid="25e311b3abbfee323da02df9b2547269671f37f968c2f8f5b7950f1e37bcee6b" name="firefox-x11" arch="x86_64">
  <version epoch="0" ver="140.14.0" rel="1.el10_2"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.0-1" date="1773835200">- Update to 140.9.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.9.1-1" date="1775649600">- Update to 140.9.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.0-1" date="1776340800">- Update to 140.10.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.1-1" date="1778068800">- Update to 140.10.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.10.2-1" date="1778760000">- Update to 140.10.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.11.0-1" date="1779278400">- Update to 140.11.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.12.0-1" date="1781092800">- Update to 140.12.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 140.13.0-1" date="1784203200">- Update to 140.13.0 ESR</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 140.14.0-1" date="1786536000">- Update to 140.14.0 ESR</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 140.14.0-1" date="1787572800">- Add custom Rocky Linux firefox prefs (Louis Abel)
- Ensure mozilla API key is set for Rocky Linux (Mustafa Gezen)
- Ensure s390x and riscv64 are locked to 3 CPU's (Louis Abel)</changelog>
</package>
<package pkgid="f8302b89bbe034f33faf334cd17c269464b61bdb426284ed6d253d18a0e5331d" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="1.el10_1"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.1.2-2" date="1713355200">- fix missing policykit symlink</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-1" date="1720785600">- rebase package to v2.2.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-2" date="1720785601">- fix firewalld.conf when upgrading from old versions that had a symlink</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.1-1" date="1721822400">- rebase package to v2.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-1" date="1730808000">- rebase package to v2.3.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-2" date="1736942400">- revert RHEL only patch to default StrictForwardPorts=yes</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.1-1" date="1749556800">- rebase package to v2.3.1</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.0-1" date="1762516800">- rebase package to v2.4.0</changelog>
</package>
<package pkgid="5bd46b54597b852d3ec5eaca8f3a30c7a4b25dfd6bc66e55817a17562a7918ec" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-1" date="1720785600">- rebase package to v2.2.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-2" date="1720785601">- fix firewalld.conf when upgrading from old versions that had a symlink</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.1-1" date="1721822400">- rebase package to v2.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-1" date="1730808000">- rebase package to v2.3.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-2" date="1736942400">- revert RHEL only patch to default StrictForwardPorts=yes</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.1-1" date="1749556800">- rebase package to v2.3.1</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.0-1" date="1762516800">- rebase package to v2.4.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.2-1" date="1781006400">- rebase package to v2.4.2</changelog>
</package>
<package pkgid="f375ff9fbcd601f7fc4f0114a1cf918e2a1834479e4a12bfded106117cb991b9" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="2.4.3" rel="2.el10_2"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-2" date="1720785600">- fix firewalld.conf when upgrading from old versions that had a symlink</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.1-1" date="1721822400">- rebase package to v2.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-1" date="1730808000">- rebase package to v2.3.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-2" date="1736942400">- revert RHEL only patch to default StrictForwardPorts=yes</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.1-1" date="1749556800">- rebase package to v2.3.1</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.0-1" date="1762516800">- rebase package to v2.4.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.2-1" date="1781006400">- rebase package to v2.4.2</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.3-1" date="1782302400">- rebase package to v2.4.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.3-2" date="1782475200">- rebuild to bump NVR; no changes</changelog>
</package>
<package pkgid="917d2f16284441bb389fb690c1f779dabe75c2b567bcff53ddb929f94e68f5b7" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="2.4.3" rel="4.el10_2"/>
</package>
<package pkgid="7ce7e7ecfb6fb499e9f2eebaee54227ab8134574f34da701af7abc4c7b9e293a" name="firewall-config" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="1.el10_1"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.1.2-2" date="1713355200">- fix missing policykit symlink</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-1" date="1720785600">- rebase package to v2.2.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-2" date="1720785601">- fix firewalld.conf when upgrading from old versions that had a symlink</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.1-1" date="1721822400">- rebase package to v2.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-1" date="1730808000">- rebase package to v2.3.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-2" date="1736942400">- revert RHEL only patch to default StrictForwardPorts=yes</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.1-1" date="1749556800">- rebase package to v2.3.1</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.0-1" date="1762516800">- rebase package to v2.4.0</changelog>
</package>
<package pkgid="2b23bc448e62e3c1668d9ea9d1459b6cc0e36add1f86f492cf4b483ab7328ed6" name="firewall-config" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-1" date="1720785600">- rebase package to v2.2.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-2" date="1720785601">- fix firewalld.conf when upgrading from old versions that had a symlink</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.1-1" date="1721822400">- rebase package to v2.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-1" date="1730808000">- rebase package to v2.3.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-2" date="1736942400">- revert RHEL only patch to default StrictForwardPorts=yes</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.1-1" date="1749556800">- rebase package to v2.3.1</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.0-1" date="1762516800">- rebase package to v2.4.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.2-1" date="1781006400">- rebase package to v2.4.2</changelog>
</package>
<package pkgid="6f01a6f88c87c9a0f8b18ebb4f74fafe63118bd5f26ea64d1c84945612a47509" name="firewall-config" arch="noarch">
  <version epoch="0" ver="2.4.3" rel="2.el10_2"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-2" date="1720785600">- fix firewalld.conf when upgrading from old versions that had a symlink</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.1-1" date="1721822400">- rebase package to v2.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-1" date="1730808000">- rebase package to v2.3.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-2" date="1736942400">- revert RHEL only patch to default StrictForwardPorts=yes</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.1-1" date="1749556800">- rebase package to v2.3.1</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.0-1" date="1762516800">- rebase package to v2.4.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.2-1" date="1781006400">- rebase package to v2.4.2</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.3-1" date="1782302400">- rebase package to v2.4.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.3-2" date="1782475200">- rebuild to bump NVR; no changes</changelog>
</package>
<package pkgid="a204a90abd2fa6f94471e86b053b86105990ea1e3986ebe71a956370e1622ec7" name="firewall-config" arch="noarch">
  <version epoch="0" ver="2.4.3" rel="4.el10_2"/>
</package>
<package pkgid="7732db8541ebdfcdafe85f4414d31a0128d6377720de69ada5b9893be71ac563" name="firewalld" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="1.el10_1"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.1.2-2" date="1713355200">- fix missing policykit symlink</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-1" date="1720785600">- rebase package to v2.2.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-2" date="1720785601">- fix firewalld.conf when upgrading from old versions that had a symlink</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.1-1" date="1721822400">- rebase package to v2.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-1" date="1730808000">- rebase package to v2.3.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-2" date="1736942400">- revert RHEL only patch to default StrictForwardPorts=yes</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.1-1" date="1749556800">- rebase package to v2.3.1</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.0-1" date="1762516800">- rebase package to v2.4.0</changelog>
</package>
<package pkgid="e008b7dd7bd3939b57a18abd3a25d0a00da68622a4a31db7628601964dad9a76" name="firewalld" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-1" date="1720785600">- rebase package to v2.2.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-2" date="1720785601">- fix firewalld.conf when upgrading from old versions that had a symlink</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.1-1" date="1721822400">- rebase package to v2.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-1" date="1730808000">- rebase package to v2.3.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-2" date="1736942400">- revert RHEL only patch to default StrictForwardPorts=yes</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.1-1" date="1749556800">- rebase package to v2.3.1</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.0-1" date="1762516800">- rebase package to v2.4.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.2-1" date="1781006400">- rebase package to v2.4.2</changelog>
</package>
<package pkgid="734f177514702c6339a84d23ed14fb5b2648adc31402aa7320abd5946d518eb1" name="firewalld" arch="noarch">
  <version epoch="0" ver="2.4.3" rel="2.el10_2"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-2" date="1720785600">- fix firewalld.conf when upgrading from old versions that had a symlink</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.1-1" date="1721822400">- rebase package to v2.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-1" date="1730808000">- rebase package to v2.3.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-2" date="1736942400">- revert RHEL only patch to default StrictForwardPorts=yes</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.1-1" date="1749556800">- rebase package to v2.3.1</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.0-1" date="1762516800">- rebase package to v2.4.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.2-1" date="1781006400">- rebase package to v2.4.2</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.3-1" date="1782302400">- rebase package to v2.4.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.3-2" date="1782475200">- rebuild to bump NVR; no changes</changelog>
</package>
<package pkgid="d01d481f5c4a8fd1feabd1207b4600594af86718c07f529b8d42621fa6ce420a" name="firewalld" arch="noarch">
  <version epoch="0" ver="2.4.3" rel="4.el10_2"/>
</package>
<package pkgid="4efcd9147434c320d07b2d2cab7fa0f0aece4256baeed5132ce9b2427824d0ac" name="firewalld-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="1.el10_1"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.1.2-2" date="1713355200">- fix missing policykit symlink</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-1" date="1720785600">- rebase package to v2.2.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-2" date="1720785601">- fix firewalld.conf when upgrading from old versions that had a symlink</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.1-1" date="1721822400">- rebase package to v2.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-1" date="1730808000">- rebase package to v2.3.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-2" date="1736942400">- revert RHEL only patch to default StrictForwardPorts=yes</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.1-1" date="1749556800">- rebase package to v2.3.1</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.0-1" date="1762516800">- rebase package to v2.4.0</changelog>
</package>
<package pkgid="67770a49f9e961d7968e9a968cb41010fa0dc4737aec0e5d1866c31c16a60338" name="firewalld-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-1" date="1720785600">- rebase package to v2.2.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-2" date="1720785601">- fix firewalld.conf when upgrading from old versions that had a symlink</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.1-1" date="1721822400">- rebase package to v2.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-1" date="1730808000">- rebase package to v2.3.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-2" date="1736942400">- revert RHEL only patch to default StrictForwardPorts=yes</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.1-1" date="1749556800">- rebase package to v2.3.1</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.0-1" date="1762516800">- rebase package to v2.4.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.2-1" date="1781006400">- rebase package to v2.4.2</changelog>
</package>
<package pkgid="261a70fbeb320faa894d5fe835c35d17ab68b16c22f509ffe9e99e2dfa927779" name="firewalld-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.3" rel="2.el10_2"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-2" date="1720785600">- fix firewalld.conf when upgrading from old versions that had a symlink</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.1-1" date="1721822400">- rebase package to v2.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-1" date="1730808000">- rebase package to v2.3.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-2" date="1736942400">- revert RHEL only patch to default StrictForwardPorts=yes</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.1-1" date="1749556800">- rebase package to v2.3.1</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.0-1" date="1762516800">- rebase package to v2.4.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.2-1" date="1781006400">- rebase package to v2.4.2</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.3-1" date="1782302400">- rebase package to v2.4.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.3-2" date="1782475200">- rebuild to bump NVR; no changes</changelog>
</package>
<package pkgid="945914a43232c9b9b78c3c893d69494d2d29f42a0dbd61727ab8f4fdc8c37db5" name="firewalld-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.3" rel="4.el10_2"/>
</package>
<package pkgid="75dabe396b4e7b1ef1c84e157da195573e81c092d9e27e5a47b19aab3fb6c4ff" name="firewalld-test" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="1.el10_1"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.1.2-2" date="1713355200">- fix missing policykit symlink</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-1" date="1720785600">- rebase package to v2.2.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-2" date="1720785601">- fix firewalld.conf when upgrading from old versions that had a symlink</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.1-1" date="1721822400">- rebase package to v2.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-1" date="1730808000">- rebase package to v2.3.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-2" date="1736942400">- revert RHEL only patch to default StrictForwardPorts=yes</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.1-1" date="1749556800">- rebase package to v2.3.1</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.0-1" date="1762516800">- rebase package to v2.4.0</changelog>
</package>
<package pkgid="c3db0818abfdb466014d7d4a9edcab7c0511fa9306a064f725b8d0312b0b6f5f" name="firewalld-test" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-1" date="1720785600">- rebase package to v2.2.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-2" date="1720785601">- fix firewalld.conf when upgrading from old versions that had a symlink</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.1-1" date="1721822400">- rebase package to v2.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-1" date="1730808000">- rebase package to v2.3.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-2" date="1736942400">- revert RHEL only patch to default StrictForwardPorts=yes</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.1-1" date="1749556800">- rebase package to v2.3.1</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.0-1" date="1762516800">- rebase package to v2.4.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.2-1" date="1781006400">- rebase package to v2.4.2</changelog>
</package>
<package pkgid="b77d77385971a6c4389654732f988d6f704c9696e2625d91bfab5e340b4241cf" name="firewalld-test" arch="noarch">
  <version epoch="0" ver="2.4.3" rel="2.el10_2"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.0-2" date="1720785600">- fix firewalld.conf when upgrading from old versions that had a symlink</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.2.1-1" date="1721822400">- rebase package to v2.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-1" date="1730808000">- rebase package to v2.3.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.0-2" date="1736942400">- revert RHEL only patch to default StrictForwardPorts=yes</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.3.1-1" date="1749556800">- rebase package to v2.3.1</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.0-1" date="1762516800">- rebase package to v2.4.0</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.2-1" date="1781006400">- rebase package to v2.4.2</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.3-1" date="1782302400">- rebase package to v2.4.3</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 2.4.3-2" date="1782475200">- rebuild to bump NVR; no changes</changelog>
</package>
<package pkgid="6009f617b1dba1a410a873afab1348d22cdc45523b1c5cfda059327acf3073c2" name="firewalld-test" arch="noarch">
  <version epoch="0" ver="2.4.3" rel="4.el10_2"/>
</package>
<package pkgid="4c55c1be9b511c01dc60ef5fd5d57d56db23d3938187652b55b3ea9a7969c6f6" name="flac" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.2-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4.3-1" date="1687867200">- update to 1.4.3
- convert license tag to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.3-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.3-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.3-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.3-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.3-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a888b2c1fbc572bb4d98792007480f91002d3c0c3b1609198532ce79f74f4a0d" name="flac-devel" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.2-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4.3-1" date="1687867200">- update to 1.4.3
- convert license tag to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.3-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.3-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.3-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.3-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.3-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="103feae75aefbc5d16797b7b2e8ee6120a1537a11a2a719b0c3fae5b5a77f394" name="flac-libs" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.2-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4.3-1" date="1687867200">- update to 1.4.3
- convert license tag to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.3-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.3-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.3-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.3-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.3-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7f1cfbd1b38d277c8691c08c9197a23ea8b6c419ae59d54d1a465a2a68529f1d" name="flashrom" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.3.0-1" date="1675944000">- Update to latest upstream release</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.3.0-2" date="1687089600">- Drop unused libusb-0.1 dependency</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peter Lemenkov &lt;lemenkov@gmail.com&gt; - 1.3.0-4" date="1697889600">- Check GPG signature</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3829b87b582934e65b1cb21cfa69e19fda72ec1c6cee0a8cf3910e9bc6126e3c" name="flashrom-devel" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.3.0-1" date="1675944000">- Update to latest upstream release</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.3.0-2" date="1687089600">- Drop unused libusb-0.1 dependency</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peter Lemenkov &lt;lemenkov@gmail.com&gt; - 1.3.0-4" date="1697889600">- Check GPG signature</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b8fab34b355dda7385633f91bfb569a8f2af65435bea1ac122c2280df54fec7a" name="flatpak" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="9.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.15.10-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-1" date="1736769600">- Update to 1.16.0
  Resolves: RHEL-72779
- Add support for preinstalling Flatpaks
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-2" date="1737115200">- Rebase backported upstream patches to updated versions
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-3" date="1737115201">- Backport: Enable collection IDs for OCI remotes
  Resolves: RHEL-72779</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 1.16.0-4" date="1737633600">- Rebuild with selinux-policy-40.13.23-1
  Resolves: RHEL-36741</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-5" date="1738756800">- Fix crash and installatcion of OCI images
  Resolves: RHEL-76958</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-6" date="1754308800">- Fix wrongly marked failed installs as pre-installed
  Resolves: RHEL-89989</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-7" date="1760356800">- Get certificates from /etc/pki/entitlement for registry.redhat.io
  Resolves: RHEL-85004</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-8" date="1765886400">- Enable FIPS crypto policy if it is enabled on the host
  Resolves: RHEL-77484</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-9" date="1768305600">- kill: Do not kill pid 0 and embrace races
  Resolves: RHEL-140924</changelog>
</package>
<package pkgid="398e79615ba2de8dd59e7449a3884ad7e780c42a92fb11c757ef83697b8a5d70" name="flatpak" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="9.el10_2.1"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-1" date="1736769600">- Update to 1.16.0
  Resolves: RHEL-72779
- Add support for preinstalling Flatpaks
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-2" date="1737115200">- Rebase backported upstream patches to updated versions
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-3" date="1737115201">- Backport: Enable collection IDs for OCI remotes
  Resolves: RHEL-72779</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 1.16.0-4" date="1737633600">- Rebuild with selinux-policy-40.13.23-1
  Resolves: RHEL-36741</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-5" date="1738756800">- Fix crash and installatcion of OCI images
  Resolves: RHEL-76958</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-6" date="1754308800">- Fix wrongly marked failed installs as pre-installed
  Resolves: RHEL-89989</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-7" date="1760356800">- Get certificates from /etc/pki/entitlement for registry.redhat.io
  Resolves: RHEL-85004</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-8" date="1765886400">- Enable FIPS crypto policy if it is enabled on the host
  Resolves: RHEL-77484</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-9" date="1768305600">- kill: Do not kill pid 0 and embrace races
  Resolves: RHEL-140924</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-9.1" date="1779105600">- Fix arbitrary code execution via crafted symlinks in sandbox-expose options
  Resolves: RHEL-165630
- Fix arbitrary file deletion on host via improper cache file path validation
  Resolves: RHEL-170157</changelog>
</package>
<package pkgid="f43b667861a5d8b64851d4cfa189587ad012b2ffac6f0776d6f33f2eb896c9e7" name="flatpak-builder" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.3-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.3.4-1" date="1699876800">- Update to 1.3.4 (#2212349)
- Enable installed tests
- Disable %check</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.3.5-1" date="1700395200">- Update to 1.3.5</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.4.0-1" date="1702382400">- Update to 1.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.4.1-1" date="1707393600">- Update to 1.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.4.4-1" date="1736424000">- Update to 1.4.4
  Resolves: RHEL-47749
- Remove dependency on Python2
  Resolves: RHEL-68320</changelog>
</package>
<package pkgid="8718b9f006d8d20cabdb58e954cde5c363baa8af78dd9e696c8f17dd275b8d58" name="flatpak-builder-tests" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.3-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.3.4-1" date="1699876800">- Update to 1.3.4 (#2212349)
- Enable installed tests
- Disable %check</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.3.5-1" date="1700395200">- Update to 1.3.5</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.4.0-1" date="1702382400">- Update to 1.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.4.1-1" date="1707393600">- Update to 1.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.4.4-1" date="1736424000">- Update to 1.4.4
  Resolves: RHEL-47749
- Remove dependency on Python2
  Resolves: RHEL-68320</changelog>
</package>
<package pkgid="9535c3cd861232238ee664db4bb8122f29d72752fa1ad8d3958556d2f34b8f39" name="flatpak-devel" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="9.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.15.10-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-1" date="1736769600">- Update to 1.16.0
  Resolves: RHEL-72779
- Add support for preinstalling Flatpaks
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-2" date="1737115200">- Rebase backported upstream patches to updated versions
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-3" date="1737115201">- Backport: Enable collection IDs for OCI remotes
  Resolves: RHEL-72779</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 1.16.0-4" date="1737633600">- Rebuild with selinux-policy-40.13.23-1
  Resolves: RHEL-36741</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-5" date="1738756800">- Fix crash and installatcion of OCI images
  Resolves: RHEL-76958</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-6" date="1754308800">- Fix wrongly marked failed installs as pre-installed
  Resolves: RHEL-89989</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-7" date="1760356800">- Get certificates from /etc/pki/entitlement for registry.redhat.io
  Resolves: RHEL-85004</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-8" date="1765886400">- Enable FIPS crypto policy if it is enabled on the host
  Resolves: RHEL-77484</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-9" date="1768305600">- kill: Do not kill pid 0 and embrace races
  Resolves: RHEL-140924</changelog>
</package>
<package pkgid="34a682c449fe9d9e1d728a5c7e1d629bf99f2c73ce12b89e438a743ec9153e07" name="flatpak-devel" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="9.el10_2.1"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-1" date="1736769600">- Update to 1.16.0
  Resolves: RHEL-72779
- Add support for preinstalling Flatpaks
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-2" date="1737115200">- Rebase backported upstream patches to updated versions
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-3" date="1737115201">- Backport: Enable collection IDs for OCI remotes
  Resolves: RHEL-72779</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 1.16.0-4" date="1737633600">- Rebuild with selinux-policy-40.13.23-1
  Resolves: RHEL-36741</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-5" date="1738756800">- Fix crash and installatcion of OCI images
  Resolves: RHEL-76958</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-6" date="1754308800">- Fix wrongly marked failed installs as pre-installed
  Resolves: RHEL-89989</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-7" date="1760356800">- Get certificates from /etc/pki/entitlement for registry.redhat.io
  Resolves: RHEL-85004</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-8" date="1765886400">- Enable FIPS crypto policy if it is enabled on the host
  Resolves: RHEL-77484</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-9" date="1768305600">- kill: Do not kill pid 0 and embrace races
  Resolves: RHEL-140924</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-9.1" date="1779105600">- Fix arbitrary code execution via crafted symlinks in sandbox-expose options
  Resolves: RHEL-165630
- Fix arbitrary file deletion on host via improper cache file path validation
  Resolves: RHEL-170157</changelog>
</package>
<package pkgid="2a3729ba8c7a36f3c0382587435d22f2f296a81e89d09cb9a8db9248aeaeb447" name="flatpak-libs" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="9.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.15.10-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-1" date="1736769600">- Update to 1.16.0
  Resolves: RHEL-72779
- Add support for preinstalling Flatpaks
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-2" date="1737115200">- Rebase backported upstream patches to updated versions
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-3" date="1737115201">- Backport: Enable collection IDs for OCI remotes
  Resolves: RHEL-72779</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 1.16.0-4" date="1737633600">- Rebuild with selinux-policy-40.13.23-1
  Resolves: RHEL-36741</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-5" date="1738756800">- Fix crash and installatcion of OCI images
  Resolves: RHEL-76958</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-6" date="1754308800">- Fix wrongly marked failed installs as pre-installed
  Resolves: RHEL-89989</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-7" date="1760356800">- Get certificates from /etc/pki/entitlement for registry.redhat.io
  Resolves: RHEL-85004</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-8" date="1765886400">- Enable FIPS crypto policy if it is enabled on the host
  Resolves: RHEL-77484</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-9" date="1768305600">- kill: Do not kill pid 0 and embrace races
  Resolves: RHEL-140924</changelog>
</package>
<package pkgid="490da8ad2e24cda603e87423891614e3ae0b0b51928886136b575bdcaeb3027d" name="flatpak-libs" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="9.el10_2.1"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-1" date="1736769600">- Update to 1.16.0
  Resolves: RHEL-72779
- Add support for preinstalling Flatpaks
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-2" date="1737115200">- Rebase backported upstream patches to updated versions
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-3" date="1737115201">- Backport: Enable collection IDs for OCI remotes
  Resolves: RHEL-72779</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 1.16.0-4" date="1737633600">- Rebuild with selinux-policy-40.13.23-1
  Resolves: RHEL-36741</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-5" date="1738756800">- Fix crash and installatcion of OCI images
  Resolves: RHEL-76958</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-6" date="1754308800">- Fix wrongly marked failed installs as pre-installed
  Resolves: RHEL-89989</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-7" date="1760356800">- Get certificates from /etc/pki/entitlement for registry.redhat.io
  Resolves: RHEL-85004</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-8" date="1765886400">- Enable FIPS crypto policy if it is enabled on the host
  Resolves: RHEL-77484</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-9" date="1768305600">- kill: Do not kill pid 0 and embrace races
  Resolves: RHEL-140924</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-9.1" date="1779105600">- Fix arbitrary code execution via crafted symlinks in sandbox-expose options
  Resolves: RHEL-165630
- Fix arbitrary file deletion on host via improper cache file path validation
  Resolves: RHEL-170157</changelog>
</package>
<package pkgid="3ddc1bd7a53b77b2892c96670d86b3be1bb8054659ddee19f92f354056d9398a" name="flatpak-rpm-macros" arch="x86_64">
  <version epoch="0" ver="40" rel="6.el10"/>
  <changelog author="Owen Taylor &lt;otaylor@redhat.com&gt; - 39-3" date="1692705600">- Fix %dist tag to be consistent with fedora-release</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 39-4" date="1693224000">- Define %_localstatedir and %__git</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 39-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 39-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 40-1" date="1711540800">- Version bump for F40
- Define JAVA_HOME, JAVACONFDIRS and %__maven_path
- Change xmvn configuration location</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 40-2" date="1712577600">- Override jurand macros</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 40-3" date="1715688000">- Define pandoc_datadir</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 40-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Owen Talyor &lt;otaylor@redhat.com&gt; - 40-5" date="1720440000">rhel10: set an appropriate value for %{distcore}</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 40-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="75e664557358510cc78a6b610ae8b0f0ad4e433e32635ff465c712944ec3cc41" name="flatpak-runtime-config" arch="x86_64">
  <version epoch="0" ver="40" rel="5.el10"/>
  <changelog author="Owen Taylor &lt;otaylor@redhat.com&gt; - 40-3" date="1717848000">- Adapt to centos-stream and RHEL for el10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 40-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Popela &lt;tpoprls@redhat.com&gt; - 40-5" date="1760529600">- Fix release date and version in the AppStream data
  Resolves: RHEL-121458</changelog>
</package>
<package pkgid="dc0641b511b1e4f0fa3f407227b4612e91e30ee2679145380859731ec21dfeb3" name="flatpak-selinux" arch="noarch">
  <version epoch="0" ver="1.16.0" rel="9.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.15.10-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-1" date="1736769600">- Update to 1.16.0
  Resolves: RHEL-72779
- Add support for preinstalling Flatpaks
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-2" date="1737115200">- Rebase backported upstream patches to updated versions
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-3" date="1737115201">- Backport: Enable collection IDs for OCI remotes
  Resolves: RHEL-72779</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 1.16.0-4" date="1737633600">- Rebuild with selinux-policy-40.13.23-1
  Resolves: RHEL-36741</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-5" date="1738756800">- Fix crash and installatcion of OCI images
  Resolves: RHEL-76958</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-6" date="1754308800">- Fix wrongly marked failed installs as pre-installed
  Resolves: RHEL-89989</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-7" date="1760356800">- Get certificates from /etc/pki/entitlement for registry.redhat.io
  Resolves: RHEL-85004</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-8" date="1765886400">- Enable FIPS crypto policy if it is enabled on the host
  Resolves: RHEL-77484</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-9" date="1768305600">- kill: Do not kill pid 0 and embrace races
  Resolves: RHEL-140924</changelog>
</package>
<package pkgid="8e8051ccca5bc1ed0f8e0434a9279d799f68b5537c3c0a924f91bac9f4b1896e" name="flatpak-selinux" arch="noarch">
  <version epoch="0" ver="1.16.0" rel="9.el10_2.1"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-1" date="1736769600">- Update to 1.16.0
  Resolves: RHEL-72779
- Add support for preinstalling Flatpaks
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-2" date="1737115200">- Rebase backported upstream patches to updated versions
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-3" date="1737115201">- Backport: Enable collection IDs for OCI remotes
  Resolves: RHEL-72779</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 1.16.0-4" date="1737633600">- Rebuild with selinux-policy-40.13.23-1
  Resolves: RHEL-36741</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-5" date="1738756800">- Fix crash and installatcion of OCI images
  Resolves: RHEL-76958</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-6" date="1754308800">- Fix wrongly marked failed installs as pre-installed
  Resolves: RHEL-89989</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-7" date="1760356800">- Get certificates from /etc/pki/entitlement for registry.redhat.io
  Resolves: RHEL-85004</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-8" date="1765886400">- Enable FIPS crypto policy if it is enabled on the host
  Resolves: RHEL-77484</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-9" date="1768305600">- kill: Do not kill pid 0 and embrace races
  Resolves: RHEL-140924</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-9.1" date="1779105600">- Fix arbitrary code execution via crafted symlinks in sandbox-expose options
  Resolves: RHEL-165630
- Fix arbitrary file deletion on host via improper cache file path validation
  Resolves: RHEL-170157</changelog>
</package>
<package pkgid="cbd338e2bbc4dab85854aa1be653242473328a19f0d3060d22be6c1cdf8f547b" name="flatpak-session-helper" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="9.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.15.10-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-1" date="1736769600">- Update to 1.16.0
  Resolves: RHEL-72779
- Add support for preinstalling Flatpaks
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-2" date="1737115200">- Rebase backported upstream patches to updated versions
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-3" date="1737115201">- Backport: Enable collection IDs for OCI remotes
  Resolves: RHEL-72779</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 1.16.0-4" date="1737633600">- Rebuild with selinux-policy-40.13.23-1
  Resolves: RHEL-36741</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-5" date="1738756800">- Fix crash and installatcion of OCI images
  Resolves: RHEL-76958</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-6" date="1754308800">- Fix wrongly marked failed installs as pre-installed
  Resolves: RHEL-89989</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-7" date="1760356800">- Get certificates from /etc/pki/entitlement for registry.redhat.io
  Resolves: RHEL-85004</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-8" date="1765886400">- Enable FIPS crypto policy if it is enabled on the host
  Resolves: RHEL-77484</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-9" date="1768305600">- kill: Do not kill pid 0 and embrace races
  Resolves: RHEL-140924</changelog>
</package>
<package pkgid="03ea8f5a21b47df3f3c49a5bcde80ef0b7de824f46774377010f8b4dc2045b78" name="flatpak-session-helper" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="9.el10_2.1"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-1" date="1736769600">- Update to 1.16.0
  Resolves: RHEL-72779
- Add support for preinstalling Flatpaks
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-2" date="1737115200">- Rebase backported upstream patches to updated versions
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-3" date="1737115201">- Backport: Enable collection IDs for OCI remotes
  Resolves: RHEL-72779</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 1.16.0-4" date="1737633600">- Rebuild with selinux-policy-40.13.23-1
  Resolves: RHEL-36741</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-5" date="1738756800">- Fix crash and installatcion of OCI images
  Resolves: RHEL-76958</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-6" date="1754308800">- Fix wrongly marked failed installs as pre-installed
  Resolves: RHEL-89989</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-7" date="1760356800">- Get certificates from /etc/pki/entitlement for registry.redhat.io
  Resolves: RHEL-85004</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-8" date="1765886400">- Enable FIPS crypto policy if it is enabled on the host
  Resolves: RHEL-77484</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-9" date="1768305600">- kill: Do not kill pid 0 and embrace races
  Resolves: RHEL-140924</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-9.1" date="1779105600">- Fix arbitrary code execution via crafted symlinks in sandbox-expose options
  Resolves: RHEL-165630
- Fix arbitrary file deletion on host via improper cache file path validation
  Resolves: RHEL-170157</changelog>
</package>
<package pkgid="da549b8cf5f372cbbadb51311a3d39c18135db28015018681586e0bdc7af1c9c" name="flatpak-spawn" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.0.6-1" date="1736424000">- Update to 1.0.6
  Resolves: RHEL-71540</changelog>
</package>
<package pkgid="16bcc826adcfc0e29dcb4839b7e686161a446b94967781944c39576c2e0faee1" name="flatpak-tests" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="9.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.15.10-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-1" date="1736769600">- Update to 1.16.0
  Resolves: RHEL-72779
- Add support for preinstalling Flatpaks
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-2" date="1737115200">- Rebase backported upstream patches to updated versions
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-3" date="1737115201">- Backport: Enable collection IDs for OCI remotes
  Resolves: RHEL-72779</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 1.16.0-4" date="1737633600">- Rebuild with selinux-policy-40.13.23-1
  Resolves: RHEL-36741</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-5" date="1738756800">- Fix crash and installatcion of OCI images
  Resolves: RHEL-76958</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-6" date="1754308800">- Fix wrongly marked failed installs as pre-installed
  Resolves: RHEL-89989</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-7" date="1760356800">- Get certificates from /etc/pki/entitlement for registry.redhat.io
  Resolves: RHEL-85004</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-8" date="1765886400">- Enable FIPS crypto policy if it is enabled on the host
  Resolves: RHEL-77484</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-9" date="1768305600">- kill: Do not kill pid 0 and embrace races
  Resolves: RHEL-140924</changelog>
</package>
<package pkgid="ee7337ed9edf57384d6dec0ed416309097c523235c2a8acc4eeb403d5494032e" name="flatpak-tests" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="9.el10_2.1"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-1" date="1736769600">- Update to 1.16.0
  Resolves: RHEL-72779
- Add support for preinstalling Flatpaks
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-2" date="1737115200">- Rebase backported upstream patches to updated versions
  Resolves: RHEL-26066</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-3" date="1737115201">- Backport: Enable collection IDs for OCI remotes
  Resolves: RHEL-72779</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 1.16.0-4" date="1737633600">- Rebuild with selinux-policy-40.13.23-1
  Resolves: RHEL-36741</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-5" date="1738756800">- Fix crash and installatcion of OCI images
  Resolves: RHEL-76958</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-6" date="1754308800">- Fix wrongly marked failed installs as pre-installed
  Resolves: RHEL-89989</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-7" date="1760356800">- Get certificates from /etc/pki/entitlement for registry.redhat.io
  Resolves: RHEL-85004</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-8" date="1765886400">- Enable FIPS crypto policy if it is enabled on the host
  Resolves: RHEL-77484</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 1.16.0-9" date="1768305600">- kill: Do not kill pid 0 and embrace races
  Resolves: RHEL-140924</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.16.0-9.1" date="1779105600">- Fix arbitrary code execution via crafted symlinks in sandbox-expose options
  Resolves: RHEL-165630
- Fix arbitrary file deletion on host via improper cache file path validation
  Resolves: RHEL-170157</changelog>
</package>
<package pkgid="2b382aa804f778f2fa11efecd259b4a5dd0c41405bf51aa561745571ad40df69" name="flatpak-xdg-utils" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.0.6-1" date="1736424000">- Update to 1.0.6
  Resolves: RHEL-71540</changelog>
</package>
<package pkgid="da5e6ab07381b26ba739a05b91285376b2e4f2b60500bf567cb6bd3543ff6368" name="flatpak-xdg-utils-tests" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.0.6-1" date="1736424000">- Update to 1.0.6
  Resolves: RHEL-71540</changelog>
</package>
<package pkgid="c09451425c8bdc0aee62705aa2e8a7f487af370b12722ef726cbf8a08edb3a39" name="flex" arch="x86_64">
  <version epoch="0" ver="2.6.4" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-13" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.6.4-14" date="1698667200">- Analyse flex sources for license information
- Migrate License field to SPDX identifiers for
  https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
  (#2222083)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-15" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.6.4-18" date="1719316800">- Provide flex-doc via the main flex package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8c1668da94ae4840f079681e20e16f894fdcc38ac1c64935d6cdb3d9104a6428" name="flexiblas" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.3.1-5" date="1690286400">- Add Supplements to help pull wrappers if libraries are installed directly</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.0-1" date="1704801600">- Update to 3.4.0
- License changes to LGPL-3.0-or-later</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.1-1" date="1704974400">- Update to 3.4.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.4.1-4" date="1707480000">- Disable ATLAS and BLIS in RHEL builds</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.2-1" date="1709121600">- Update to 3.4.2 (rhbz#2264712)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bdc762b7b47e83022237a9574701814c5d94cd97f96ef17223a313979ff1796f" name="flexiblas-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.3.1-5" date="1690286400">- Add Supplements to help pull wrappers if libraries are installed directly</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.0-1" date="1704801600">- Update to 3.4.0
- License changes to LGPL-3.0-or-later</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.1-1" date="1704974400">- Update to 3.4.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.4.1-4" date="1707480000">- Disable ATLAS and BLIS in RHEL builds</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.2-1" date="1709121600">- Update to 3.4.2 (rhbz#2264712)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6ccf14b7d541ce72d232f8e1e20f4b966182ec697ab7f1f55e9970199beefd16" name="flexiblas-hook-profile" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.3.1-5" date="1690286400">- Add Supplements to help pull wrappers if libraries are installed directly</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.0-1" date="1704801600">- Update to 3.4.0
- License changes to LGPL-3.0-or-later</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.1-1" date="1704974400">- Update to 3.4.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.4.1-4" date="1707480000">- Disable ATLAS and BLIS in RHEL builds</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.2-1" date="1709121600">- Update to 3.4.2 (rhbz#2264712)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="77e0d46731082ba8fc4046d7c7389db9846035379bd9317c5f567eb1069bbf74" name="flexiblas-hook-profile64" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.3.1-5" date="1690286400">- Add Supplements to help pull wrappers if libraries are installed directly</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.0-1" date="1704801600">- Update to 3.4.0
- License changes to LGPL-3.0-or-later</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.1-1" date="1704974400">- Update to 3.4.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.4.1-4" date="1707480000">- Disable ATLAS and BLIS in RHEL builds</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.2-1" date="1709121600">- Update to 3.4.2 (rhbz#2264712)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="34e22665fcad5679f962649850d555c92767f22d13836c29ee5ee9f7edba37a2" name="flexiblas-netlib" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.3.1-5" date="1690286400">- Add Supplements to help pull wrappers if libraries are installed directly</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.0-1" date="1704801600">- Update to 3.4.0
- License changes to LGPL-3.0-or-later</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.1-1" date="1704974400">- Update to 3.4.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.4.1-4" date="1707480000">- Disable ATLAS and BLIS in RHEL builds</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.2-1" date="1709121600">- Update to 3.4.2 (rhbz#2264712)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b4b0ae8ff40fc0d9b791e7dea337330d5cca7cdc844c8dc76680079f46fb4476" name="flexiblas-netlib64" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.3.1-5" date="1690286400">- Add Supplements to help pull wrappers if libraries are installed directly</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.0-1" date="1704801600">- Update to 3.4.0
- License changes to LGPL-3.0-or-later</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.1-1" date="1704974400">- Update to 3.4.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.4.1-4" date="1707480000">- Disable ATLAS and BLIS in RHEL builds</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.2-1" date="1709121600">- Update to 3.4.2 (rhbz#2264712)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cf197dc8dadb1c5b7751c7d14a841289476824ec97546e64cd6f3f837b8373af" name="flexiblas-openblas-openmp" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.3.1-5" date="1690286400">- Add Supplements to help pull wrappers if libraries are installed directly</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.0-1" date="1704801600">- Update to 3.4.0
- License changes to LGPL-3.0-or-later</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.1-1" date="1704974400">- Update to 3.4.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.4.1-4" date="1707480000">- Disable ATLAS and BLIS in RHEL builds</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.2-1" date="1709121600">- Update to 3.4.2 (rhbz#2264712)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="21ef5361cdea40070c28e9829ab37bb632a810cf4bdaab98a718ca44941842c4" name="flexiblas-openblas-openmp64" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.3.1-5" date="1690286400">- Add Supplements to help pull wrappers if libraries are installed directly</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.0-1" date="1704801600">- Update to 3.4.0
- License changes to LGPL-3.0-or-later</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.1-1" date="1704974400">- Update to 3.4.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.4.1-4" date="1707480000">- Disable ATLAS and BLIS in RHEL builds</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.2-1" date="1709121600">- Update to 3.4.2 (rhbz#2264712)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="da7dfada4442156ff86a8a66a6b0144f3a0722a526b4fac4b7828ca49fce0677" name="flexiblas-openblas-serial" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.3.1-5" date="1690286400">- Add Supplements to help pull wrappers if libraries are installed directly</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.0-1" date="1704801600">- Update to 3.4.0
- License changes to LGPL-3.0-or-later</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.1-1" date="1704974400">- Update to 3.4.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.4.1-4" date="1707480000">- Disable ATLAS and BLIS in RHEL builds</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.2-1" date="1709121600">- Update to 3.4.2 (rhbz#2264712)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3cad5e993809e15fba91cbc96e16eac4db86910cfabec526099d85915e85d5a8" name="flexiblas-openblas-serial64" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.3.1-5" date="1690286400">- Add Supplements to help pull wrappers if libraries are installed directly</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.0-1" date="1704801600">- Update to 3.4.0
- License changes to LGPL-3.0-or-later</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.1-1" date="1704974400">- Update to 3.4.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.4.1-4" date="1707480000">- Disable ATLAS and BLIS in RHEL builds</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.2-1" date="1709121600">- Update to 3.4.2 (rhbz#2264712)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e852ba5de2537b5d37de757e3573ec36a091ee6fa267f3a446f3be8ffda149c1" name="flexiblas-openblas-threads" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.3.1-5" date="1690286400">- Add Supplements to help pull wrappers if libraries are installed directly</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.0-1" date="1704801600">- Update to 3.4.0
- License changes to LGPL-3.0-or-later</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.1-1" date="1704974400">- Update to 3.4.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.4.1-4" date="1707480000">- Disable ATLAS and BLIS in RHEL builds</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.2-1" date="1709121600">- Update to 3.4.2 (rhbz#2264712)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="abf844766abc9941e304eb0d0d91d87ef3fe777e57bc5a9afe806d33ffc6fbd7" name="flexiblas-openblas-threads64" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.3.1-5" date="1690286400">- Add Supplements to help pull wrappers if libraries are installed directly</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.0-1" date="1704801600">- Update to 3.4.0
- License changes to LGPL-3.0-or-later</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.1-1" date="1704974400">- Update to 3.4.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.4.1-4" date="1707480000">- Disable ATLAS and BLIS in RHEL builds</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.4.2-1" date="1709121600">- Update to 3.4.2 (rhbz#2264712)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6ebb61aa105e140898b92651acc7af3c6d2423a05605e44d7a2f258490cdcdbd" name="fmt" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="5.el10"/>
  <changelog author="Vitaly Zaitsev &lt;vitaly@easycoding.org&gt; - 10.0.0-1" date="1683720000">- Updated to version 10.0.0.</changelog>
  <changelog author="Vitaly Zaitsev &lt;vitaly@easycoding.org&gt; - 10.0.0-2" date="1687953600">- Added upstream patch with time_point fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.0.0-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 10.0.0-4" date="1691064000">- Add Provides: fmt-static to fmt-devel</changelog>
  <changelog author="Kefu Chai &lt;tchaikov@gmail.com&gt; - 10.1.1-1" date="1700049600">- Updated to version 10.1.1.</changelog>
  <changelog author="Kefu Chai &lt;tchaikov@gmail.com&gt; - 10.2.1-1" date="1705492800">- Updated to version 10.2.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.2.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.2.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8dc47d5fc5ff8fc71fbfe22af9dca77605586226359f1c3f82e581a47d81a94e" name="fmt-devel" arch="x86_64">
  <version epoch="0" ver="10.2.1" rel="5.el10"/>
  <changelog author="Vitaly Zaitsev &lt;vitaly@easycoding.org&gt; - 10.0.0-1" date="1683720000">- Updated to version 10.0.0.</changelog>
  <changelog author="Vitaly Zaitsev &lt;vitaly@easycoding.org&gt; - 10.0.0-2" date="1687953600">- Added upstream patch with time_point fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.0.0-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 10.0.0-4" date="1691064000">- Add Provides: fmt-static to fmt-devel</changelog>
  <changelog author="Kefu Chai &lt;tchaikov@gmail.com&gt; - 10.1.1-1" date="1700049600">- Updated to version 10.1.1.</changelog>
  <changelog author="Kefu Chai &lt;tchaikov@gmail.com&gt; - 10.2.1-1" date="1705492800">- Updated to version 10.2.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.2.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.2.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e9048e63f6697f97622e13cdba1c86960908de7e8a9b505414985a43942805b9" name="foma" arch="x86_64">
  <version epoch="0" ver="0.10.0" rel="0.13.20210601gitdfe1ccb.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.0-0.5.20210601gitdfe1ccb" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.0-0.6.20210601gitdfe1ccb" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT fedoraproject DOT org&gt; - 0.10.0-0.7.20210601gitdfe1ccb" date="1692619200">- Migrate to SPDX license expression</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.10.0-0.8.20210601gitdfe1ccb" date="1704369600">- Fix C compatibility issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.0-0.9.20210601gitdfe1ccb" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.0-0.10.20210601gitdfe1ccb" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.10.0-0.11.20210601gitdfe1ccb" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.10.0-0.12.20210601gitdfe1ccb" date="1720699200">- Resolves: RHELMISC-6017 Add patch to avoid using deprecated inet_* functions.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.10.0-0.13.20210601gitdfe1ccb" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7514c317c54782d6fe70c70eac5eb06bddf7b0d41d9a62d258b0b515ca5ea0c7" name="fontawesome4-fonts" arch="noarch">
  <version epoch="1" ver="4.7.0" rel="23.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.7.0-15" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1:4.7.0-16" date="1677240000">- Name change to fontawesome4-fonts
- Convert License tags to SPDX</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1:4.7.0-17" date="1681128000">- Move fonts back to /usr/share/fonts/fontawesome</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.7.0-18" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1:4.7.0-19" date="1695211200">- Obsolete the fontawesome-fonts package (bz 2239785)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.7.0-20" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.7.0-21" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.7.0-22" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.7.0-23" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="91fe2fed45c89004e5b960ec9641651e73d7aae48eeb487d85ad136833e56fd2" name="fontawesome4-fonts" arch="noarch">
  <version epoch="1" ver="4.7.0" rel="24.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.7.0-23" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 1:4.7.0-24" date="1782820800">- Rebuilt to make web subpackage available in AppStream
  Resolves: RHEL-190850</changelog>
</package>
<package pkgid="d34830662bc17cabcc1c5b0c681c7643726737dc1af40e2bb38972da6df97dde" name="fontawesome4-fonts-web" arch="noarch">
  <version epoch="1" ver="4.7.0" rel="23.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.7.0-15" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1:4.7.0-16" date="1677240000">- Name change to fontawesome4-fonts
- Convert License tags to SPDX</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1:4.7.0-17" date="1681128000">- Move fonts back to /usr/share/fonts/fontawesome</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.7.0-18" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1:4.7.0-19" date="1695211200">- Obsolete the fontawesome-fonts package (bz 2239785)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.7.0-20" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.7.0-21" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.7.0-22" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.7.0-23" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8d5279c0bfb2adbaf19b2d675aff65a0e3a4d28a68292010bd49aedc1a6db5cd" name="fontawesome4-fonts-web" arch="noarch">
  <version epoch="1" ver="4.7.0" rel="24.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.7.0-23" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 1:4.7.0-24" date="1782820800">- Rebuilt to make web subpackage available in AppStream
  Resolves: RHEL-190850</changelog>
</package>
<package pkgid="e2b50f0f04e07a0696965d0b369a4ebf746e7f7de07357b331b09e5dfcd8731e" name="fontconfig" arch="x86_64">
  <version epoch="0" ver="2.15.0" rel="7.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.14.2-3" date="1686916800">- Drop 10-sub-pixel-rgb-for-kde.conf
  Resolves: rhbz#2212512</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.14.2-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.14.2-5" date="1692273600">- Update 65-nonlatin.conf to 69-nonlatin.conf
  This basically provides substitutes for certain languages and is helpful
  to determine default behavior though, we have per-package config for similar purpose.
  Since 65 is mostly used for default fonts and this config prevents some behavior for
  packages named something coming later than "nonlatin" in the alphabetical order.
  So moving this to the safer priority.
  This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
  updating their priorities from 65 to 66.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.15.0-1" date="1703246400">- New upstream release.
  Resolves: rhbz#2255623</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.15.0-4" date="1707566400">- Delete .uuid with fc-cache -f.
  Resolves: rhbz#1761885</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.15.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.15.0-6" date="1722513600">- Fix a memory leak and potentially uninitialized values.
  Resolves: RHEL-41007, RHEL-41008</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.15.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3fec79803785386189a25e241a915f39e39ad04343555aaf402133d6e97592b6" name="fontconfig-devel" arch="x86_64">
  <version epoch="0" ver="2.15.0" rel="7.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.14.2-3" date="1686916800">- Drop 10-sub-pixel-rgb-for-kde.conf
  Resolves: rhbz#2212512</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.14.2-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.14.2-5" date="1692273600">- Update 65-nonlatin.conf to 69-nonlatin.conf
  This basically provides substitutes for certain languages and is helpful
  to determine default behavior though, we have per-package config for similar purpose.
  Since 65 is mostly used for default fonts and this config prevents some behavior for
  packages named something coming later than "nonlatin" in the alphabetical order.
  So moving this to the safer priority.
  This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
  updating their priorities from 65 to 66.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.15.0-1" date="1703246400">- New upstream release.
  Resolves: rhbz#2255623</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.15.0-4" date="1707566400">- Delete .uuid with fc-cache -f.
  Resolves: rhbz#1761885</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.15.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.15.0-6" date="1722513600">- Fix a memory leak and potentially uninitialized values.
  Resolves: RHEL-41007, RHEL-41008</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.15.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bd07a7387da23f6c6c7c471f8342dfd3f911854a3fb77ef763e48e72c226418d" name="fontconfig-devel-doc" arch="noarch">
  <version epoch="0" ver="2.15.0" rel="7.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.14.2-3" date="1686916800">- Drop 10-sub-pixel-rgb-for-kde.conf
  Resolves: rhbz#2212512</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.14.2-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.14.2-5" date="1692273600">- Update 65-nonlatin.conf to 69-nonlatin.conf
  This basically provides substitutes for certain languages and is helpful
  to determine default behavior though, we have per-package config for similar purpose.
  Since 65 is mostly used for default fonts and this config prevents some behavior for
  packages named something coming later than "nonlatin" in the alphabetical order.
  So moving this to the safer priority.
  This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
  updating their priorities from 65 to 66.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.15.0-1" date="1703246400">- New upstream release.
  Resolves: rhbz#2255623</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.15.0-4" date="1707566400">- Delete .uuid with fc-cache -f.
  Resolves: rhbz#1761885</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.15.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.15.0-6" date="1722513600">- Fix a memory leak and potentially uninitialized values.
  Resolves: RHEL-41007, RHEL-41008</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.15.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2906c671c6caefc82b30cd5a6416ae251c4c9bb53d29526aa7845944f63ba0fa" name="fontforge" arch="x86_64">
  <version epoch="0" ver="20230101" rel="15.el10_1"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20230101-11" date="1713268800">- Resolves: RHEL-31498 various flaws
  CVE-2024-25081 and CVE-2024-25082
- Add gating.yaml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20230101-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20230101-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20230101-14" date="1769515200">- Resolves: RHEL-138159
  CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
- Resolves: RHEL-138144
  CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
- Resolves: RHEL-138126
  CVE-2025-15269 SFD File Parsing Use-After-Free</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20230101-15" date="1774872000">- Resolves: RHEL-138129
  CVE-2025-15270 SFD File Parsing Remote Code Execution Vulnerability</changelog>
</package>
<package pkgid="a221e5946087ffa726c7607cce73c1f8b80028ace2581752883b91ae407a3fb8" name="fontforge-devel" arch="x86_64">
  <version epoch="0" ver="20230101" rel="15.el10_1"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20230101-11" date="1713268800">- Resolves: RHEL-31498 various flaws
  CVE-2024-25081 and CVE-2024-25082
- Add gating.yaml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20230101-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20230101-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20230101-14" date="1769515200">- Resolves: RHEL-138159
  CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
- Resolves: RHEL-138144
  CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
- Resolves: RHEL-138126
  CVE-2025-15269 SFD File Parsing Use-After-Free</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20230101-15" date="1774872000">- Resolves: RHEL-138129
  CVE-2025-15270 SFD File Parsing Remote Code Execution Vulnerability</changelog>
</package>
<package pkgid="318eea0378d838c704e7a740ef2a5a7f1431437028ba52915df69ed9cd058365" name="fontforge-doc" arch="noarch">
  <version epoch="0" ver="20230101" rel="15.el10_1"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20230101-11" date="1713268800">- Resolves: RHEL-31498 various flaws
  CVE-2024-25081 and CVE-2024-25082
- Add gating.yaml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20230101-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20230101-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20230101-14" date="1769515200">- Resolves: RHEL-138159
  CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
- Resolves: RHEL-138144
  CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
- Resolves: RHEL-138126
  CVE-2025-15269 SFD File Parsing Use-After-Free</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20230101-15" date="1774872000">- Resolves: RHEL-138129
  CVE-2025-15270 SFD File Parsing Remote Code Execution Vulnerability</changelog>
</package>
<package pkgid="d00ef1629798c4f92e784666ed0199bc806096c147661378b777ba36a3897f5e" name="fonts-filesystem" arch="noarch">
  <version epoch="1" ver="2.0.5" rel="18.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.0.5-15" date="1717416000">- Drop YAML support in gen-fontconf for RHEL10 or later.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.0.5-16" date="1718798400">- Add %{epoch} in Requires line if needed
- Support fontpkgheader macro for meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.0.5-17" date="1723550400">- Add exact binary name in the file list.
- Do not package backup files.
  Resolves: RHEL-54049</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.5-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="00fae9f40682dbc6ef001d3c6709f10247de87388346701b857d55e904d41f92" name="fonts-rpm-macros" arch="noarch">
  <version epoch="1" ver="2.0.5" rel="18.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.0.5-15" date="1717416000">- Drop YAML support in gen-fontconf for RHEL10 or later.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.0.5-16" date="1718798400">- Add %{epoch} in Requires line if needed
- Support fontpkgheader macro for meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.0.5-17" date="1723550400">- Add exact binary name in the file list.
- Do not package backup files.
  Resolves: RHEL-54049</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.5-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8ef17a9478a54292d0814aa75a91d7e35303ab01662b383b12abbbfdc77f0294" name="fonts-rpm-templates" arch="noarch">
  <version epoch="1" ver="2.0.5" rel="18.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.0.5-15" date="1717416000">- Drop YAML support in gen-fontconf for RHEL10 or later.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.0.5-16" date="1718798400">- Add %{epoch} in Requires line if needed
- Support fontpkgheader macro for meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.0.5-17" date="1723550400">- Add exact binary name in the file list.
- Do not package backup files.
  Resolves: RHEL-54049</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.5-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="49f2501c2ec65457ada5bed94737bd781de4d2f12fe38e396a618d685a1756fe" name="fonts-srpm-macros" arch="noarch">
  <version epoch="1" ver="2.0.5" rel="18.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.0.5-15" date="1717416000">- Drop YAML support in gen-fontconf for RHEL10 or later.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.0.5-16" date="1718798400">- Add %{epoch} in Requires line if needed
- Support fontpkgheader macro for meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.0.5-17" date="1723550400">- Add exact binary name in the file list.
- Do not package backup files.
  Resolves: RHEL-54049</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.5-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bed4b5793ac44598214c320c3c7a69cd13c3311c8fed6a3373613de8ac98a198" name="fonttools" arch="x86_64">
  <version epoch="0" ver="4.51.0" rel="4.el10"/>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 4.47.2-2" date="1705320000">- Remove version limit from lxml</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.47.2-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.47.2-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.48.1-1" date="1707307200">- Update to 4.48.1 version (#2263197)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.49.0-1" date="1708171200">- Update to 4.49.0 version (#2264616)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.50.0-1" date="1710590400">- Resolves: RHEL-31499 - Update to 4.50.0 version</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.51.0-1" date="1712750400">- Update to 4.51.0 version (#2273774)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.51.0-2" date="1716897600">- Resolves: RHEL-38996 - Generate extra subpackages only for Fedora release</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.51.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.51.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="468ffa67a93706c61f28c9332291f90800f16cd54d6e69b0c481d4d0b44a6912" name="foomatic" arch="x86_64">
  <version epoch="0" ver="4.0.13" rel="33.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.13-26" date="1673524800">- URL changed to github</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.13-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.13-28" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.13-29" date="1691755200">- Rebuild with new foomatic-db
- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.13-30" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.13-31" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.13-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.13-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ea33de37021ac981b4ae1b408c8e23121915a649415c0b171511015d85bf16ad" name="foomatic-db" arch="noarch">
  <version epoch="0" ver="4.0" rel="83.20230810.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-75.20210611" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-76.20210611" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0-77.20230810" date="1691755200">- update to foomatic-db-4.0-20230810
- fix xargs in %prep to work with files with spaces
- fix rpm warnings about patch macros
- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-78.20230810" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-79.20230810" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0-80.20230810" date="1715083200">- RHEL-35698 Remove/migrate additional license tags to SPDX</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0-81.20230810" date="1715947200">- RHEL-35698 add plans and gating</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-82.20230810" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-83.20230810" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9e9e6bc602dfe498481170d1d41937417f7e71dce49c34312dd52ef70441e74d" name="foomatic-db-filesystem" arch="noarch">
  <version epoch="0" ver="4.0" rel="83.20230810.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-75.20210611" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-76.20210611" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0-77.20230810" date="1691755200">- update to foomatic-db-4.0-20230810
- fix xargs in %prep to work with files with spaces
- fix rpm warnings about patch macros
- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-78.20230810" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-79.20230810" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0-80.20230810" date="1715083200">- RHEL-35698 Remove/migrate additional license tags to SPDX</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0-81.20230810" date="1715947200">- RHEL-35698 add plans and gating</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-82.20230810" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-83.20230810" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7ffdec6e4f4645627e846b3a599c4c6f8e893b0cc9549f7617643f9b1b6a96e2" name="foomatic-db-ppds" arch="noarch">
  <version epoch="0" ver="4.0" rel="83.20230810.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-75.20210611" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-76.20210611" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0-77.20230810" date="1691755200">- update to foomatic-db-4.0-20230810
- fix xargs in %prep to work with files with spaces
- fix rpm warnings about patch macros
- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-78.20230810" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-79.20230810" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0-80.20230810" date="1715083200">- RHEL-35698 Remove/migrate additional license tags to SPDX</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0-81.20230810" date="1715947200">- RHEL-35698 add plans and gating</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-82.20230810" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-83.20230810" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="48876ab255b9d39bd3ff299ff148f0679f2acc70532d382537b0ea63fff791c5" name="forge-srpm-macros" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 0.4.0-1" date="1733140800">- Upgrade to 0.4.0
  Resolves: RHEL-60802</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 0.4.0-2" date="1733227200">- Add gating control files
  Resolves: RHEL-60802</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 0.4.0-3" date="1733227201">- Modifications to the gating control files
  Resolves: RHEL-60802</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 0.4.0-4" date="1733227202">- Even more modifications to the gating control files
  Related: RHEL-60802</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 0.4.0-5" date="1734436800">- Modify gating.yaml file based on gating feedback</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 0.4.0-6" date="1734523200">- Add empty rules list to gating.yaml</changelog>
</package>
<package pkgid="1823eec49edeb5c318418619b813fb892bd43a85f142d849a1659def530efb2c" name="fprintd" arch="x86_64">
  <version epoch="0" ver="1.94.5" rel="1.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.94.2-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.94.2-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 1.94.2-10" date="1705924800">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.94.2-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.94.2-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.94.2-13" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.4-1" date="1732190400">- Update to upstream version 1.94.4</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.5-1" date="1750680000">- Update to the upstream version 1.94.5</changelog>
</package>
<package pkgid="64a3b2baf13357175b1c105db23efa72bf0ecc89b1ca8d8106a8266706b635e8" name="fprintd-devel" arch="noarch">
  <version epoch="0" ver="1.94.5" rel="1.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.94.2-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.94.2-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 1.94.2-10" date="1705924800">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.94.2-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.94.2-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.94.2-13" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.4-1" date="1732190400">- Update to upstream version 1.94.4</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.5-1" date="1750680000">- Update to the upstream version 1.94.5</changelog>
</package>
<package pkgid="12ef437851dc5c984172b603d1de7a690e807c9255370a7ef99c0b230bfe3b08" name="fprintd-pam" arch="x86_64">
  <version epoch="0" ver="1.94.5" rel="1.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.94.2-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.94.2-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 1.94.2-10" date="1705924800">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.94.2-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.94.2-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.94.2-13" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.4-1" date="1732190400">- Update to upstream version 1.94.4</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.5-1" date="1750680000">- Update to the upstream version 1.94.5</changelog>
</package>
<package pkgid="e2000e5c1d911d0a7bf18971d959305b9c2e9f16f03c6b9cf61281f2ba185cea" name="freeglut" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 3.4.0-3" date="1677844800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 3.4.0-7" date="1707739200">- Patch for CVE-2024-24258 and CVE-2024-24259</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.0-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0a74f9a2efd9cbd62768984f651a4c29ab29208b7044ee24b7d9781c69e7abff" name="freeglut-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 3.4.0-3" date="1677844800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 3.4.0-7" date="1707739200">- Patch for CVE-2024-24258 and CVE-2024-24259</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.0-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ed8ea06e7e73615c3bf4e92edebd9dc0d7e0c9b0c8fa8bd99a8496b573975438" name="freeipmi" arch="x86_64">
  <version epoch="0" ver="1.6.17" rel="1.el10_1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Evgeny Fedin &lt;efedin@redhat.com&gt; - 1.6.14-3" date="1719835200">- Related: RHELMISC-3914 - add gating.yaml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-5" date="1750680000">- gating: RHEL-10: Add OSCI testing</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-6" date="1750680001">- .fmf/version: Add fmf metadtata root</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.17-1" date="1777550400">- Update to 1.6.17</changelog>
</package>
<package pkgid="e11bf84315aa5b765abe02636eeef0cd656a490f6c1c86aa2eb28d4a98f85c1f" name="freeipmi" arch="x86_64">
  <version epoch="0" ver="1.6.18" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Evgeny Fedin &lt;efedin@redhat.com&gt; - 1.6.14-3" date="1719835200">- Related: RHELMISC-3914 - add gating.yaml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-5" date="1750680000">- gating: RHEL-10: Add OSCI testing</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-6" date="1750680001">- .fmf/version: Add fmf metadtata root</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.17-1" date="1776254400">- Update to 1.6.17</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.18-1" date="1781697600">- Update to 1.6.18</changelog>
</package>
<package pkgid="56fc51540800512cf3152f00a8367af46ee5eb56160abda903b6a0479740d3f5" name="freeipmi-bmc-watchdog" arch="x86_64">
  <version epoch="0" ver="1.6.17" rel="1.el10_1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Evgeny Fedin &lt;efedin@redhat.com&gt; - 1.6.14-3" date="1719835200">- Related: RHELMISC-3914 - add gating.yaml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-5" date="1750680000">- gating: RHEL-10: Add OSCI testing</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-6" date="1750680001">- .fmf/version: Add fmf metadtata root</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.17-1" date="1777550400">- Update to 1.6.17</changelog>
</package>
<package pkgid="0b34a1facd6ac6a5bebcd18e061042ce1211c349da4c0e6fe5d7f717975e9268" name="freeipmi-bmc-watchdog" arch="x86_64">
  <version epoch="0" ver="1.6.18" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Evgeny Fedin &lt;efedin@redhat.com&gt; - 1.6.14-3" date="1719835200">- Related: RHELMISC-3914 - add gating.yaml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-5" date="1750680000">- gating: RHEL-10: Add OSCI testing</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-6" date="1750680001">- .fmf/version: Add fmf metadtata root</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.17-1" date="1776254400">- Update to 1.6.17</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.18-1" date="1781697600">- Update to 1.6.18</changelog>
</package>
<package pkgid="80ab40d3dbd8d057140bbfa1e0a000c07de34ceca8f2c2011295b5b122454468" name="freeipmi-devel" arch="x86_64">
  <version epoch="0" ver="1.6.17" rel="1.el10_1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Evgeny Fedin &lt;efedin@redhat.com&gt; - 1.6.14-3" date="1719835200">- Related: RHELMISC-3914 - add gating.yaml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-5" date="1750680000">- gating: RHEL-10: Add OSCI testing</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-6" date="1750680001">- .fmf/version: Add fmf metadtata root</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.17-1" date="1777550400">- Update to 1.6.17</changelog>
</package>
<package pkgid="488ebf7d86f384eac5d893b0d7d8bc66e4fb04687be5ab1a54377933edce0f2c" name="freeipmi-devel" arch="x86_64">
  <version epoch="0" ver="1.6.18" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Evgeny Fedin &lt;efedin@redhat.com&gt; - 1.6.14-3" date="1719835200">- Related: RHELMISC-3914 - add gating.yaml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-5" date="1750680000">- gating: RHEL-10: Add OSCI testing</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-6" date="1750680001">- .fmf/version: Add fmf metadtata root</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.17-1" date="1776254400">- Update to 1.6.17</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.18-1" date="1781697600">- Update to 1.6.18</changelog>
</package>
<package pkgid="4b466bba50319c478e7bededa2f5dec95050e64b4443ffe7ce009ade563c0522" name="freeipmi-ipmidetectd" arch="x86_64">
  <version epoch="0" ver="1.6.17" rel="1.el10_1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Evgeny Fedin &lt;efedin@redhat.com&gt; - 1.6.14-3" date="1719835200">- Related: RHELMISC-3914 - add gating.yaml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-5" date="1750680000">- gating: RHEL-10: Add OSCI testing</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-6" date="1750680001">- .fmf/version: Add fmf metadtata root</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.17-1" date="1777550400">- Update to 1.6.17</changelog>
</package>
<package pkgid="33a18900e9aa88a51e125e2d3d8fa504a6763790cccf486a6d71c1854364fabe" name="freeipmi-ipmidetectd" arch="x86_64">
  <version epoch="0" ver="1.6.18" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Evgeny Fedin &lt;efedin@redhat.com&gt; - 1.6.14-3" date="1719835200">- Related: RHELMISC-3914 - add gating.yaml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-5" date="1750680000">- gating: RHEL-10: Add OSCI testing</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-6" date="1750680001">- .fmf/version: Add fmf metadtata root</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.17-1" date="1776254400">- Update to 1.6.17</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.18-1" date="1781697600">- Update to 1.6.18</changelog>
</package>
<package pkgid="c499c00f4aaf8175ef4743a78434c524b5cf77d1eff09e87a58fa52f086752ac" name="freeipmi-ipmiseld" arch="x86_64">
  <version epoch="0" ver="1.6.17" rel="1.el10_1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Evgeny Fedin &lt;efedin@redhat.com&gt; - 1.6.14-3" date="1719835200">- Related: RHELMISC-3914 - add gating.yaml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-5" date="1750680000">- gating: RHEL-10: Add OSCI testing</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-6" date="1750680001">- .fmf/version: Add fmf metadtata root</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.17-1" date="1777550400">- Update to 1.6.17</changelog>
</package>
<package pkgid="f8b2e63cfbf63f77a211bad3102088c293757a511150f0663643fdf4ef663507" name="freeipmi-ipmiseld" arch="x86_64">
  <version epoch="0" ver="1.6.18" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Evgeny Fedin &lt;efedin@redhat.com&gt; - 1.6.14-3" date="1719835200">- Related: RHELMISC-3914 - add gating.yaml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.14-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-5" date="1750680000">- gating: RHEL-10: Add OSCI testing</changelog>
  <changelog author="Jakub Haruda &lt;jharuda@redhat.com&gt; - 1.6.14-6" date="1750680001">- .fmf/version: Add fmf metadtata root</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.17-1" date="1776254400">- Update to 1.6.17</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.6.18-1" date="1781697600">- Update to 1.6.18</changelog>
</package>
<package pkgid="6d8e6561c271fcd12c300f4991188ad236ee57738ac121296f8dea2a8df010ea" name="freeradius" arch="x86_64">
  <version epoch="0" ver="3.2.8" rel="2.el10"/>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-5" date="1712059200">- Remove Antora docs from package
  Resolves: RHEL-31184</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-6" date="1712232000">- Remove SQL helper script from package
  Resolves: RHEL-31745</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.3-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-1" date="1720526400">- Rebase to release 3.2.5
  Resolves: RHEL-46784</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-2" date="1720612800">- Disable unsupported Perl script</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-3" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-5" date="1745323200">- Rebuild for OpenSSL 3.5
  Resolves: RHEL-88054</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-1" date="1756814400">- Rebase to release 3.2.8
  Resolves: RHEL-107671</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-2" date="1758715200">- Disable JIT if PCRE can't allocate executable memory
- Fix warnings from service file
  Resolves: RHEL-116594</changelog>
</package>
<package pkgid="47ebf65a900425a2f17c3ad62aaec13d1759baaa2b0059484822d2aa6562c432" name="freeradius-devel" arch="x86_64">
  <version epoch="0" ver="3.2.8" rel="2.el10"/>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-5" date="1712059200">- Remove Antora docs from package
  Resolves: RHEL-31184</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-6" date="1712232000">- Remove SQL helper script from package
  Resolves: RHEL-31745</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.3-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-1" date="1720526400">- Rebase to release 3.2.5
  Resolves: RHEL-46784</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-2" date="1720612800">- Disable unsupported Perl script</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-3" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-5" date="1745323200">- Rebuild for OpenSSL 3.5
  Resolves: RHEL-88054</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-1" date="1756814400">- Rebase to release 3.2.8
  Resolves: RHEL-107671</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-2" date="1758715200">- Disable JIT if PCRE can't allocate executable memory
- Fix warnings from service file
  Resolves: RHEL-116594</changelog>
</package>
<package pkgid="9d0b16eb5fabe097e8add0606c172a4fc4c0a7a764674a3aaa098cff9e88946e" name="freeradius-doc" arch="x86_64">
  <version epoch="0" ver="3.2.8" rel="2.el10"/>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-5" date="1712059200">- Remove Antora docs from package
  Resolves: RHEL-31184</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-6" date="1712232000">- Remove SQL helper script from package
  Resolves: RHEL-31745</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.3-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-1" date="1720526400">- Rebase to release 3.2.5
  Resolves: RHEL-46784</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-2" date="1720612800">- Disable unsupported Perl script</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-3" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-5" date="1745323200">- Rebuild for OpenSSL 3.5
  Resolves: RHEL-88054</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-1" date="1756814400">- Rebase to release 3.2.8
  Resolves: RHEL-107671</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-2" date="1758715200">- Disable JIT if PCRE can't allocate executable memory
- Fix warnings from service file
  Resolves: RHEL-116594</changelog>
</package>
<package pkgid="747d086b5430654117aa13c3d30d9bba19c9f26e4b65adae8035b2cb70740332" name="freeradius-krb5" arch="x86_64">
  <version epoch="0" ver="3.2.8" rel="2.el10"/>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-5" date="1712059200">- Remove Antora docs from package
  Resolves: RHEL-31184</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-6" date="1712232000">- Remove SQL helper script from package
  Resolves: RHEL-31745</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.3-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-1" date="1720526400">- Rebase to release 3.2.5
  Resolves: RHEL-46784</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-2" date="1720612800">- Disable unsupported Perl script</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-3" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-5" date="1745323200">- Rebuild for OpenSSL 3.5
  Resolves: RHEL-88054</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-1" date="1756814400">- Rebase to release 3.2.8
  Resolves: RHEL-107671</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-2" date="1758715200">- Disable JIT if PCRE can't allocate executable memory
- Fix warnings from service file
  Resolves: RHEL-116594</changelog>
</package>
<package pkgid="fab1d2f2a0721404962191bbc4fb824ac97a482db8ccdf1da707cdb46f6c425a" name="freeradius-ldap" arch="x86_64">
  <version epoch="0" ver="3.2.8" rel="2.el10"/>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-5" date="1712059200">- Remove Antora docs from package
  Resolves: RHEL-31184</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-6" date="1712232000">- Remove SQL helper script from package
  Resolves: RHEL-31745</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.3-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-1" date="1720526400">- Rebase to release 3.2.5
  Resolves: RHEL-46784</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-2" date="1720612800">- Disable unsupported Perl script</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-3" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-5" date="1745323200">- Rebuild for OpenSSL 3.5
  Resolves: RHEL-88054</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-1" date="1756814400">- Rebase to release 3.2.8
  Resolves: RHEL-107671</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-2" date="1758715200">- Disable JIT if PCRE can't allocate executable memory
- Fix warnings from service file
  Resolves: RHEL-116594</changelog>
</package>
<package pkgid="5af2a515915627b79b1118cf1c8260c00bc816966d937c04ed68edc9dd014e42" name="freeradius-mysql" arch="x86_64">
  <version epoch="0" ver="3.2.8" rel="2.el10"/>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-5" date="1712059200">- Remove Antora docs from package
  Resolves: RHEL-31184</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-6" date="1712232000">- Remove SQL helper script from package
  Resolves: RHEL-31745</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.3-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-1" date="1720526400">- Rebase to release 3.2.5
  Resolves: RHEL-46784</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-2" date="1720612800">- Disable unsupported Perl script</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-3" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-5" date="1745323200">- Rebuild for OpenSSL 3.5
  Resolves: RHEL-88054</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-1" date="1756814400">- Rebase to release 3.2.8
  Resolves: RHEL-107671</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-2" date="1758715200">- Disable JIT if PCRE can't allocate executable memory
- Fix warnings from service file
  Resolves: RHEL-116594</changelog>
</package>
<package pkgid="aef69b18baf7148715dd32039204b283164b7d2f1dd39240a5959eecc8d2fc54" name="freeradius-perl" arch="x86_64">
  <version epoch="0" ver="3.2.8" rel="2.el10"/>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-5" date="1712059200">- Remove Antora docs from package
  Resolves: RHEL-31184</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-6" date="1712232000">- Remove SQL helper script from package
  Resolves: RHEL-31745</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.3-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-1" date="1720526400">- Rebase to release 3.2.5
  Resolves: RHEL-46784</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-2" date="1720612800">- Disable unsupported Perl script</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-3" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-5" date="1745323200">- Rebuild for OpenSSL 3.5
  Resolves: RHEL-88054</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-1" date="1756814400">- Rebase to release 3.2.8
  Resolves: RHEL-107671</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-2" date="1758715200">- Disable JIT if PCRE can't allocate executable memory
- Fix warnings from service file
  Resolves: RHEL-116594</changelog>
</package>
<package pkgid="818444bc01f754075ae93e2e591cec0e67b0bbdb9fc451756a141c0728889fde" name="freeradius-postgresql" arch="x86_64">
  <version epoch="0" ver="3.2.8" rel="2.el10"/>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-5" date="1712059200">- Remove Antora docs from package
  Resolves: RHEL-31184</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-6" date="1712232000">- Remove SQL helper script from package
  Resolves: RHEL-31745</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.3-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-1" date="1720526400">- Rebase to release 3.2.5
  Resolves: RHEL-46784</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-2" date="1720612800">- Disable unsupported Perl script</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-3" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-5" date="1745323200">- Rebuild for OpenSSL 3.5
  Resolves: RHEL-88054</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-1" date="1756814400">- Rebase to release 3.2.8
  Resolves: RHEL-107671</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-2" date="1758715200">- Disable JIT if PCRE can't allocate executable memory
- Fix warnings from service file
  Resolves: RHEL-116594</changelog>
</package>
<package pkgid="efd116858200b3526bed404a7b2a238599e307148d7224e5cca4e3daddac928d" name="freeradius-rest" arch="x86_64">
  <version epoch="0" ver="3.2.8" rel="2.el10"/>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-5" date="1712059200">- Remove Antora docs from package
  Resolves: RHEL-31184</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-6" date="1712232000">- Remove SQL helper script from package
  Resolves: RHEL-31745</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.3-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-1" date="1720526400">- Rebase to release 3.2.5
  Resolves: RHEL-46784</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-2" date="1720612800">- Disable unsupported Perl script</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-3" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-5" date="1745323200">- Rebuild for OpenSSL 3.5
  Resolves: RHEL-88054</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-1" date="1756814400">- Rebase to release 3.2.8
  Resolves: RHEL-107671</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-2" date="1758715200">- Disable JIT if PCRE can't allocate executable memory
- Fix warnings from service file
  Resolves: RHEL-116594</changelog>
</package>
<package pkgid="7e3a64513d639f2f88285449e7737c8a2393f6126e9566bdbecd18de3cc7787f" name="freeradius-sqlite" arch="x86_64">
  <version epoch="0" ver="3.2.8" rel="2.el10"/>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-5" date="1712059200">- Remove Antora docs from package
  Resolves: RHEL-31184</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-6" date="1712232000">- Remove SQL helper script from package
  Resolves: RHEL-31745</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.3-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-1" date="1720526400">- Rebase to release 3.2.5
  Resolves: RHEL-46784</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-2" date="1720612800">- Disable unsupported Perl script</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-3" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-5" date="1745323200">- Rebuild for OpenSSL 3.5
  Resolves: RHEL-88054</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-1" date="1756814400">- Rebase to release 3.2.8
  Resolves: RHEL-107671</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-2" date="1758715200">- Disable JIT if PCRE can't allocate executable memory
- Fix warnings from service file
  Resolves: RHEL-116594</changelog>
</package>
<package pkgid="a544b39b8e71ff9c6a7aadce6fae6e059b47e632573fa40f96f5066106f5a96d" name="freeradius-unixODBC" arch="x86_64">
  <version epoch="0" ver="3.2.8" rel="2.el10"/>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-5" date="1712059200">- Remove Antora docs from package
  Resolves: RHEL-31184</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-6" date="1712232000">- Remove SQL helper script from package
  Resolves: RHEL-31745</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.3-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-1" date="1720526400">- Rebase to release 3.2.5
  Resolves: RHEL-46784</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-2" date="1720612800">- Disable unsupported Perl script</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-3" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-5" date="1745323200">- Rebuild for OpenSSL 3.5
  Resolves: RHEL-88054</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-1" date="1756814400">- Rebase to release 3.2.8
  Resolves: RHEL-107671</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-2" date="1758715200">- Disable JIT if PCRE can't allocate executable memory
- Fix warnings from service file
  Resolves: RHEL-116594</changelog>
</package>
<package pkgid="fdbfd95683467d93b45717bda3d3861ad7fc0d26b92e0dec6916ef4174666b93" name="freeradius-utils" arch="x86_64">
  <version epoch="0" ver="3.2.8" rel="2.el10"/>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-5" date="1712059200">- Remove Antora docs from package
  Resolves: RHEL-31184</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.3-6" date="1712232000">- Remove SQL helper script from package
  Resolves: RHEL-31745</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.3-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-1" date="1720526400">- Rebase to release 3.2.5
  Resolves: RHEL-46784</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-2" date="1720612800">- Disable unsupported Perl script</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-3" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.5-5" date="1745323200">- Rebuild for OpenSSL 3.5
  Resolves: RHEL-88054</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-1" date="1756814400">- Rebase to release 3.2.8
  Resolves: RHEL-107671</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 3.2.8-2" date="1758715200">- Disable JIT if PCRE can't allocate executable memory
- Fix warnings from service file
  Resolves: RHEL-116594</changelog>
</package>
<package pkgid="93f818fa0910c6ecaa326c9fb0e835d32fa13a2758984dc19bb9ec677ed8181a" name="freerdp" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.7" date="1783771200">- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.8" date="1785844800">- Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624,
  CVE-2026-67289, CVE-2026-67299, CVE-2026-68580)
  Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983,
  Resolves: RHEL-223604</changelog>
  <changelog author="RHEL Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.9" date="1786968000">- Backport several CVE fixes (CVE-2026-67298, CVE-2026-73242)
  Resolves: RHEL-224050, RHEL-238931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.10" date="1787659200">- Backport several CVE fixes (CVE-2026-55194, CVE-2026-63633, CVE-2026-63652,
  CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297,
  CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241)
  Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534
  Resolves: RHEL-236056, RHEL-227734, RHEL-225225, RHEL-225097, RHEL-224250
  Resolves: RHEL-224185</changelog>
</package>
<package pkgid="39fd0af2add9db20f34ee4e1df2e5530515173dd0e99ea4b0d30bd6750fc9841" name="freerdp" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.5"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-7" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-140099</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-8" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
  Resolves: RHEL-142334, RHEL-142318</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-9" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
</package>
<package pkgid="48d47b89a2ae7a287b462eacc99bbf2c0172a21dcf6e8aff5dd6e588ff013e4d" name="freerdp" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.6"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-8" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
  Resolves: RHEL-142334, RHEL-142318</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-9" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
</package>
<package pkgid="851a35ebcbb009c9ef0c4f72369fa741b2ded85ba7a06a381d663efa11a71f2b" name="freerdp" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.7"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-9" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.7" date="1783771200">- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327</changelog>
</package>
<package pkgid="0c2915c044dbacc635148105cbbcb750491c9328cd85da5ab3681eaf383e1975" name="freerdp" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.8"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.7" date="1783771200">- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.8" date="1785844800">- Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624,
  CVE-2026-67289, CVE-2026-67299, CVE-2026-68580)
  Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983,
  Resolves: RHEL-223604</changelog>
</package>
<package pkgid="7759b6a39608c1d592e7d2bb272830d3894b532e31b64698c8e4d7702afd1b53" name="freerdp-devel" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.7" date="1783771200">- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.8" date="1785844800">- Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624,
  CVE-2026-67289, CVE-2026-67299, CVE-2026-68580)
  Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983,
  Resolves: RHEL-223604</changelog>
  <changelog author="RHEL Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.9" date="1786968000">- Backport several CVE fixes (CVE-2026-67298, CVE-2026-73242)
  Resolves: RHEL-224050, RHEL-238931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.10" date="1787659200">- Backport several CVE fixes (CVE-2026-55194, CVE-2026-63633, CVE-2026-63652,
  CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297,
  CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241)
  Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534
  Resolves: RHEL-236056, RHEL-227734, RHEL-225225, RHEL-225097, RHEL-224250
  Resolves: RHEL-224185</changelog>
</package>
<package pkgid="e085286b02f37649143d4a4641ec92ffabd126ede85c09122f89b752c7b99c14" name="freerdp-devel" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.5"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-7" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-140099</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-8" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
  Resolves: RHEL-142334, RHEL-142318</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-9" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
</package>
<package pkgid="ad5e30dcdbe34275e3241123e4e51039ed80cbc6c1ee4bde401a820fe445d5c1" name="freerdp-devel" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.6"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-8" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
  Resolves: RHEL-142334, RHEL-142318</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-9" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
</package>
<package pkgid="bc3537a6c50b2012ae003f6c4655f89946887416650f249cbbbafc2267c829dd" name="freerdp-devel" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.7"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-9" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.7" date="1783771200">- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327</changelog>
</package>
<package pkgid="abd920a3f7d7a1ba64fc842dbd7f25ccab2ec5e3548e66f0cee5f1e620dc279a" name="freerdp-devel" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.8"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.7" date="1783771200">- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.8" date="1785844800">- Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624,
  CVE-2026-67289, CVE-2026-67299, CVE-2026-68580)
  Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983,
  Resolves: RHEL-223604</changelog>
</package>
<package pkgid="e53a4f6099e5c84c485350c00acf4727c9f1afd9c8a941355401492d75e017bd" name="freerdp-libs" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.7" date="1783771200">- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.8" date="1785844800">- Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624,
  CVE-2026-67289, CVE-2026-67299, CVE-2026-68580)
  Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983,
  Resolves: RHEL-223604</changelog>
  <changelog author="RHEL Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.9" date="1786968000">- Backport several CVE fixes (CVE-2026-67298, CVE-2026-73242)
  Resolves: RHEL-224050, RHEL-238931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.10" date="1787659200">- Backport several CVE fixes (CVE-2026-55194, CVE-2026-63633, CVE-2026-63652,
  CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297,
  CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241)
  Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534
  Resolves: RHEL-236056, RHEL-227734, RHEL-225225, RHEL-225097, RHEL-224250
  Resolves: RHEL-224185</changelog>
</package>
<package pkgid="4958996b53a76f6c96b94a8c094fd00a3d81fc3dd438973151c90fd40b1a868b" name="freerdp-libs" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.5"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-7" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-140099</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-8" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
  Resolves: RHEL-142334, RHEL-142318</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-9" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
</package>
<package pkgid="c628e133dac2904cd40806ca97b8e7e30b15a2c7c35c6dc9c2d0a9b10309e5f4" name="freerdp-libs" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.6"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-8" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
  Resolves: RHEL-142334, RHEL-142318</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-9" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
</package>
<package pkgid="5ce1334accd6148bebe40e6130c24d07deffa0e3cb3126bf77d7087c8678c734" name="freerdp-libs" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.7"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-9" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.7" date="1783771200">- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327</changelog>
</package>
<package pkgid="fe8eeb67bec3933e81d724bbe57e29e74d26eefe3c42a328724fd8fd63ede9cc" name="freerdp-libs" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.8"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.7" date="1783771200">- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.8" date="1785844800">- Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624,
  CVE-2026-67289, CVE-2026-67299, CVE-2026-68580)
  Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983,
  Resolves: RHEL-223604</changelog>
</package>
<package pkgid="1b424e6d17cacaff0e67104a8cf170088777ee56d6641396813add5a56bbc800" name="freerdp-server" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.7" date="1783771200">- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.8" date="1785844800">- Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624,
  CVE-2026-67289, CVE-2026-67299, CVE-2026-68580)
  Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983,
  Resolves: RHEL-223604</changelog>
  <changelog author="RHEL Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.9" date="1786968000">- Backport several CVE fixes (CVE-2026-67298, CVE-2026-73242)
  Resolves: RHEL-224050, RHEL-238931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.10" date="1787659200">- Backport several CVE fixes (CVE-2026-55194, CVE-2026-63633, CVE-2026-63652,
  CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297,
  CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241)
  Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534
  Resolves: RHEL-236056, RHEL-227734, RHEL-225225, RHEL-225097, RHEL-224250
  Resolves: RHEL-224185</changelog>
</package>
<package pkgid="b2d8a6b8aac6f3de22f8f0524e3bf38989079fd67567a85a1c44ae5a6cc1743b" name="freerdp-server" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.5"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-7" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-140099</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-8" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
  Resolves: RHEL-142334, RHEL-142318</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-9" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
</package>
<package pkgid="34dcb4b6634ee81a6658d46754b22ca247b0681060ef9ae922a6270ab375abd2" name="freerdp-server" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.6"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-8" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
  Resolves: RHEL-142334, RHEL-142318</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-9" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
</package>
<package pkgid="caf3660ce9c05927e24c9c2cddab9bc630cb1c7b3bea5bd8c3ae5844f5338b13" name="freerdp-server" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.7"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-9" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.7" date="1783771200">- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327</changelog>
</package>
<package pkgid="23180a7e6e810f59a73d42e00cd7092849030b2b901e28a4842e7f852240bf7f" name="freerdp-server" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.8"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.7" date="1783771200">- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.8" date="1785844800">- Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624,
  CVE-2026-67289, CVE-2026-67299, CVE-2026-68580)
  Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983,
  Resolves: RHEL-223604</changelog>
</package>
<package pkgid="34c4ecddf217b6c5781650270266ef45b06d6dd57a2af845c048605703295cf5" name="freerdp2-devel" arch="x86_64">
  <version epoch="0" ver="2.11.5" rel="1.el10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.1-1" date="1693915200">- Update to 2.11.1.</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.1-2" date="1695816000">- Update to 2.11.2.</changelog>
  <changelog author="John Wiele &lt;jwiele@redhat.com&gt; - 2:2.11.2-2" date="1696852800">- Enable optional build with OpenCL support.</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.2-3" date="1698235200">- Disable FFmpeg support (#2242028).</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.4-1" date="1705060800">- Update to 2.11.4.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2.11.4-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 2.11.4-3" date="1706097600">- Split out as a compatibility package</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 2.11.4-4" date="1706270400">- Fix dependency in libs subpackage</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 2.11.4-5" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.5-1" date="1706788800">- Update to 2.11.5.</changelog>
</package>
<package pkgid="854511010f0bce0d0669926b78753d925e8c9606fa64adaad6b1c5b7f9d2205e" name="freerdp2-libs" arch="x86_64">
  <version epoch="0" ver="2.11.5" rel="1.el10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.1-1" date="1693915200">- Update to 2.11.1.</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.1-2" date="1695816000">- Update to 2.11.2.</changelog>
  <changelog author="John Wiele &lt;jwiele@redhat.com&gt; - 2:2.11.2-2" date="1696852800">- Enable optional build with OpenCL support.</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.2-3" date="1698235200">- Disable FFmpeg support (#2242028).</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.4-1" date="1705060800">- Update to 2.11.4.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2.11.4-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 2.11.4-3" date="1706097600">- Split out as a compatibility package</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 2.11.4-4" date="1706270400">- Fix dependency in libs subpackage</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 2.11.4-5" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.5-1" date="1706788800">- Update to 2.11.5.</changelog>
</package>
<package pkgid="3874a5a730006f3b3745abdad2dd6e9a79d21cf9fb4661dd8ca4e2ec10e3e3b1" name="freetype" arch="x86_64">
  <version epoch="0" ver="2.13.2" rel="8.el10"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.13.1-1" date="1687867200">- Update to 2.13.1
- Resolves: #2217137</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.13.2-1" date="1705406400">- Update to 2.13.2
- Resolves: #2217137</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.2-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.2-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.13.2-4" date="1706616000">- Remove a patch which causes FTBFS
- Resolves: #2261113</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.13.2-5" date="1707220800">- Migrated to SPDX license</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.13.2-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.13.2-7" date="1727697600">- Fix SAST Automation findings
- Resolves: RHEL-44737</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.13.2-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e13e6964fda1f23cca790b3511f839c811b2598f00d5926e33b4294e812b3fa8" name="freetype-demos" arch="x86_64">
  <version epoch="0" ver="2.13.2" rel="8.el10"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.13.1-1" date="1687867200">- Update to 2.13.1
- Resolves: #2217137</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.13.2-1" date="1705406400">- Update to 2.13.2
- Resolves: #2217137</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.2-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.2-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.13.2-4" date="1706616000">- Remove a patch which causes FTBFS
- Resolves: #2261113</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.13.2-5" date="1707220800">- Migrated to SPDX license</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.13.2-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.13.2-7" date="1727697600">- Fix SAST Automation findings
- Resolves: RHEL-44737</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.13.2-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="34df342306d21dbe43440d926c10466cfce70fca5d1e5dd418d2b75666110d21" name="freetype-devel" arch="x86_64">
  <version epoch="0" ver="2.13.2" rel="8.el10"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.13.1-1" date="1687867200">- Update to 2.13.1
- Resolves: #2217137</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.13.2-1" date="1705406400">- Update to 2.13.2
- Resolves: #2217137</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.2-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.2-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.13.2-4" date="1706616000">- Remove a patch which causes FTBFS
- Resolves: #2261113</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.13.2-5" date="1707220800">- Migrated to SPDX license</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.13.2-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.13.2-7" date="1727697600">- Fix SAST Automation findings
- Resolves: RHEL-44737</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.13.2-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7cd1f62cbdba62e5b28eb38a60a2fca9526510005e0b96aacd226fb130d41bca" name="fribidi" arch="x86_64">
  <version epoch="0" ver="1.0.14" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.12-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.0.12-4" date="1677240000">- migrated to SPDX license</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.0.13-1" date="1684324800">- New upstream release.
  Resolves: rhbz#2207796</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.13-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.13-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.13-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.0.14-2" date="1717588800">- New upstream release.
- Fix broken data in fribidi.
  Resolves: RHEL-36581</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.14-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.14-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1a0811ad29f2c5a030a98b0df60c4402c673dc3eefa322ba449c56ac1fd3db6f" name="fribidi-devel" arch="x86_64">
  <version epoch="0" ver="1.0.14" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.12-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.0.12-4" date="1677240000">- migrated to SPDX license</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.0.13-1" date="1684324800">- New upstream release.
  Resolves: rhbz#2207796</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.13-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.13-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.13-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1.0.14-2" date="1717588800">- New upstream release.
- Fix broken data in fribidi.
  Resolves: RHEL-36581</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.14-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.14-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="311d0bde1ae72aba52dc13a503a0563e6e3ddbeec234eb37e107bb88684763b4" name="frr" arch="x86_64">
  <version epoch="0" ver="10.4.1" rel="2.el10"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-4" date="1725883200">- Resolves: RHEL-56074 - frr AVCs after rebase to 10.1</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-5" date="1729684800">- Resolves: RHEL-59899 - Replace NetworkManager patch in the current version</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-7" date="1730808000">- Resolves: RHEL-54674 - Function bgpd/bgp_attr.c does not check the actual remaining stream length</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-8" date="1739188800">- Resolves: RHEL-78324 - BFD status down in FRR does not bring down BGP session between peers</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-9" date="1739275200">- Resolves: RHEL-67011 - BGP with BFD has a dropped Connection before peering established</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-10" date="1739275201">- RHEL-78638 - frr-reload.py suffers from unescaped regex sequences</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-11" date="1754481600">- Resolves: RHEL-107464 - bgp session not recovered due to incorect error no AF activated for peer</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.4.1-1" date="1765195200">- Resolves: RHEL-118620 - Rebase FRR in to version 10.4.1</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.4.1-2" date="1766145600">- Resolves: RHEL-128146 - Files under /var are not properly created in image-mode</changelog>
</package>
<package pkgid="e351cc9cbea19f59779d0b866d6155a788f3ab82496a88f7f8a1943cc97932b2" name="frr" arch="x86_64">
  <version epoch="0" ver="10.4.4" rel="1.el10_2"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-5" date="1729684800">- Resolves: RHEL-59899 - Replace NetworkManager patch in the current version</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-7" date="1730808000">- Resolves: RHEL-54674 - Function bgpd/bgp_attr.c does not check the actual remaining stream length</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-8" date="1739188800">- Resolves: RHEL-78324 - BFD status down in FRR does not bring down BGP session between peers</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-9" date="1739275200">- Resolves: RHEL-67011 - BGP with BFD has a dropped Connection before peering established</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-10" date="1739275201">- RHEL-78638 - frr-reload.py suffers from unescaped regex sequences</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-11" date="1754481600">- Resolves: RHEL-107464 - bgp session not recovered due to incorect error no AF activated for peer</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.4.1-1" date="1765195200">- Resolves: RHEL-118620 - Rebase FRR in to version 10.4.1</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.4.1-2" date="1766145600">- Resolves: RHEL-128146 - Files under /var are not properly created in image-mode</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.4.4-1" date="1779278400">- Resolves: RHEL-166035 - Bump FRR to 10.4.3 to fix EVPN problems</changelog>
</package>
<package pkgid="369085fced362cae4704a42ab24d4574265fc953708820d837fd7bed7d72da29" name="frr-selinux" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="2.el10"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-4" date="1725883200">- Resolves: RHEL-56074 - frr AVCs after rebase to 10.1</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-5" date="1729684800">- Resolves: RHEL-59899 - Replace NetworkManager patch in the current version</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-7" date="1730808000">- Resolves: RHEL-54674 - Function bgpd/bgp_attr.c does not check the actual remaining stream length</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-8" date="1739188800">- Resolves: RHEL-78324 - BFD status down in FRR does not bring down BGP session between peers</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-9" date="1739275200">- Resolves: RHEL-67011 - BGP with BFD has a dropped Connection before peering established</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-10" date="1739275201">- RHEL-78638 - frr-reload.py suffers from unescaped regex sequences</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-11" date="1754481600">- Resolves: RHEL-107464 - bgp session not recovered due to incorect error no AF activated for peer</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.4.1-1" date="1765195200">- Resolves: RHEL-118620 - Rebase FRR in to version 10.4.1</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.4.1-2" date="1766145600">- Resolves: RHEL-128146 - Files under /var are not properly created in image-mode</changelog>
</package>
<package pkgid="b787323105ab7c24a5a87d996c9103f26f4321085d417a7035849de80a23ece2" name="frr-selinux" arch="noarch">
  <version epoch="0" ver="10.4.4" rel="1.el10_2"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-5" date="1729684800">- Resolves: RHEL-59899 - Replace NetworkManager patch in the current version</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-7" date="1730808000">- Resolves: RHEL-54674 - Function bgpd/bgp_attr.c does not check the actual remaining stream length</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-8" date="1739188800">- Resolves: RHEL-78324 - BFD status down in FRR does not bring down BGP session between peers</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-9" date="1739275200">- Resolves: RHEL-67011 - BGP with BFD has a dropped Connection before peering established</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-10" date="1739275201">- RHEL-78638 - frr-reload.py suffers from unescaped regex sequences</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.1-11" date="1754481600">- Resolves: RHEL-107464 - bgp session not recovered due to incorect error no AF activated for peer</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.4.1-1" date="1765195200">- Resolves: RHEL-118620 - Rebase FRR in to version 10.4.1</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.4.1-2" date="1766145600">- Resolves: RHEL-128146 - Files under /var are not properly created in image-mode</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 10.4.4-1" date="1779278400">- Resolves: RHEL-166035 - Bump FRR to 10.4.3 to fix EVPN problems</changelog>
</package>
<package pkgid="819100b38b73de853310c97b3651df0625afd7920a26ee6b5a2937e68125b5dc" name="fstrm" arch="x86_64">
  <version epoch="0" ver="0.6.1" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 0.6.1-7" date="1687953600">- Expand licenses to SPDX identifiers</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-10" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.1-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="89edd2ea2be70f3e6b8f508f380fa81124c889d5ff6a5206c87cb5d5839b39cb" name="fstrm-devel" arch="x86_64">
  <version epoch="0" ver="0.6.1" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 0.6.1-7" date="1687953600">- Expand licenses to SPDX identifiers</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-10" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.1-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c758018fc76714689a3586e82a9f7bf0f7865d20c77088412f9e42ff33fa40ad" name="fstrm-doc" arch="noarch">
  <version epoch="0" ver="0.6.1" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 0.6.1-7" date="1687953600">- Expand licenses to SPDX identifiers</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-10" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.1-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8f90731bfdb71d1a83024fcbd803c47d70885553d9d90f172bb3530b584f5705" name="fstrm-utils" arch="x86_64">
  <version epoch="0" ver="0.6.1" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 0.6.1-7" date="1687953600">- Expand licenses to SPDX identifiers</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.1-10" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.1-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d2c4d0a8bc5b9c7437a8c561a2309d4f0dbfabc4ccc38e2e14f19a42f3dbf65a" name="ftp" arch="x86_64">
  <version epoch="0" ver="0.17" rel="97.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17-91" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 0.17-92" date="1678968000">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17-93" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17-94" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17-95" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.17-96" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.17-97" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5a770b6ca650f906e34b8cfb9919c17eccf46ebcb87ec97c4a03016b676eaaed" name="fuse" arch="x86_64">
  <version epoch="0" ver="2.9.9" rel="25.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.9-17" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 2.9.9-18" date="1696334400">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.9-19" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.9-20" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.9-21" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 2.9.9-21.gating_test1" date="1715688000">- Build to test gating
- Related: RHELMISC-3921</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.9.9-22.gating_test1" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.9.9-23.gating_test1" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 2.9.9-24" date="1732881600">- Fix the release section of name
- Related: RHEL-69027</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 2.9.9-25" date="1733140800">- Bump relaese to have a proper build
- Related: RHEL-69027</changelog>
</package>
<package pkgid="9daf2175c9550ce29ee4bb43f67b9babf280b7952605b4822abbdc9f963e3b33" name="fuse-common" arch="x86_64">
  <version epoch="0" ver="3.16.2" rel="5.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.14.1-2" date="1687780800">- Force fuse3 and fuse3-libs versions to be identical
  https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.14.1-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.16.1-1" date="1691582400">- update to 3.16.1
- Add tarball signature verification</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.16.1-2" date="1692100800">- Skip tarball signature verification in RHEL builds</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.16.1-3" date="1696334400">- Convert License tag to SPDX format</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.16.2-1" date="1697198400">- Rebase to upstream version 3.16.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.16.2-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.16.2-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.16.2-4" date="1718280000">- Fix missing fuse_loop_cfg_destroy()</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.16.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="204103eb2e300f49189b98534c43cfd4fb3c99991b933a0c6393b1ff2a75659e" name="fuse-devel" arch="x86_64">
  <version epoch="0" ver="2.9.9" rel="25.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.9-17" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 2.9.9-18" date="1696334400">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.9-19" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.9-20" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.9-21" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 2.9.9-21.gating_test1" date="1715688000">- Build to test gating
- Related: RHELMISC-3921</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.9.9-22.gating_test1" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.9.9-23.gating_test1" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 2.9.9-24" date="1732881600">- Fix the release section of name
- Related: RHEL-69027</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 2.9.9-25" date="1733140800">- Bump relaese to have a proper build
- Related: RHEL-69027</changelog>
</package>
<package pkgid="ee77e335e2c1863a33bf3080c1b1e6ae2acb0f2106cf06811cd9a60228a5d6e6" name="fuse-libs" arch="x86_64">
  <version epoch="0" ver="2.9.9" rel="25.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.9-17" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 2.9.9-18" date="1696334400">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.9-19" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.9-20" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.9-21" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 2.9.9-21.gating_test1" date="1715688000">- Build to test gating
- Related: RHELMISC-3921</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.9.9-22.gating_test1" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.9.9-23.gating_test1" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 2.9.9-24" date="1732881600">- Fix the release section of name
- Related: RHEL-69027</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 2.9.9-25" date="1733140800">- Bump relaese to have a proper build
- Related: RHEL-69027</changelog>
</package>
<package pkgid="00e90c817955fdf550c7cdffeb5c4588db63844b96012c9f535908b9044eb844" name="fuse-overlayfs" arch="x86_64">
  <version epoch="0" ver="1.16" rel="1.el10_1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.14-1" date="1721044800">- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.14
- Related: RHEL-39410</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="JasenChao &lt;JasenChao@gmail.com&gt; - 1.14-3" date="1741953600">- Add riscv64 arch</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.15-1" date="1746792000">- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.15
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.16-1" date="1763121600">- update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.16
- fixes "Update fuse-overlayfs to 1.16 [rhel-10.1.z]"
- Resolves: RHEL-128522</changelog>
</package>
<package pkgid="34275ecec64e60ea3b8680022f2f68cb56d08611700232b4e5559b897dae8dce" name="fuse3" arch="x86_64">
  <version epoch="0" ver="3.16.2" rel="5.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.14.1-2" date="1687780800">- Force fuse3 and fuse3-libs versions to be identical
  https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.14.1-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.16.1-1" date="1691582400">- update to 3.16.1
- Add tarball signature verification</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.16.1-2" date="1692100800">- Skip tarball signature verification in RHEL builds</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.16.1-3" date="1696334400">- Convert License tag to SPDX format</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.16.2-1" date="1697198400">- Rebase to upstream version 3.16.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.16.2-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.16.2-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.16.2-4" date="1718280000">- Fix missing fuse_loop_cfg_destroy()</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.16.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="939ab338470b1f8c7e036d1a8ea1b3f4cf875d7de3ec832fe6b7756aeca65fe3" name="fuse3-devel" arch="x86_64">
  <version epoch="0" ver="3.16.2" rel="5.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.14.1-2" date="1687780800">- Force fuse3 and fuse3-libs versions to be identical
  https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.14.1-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.16.1-1" date="1691582400">- update to 3.16.1
- Add tarball signature verification</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.16.1-2" date="1692100800">- Skip tarball signature verification in RHEL builds</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.16.1-3" date="1696334400">- Convert License tag to SPDX format</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.16.2-1" date="1697198400">- Rebase to upstream version 3.16.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.16.2-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.16.2-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.16.2-4" date="1718280000">- Fix missing fuse_loop_cfg_destroy()</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.16.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="32cfec04b8a2a6002e4e1bd9d50779efe4925bd6f42fb8d2d3da4d6061294e55" name="fuse3-libs" arch="x86_64">
  <version epoch="0" ver="3.16.2" rel="5.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.14.1-2" date="1687780800">- Force fuse3 and fuse3-libs versions to be identical
  https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.14.1-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.16.1-1" date="1691582400">- update to 3.16.1
- Add tarball signature verification</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.16.1-2" date="1692100800">- Skip tarball signature verification in RHEL builds</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.16.1-3" date="1696334400">- Convert License tag to SPDX format</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.16.2-1" date="1697198400">- Rebase to upstream version 3.16.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.16.2-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.16.2-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.16.2-4" date="1718280000">- Fix missing fuse_loop_cfg_destroy()</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.16.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="145e60f8328c30cfbb50c13df54629a5af53b57b1f756ea1bd8d084f41f91cb0" name="fusesource-pom" arch="noarch">
  <version epoch="0" ver="1.12" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-13" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.12-14" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-15" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.12-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.12-18" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.12-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bf0a9751b0f9930db0db03f93a3990bceb6ce59b055026c76ba1004ae0de59d8" name="fwupd" arch="x86_64">
  <version epoch="0" ver="2.0.19" rel="4.1.el10_2"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.26-1" date="1728993600">- Rebase to get hardware support for CERTPX-13842</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.26-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.26-3" date="1734350400">- Set efi_os_dir to 'redhat', rather than using 'rhel'</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.29-1" date="1742299200">- Rebase to latest upstream version.</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.31-1" date="1752235200">- Rebase to latest upstream version</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.9.31-2" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.0.19-1" date="1766145600">- Rebase to latest upstream version</changelog>
  <changelog author="Louis Abel &lt;label@rockylinux.org&gt; - 2.0.19-2" date="1766491200">- Ensure valgrind is disabled on arches without valgrind</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.0.19-3" date="1773057600">- Use the accidentally-dropped efi_os_dir</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.0.19-4.1" date="1773057601">- bump release to overcome "GenericError: Target build already exists"</changelog>
</package>
<package pkgid="e7c8eaab3e8446cadf218ce64d14622a12f679ef1f8531d45ff5d0596a8fa9ea" name="fwupd-devel" arch="x86_64">
  <version epoch="0" ver="2.0.19" rel="4.1.el10_2"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.26-1" date="1728993600">- Rebase to get hardware support for CERTPX-13842</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.26-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.26-3" date="1734350400">- Set efi_os_dir to 'redhat', rather than using 'rhel'</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.29-1" date="1742299200">- Rebase to latest upstream version.</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.31-1" date="1752235200">- Rebase to latest upstream version</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.9.31-2" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.0.19-1" date="1766145600">- Rebase to latest upstream version</changelog>
  <changelog author="Louis Abel &lt;label@rockylinux.org&gt; - 2.0.19-2" date="1766491200">- Ensure valgrind is disabled on arches without valgrind</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.0.19-3" date="1773057600">- Use the accidentally-dropped efi_os_dir</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.0.19-4.1" date="1773057601">- bump release to overcome "GenericError: Target build already exists"</changelog>
</package>
<package pkgid="64dcc88733ca88f32156c9d4ba663bcd0e43ae1aef3859dbad0af4f181b3cb67" name="fwupd-efi" arch="x86_64">
  <version epoch="0" ver="1.6" rel="7.el10_2"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.6-1" date="1717416000">- Rebase to latest upstream version</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.6-4" date="1762948800">- Do not sign with the test certificate</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.6-5" date="1768305600">- Sign using the correct certs for CentOS</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.6-6" date="1770811200">- Adding new UMB message to send within gating so we can trigger based on
  it in our Jenkins</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.6-7" date="1770811201">- Sign using the correct certs for CentOS</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.6-7" date="1770811202">- Use system-sb-certs for certificates
- Patch macros to generate a proper sbat</changelog>
</package>
<package pkgid="0627ba457fef88ec4bc156e182cd671685ab29124ed8985913e07dda9773d00e" name="fwupd-efi" arch="x86_64">
  <version epoch="0" ver="1.8" rel="1.el10_2.rocky.0.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.6-4" date="1762948800">- Do not sign with the test certificate</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.6-5" date="1768305600">- Sign using the correct certs for CentOS</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.6-6" date="1770811200">- Adding new UMB message to send within gating so we can trigger based on
  it in our Jenkins</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.6-7" date="1770811201">- Sign using the correct certs for CentOS</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.8-1" date="1783080000">- Sign using the new 803 fwupd-specific certs</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.8-1.rocky.0.1" date="1784462400">- Bump release for new certificates
- Use system-sb-certs for certificates
- Patch macros to generate a proper sbat</changelog>
</package>
<package pkgid="a16bfb9c3d8a09cebf369f6bf9cd28f67dd15fda7705521351b5ed65442cae0b" name="fwupd-plugin-flashrom" arch="x86_64">
  <version epoch="0" ver="2.0.19" rel="4.1.el10_2"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.26-1" date="1728993600">- Rebase to get hardware support for CERTPX-13842</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.26-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.26-3" date="1734350400">- Set efi_os_dir to 'redhat', rather than using 'rhel'</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.29-1" date="1742299200">- Rebase to latest upstream version.</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.31-1" date="1752235200">- Rebase to latest upstream version</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.9.31-2" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.0.19-1" date="1766145600">- Rebase to latest upstream version</changelog>
  <changelog author="Louis Abel &lt;label@rockylinux.org&gt; - 2.0.19-2" date="1766491200">- Ensure valgrind is disabled on arches without valgrind</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.0.19-3" date="1773057600">- Use the accidentally-dropped efi_os_dir</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.0.19-4.1" date="1773057601">- bump release to overcome "GenericError: Target build already exists"</changelog>
</package>
<package pkgid="ee013f2c8e6fb49d345e8cde06694b01171441ff4e91952de31bcbb1c9124629" name="fwupd-plugin-uefi-capsule-data" arch="x86_64">
  <version epoch="0" ver="2.0.19" rel="4.1.el10_2"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.26-1" date="1728993600">- Rebase to get hardware support for CERTPX-13842</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.26-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.26-3" date="1734350400">- Set efi_os_dir to 'redhat', rather than using 'rhel'</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.29-1" date="1742299200">- Rebase to latest upstream version.</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.31-1" date="1752235200">- Rebase to latest upstream version</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.9.31-2" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.0.19-1" date="1766145600">- Rebase to latest upstream version</changelog>
  <changelog author="Louis Abel &lt;label@rockylinux.org&gt; - 2.0.19-2" date="1766491200">- Ensure valgrind is disabled on arches without valgrind</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.0.19-3" date="1773057600">- Use the accidentally-dropped efi_os_dir</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.0.19-4.1" date="1773057601">- bump release to overcome "GenericError: Target build already exists"</changelog>
</package>
<package pkgid="b1b1de4a369f7272a9e45d5ccbf13817ab11aecd22ede34ee45082b215359664" name="fwupd-tests" arch="x86_64">
  <version epoch="0" ver="2.0.19" rel="4.1.el10_2"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.26-1" date="1728993600">- Rebase to get hardware support for CERTPX-13842</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.26-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.26-3" date="1734350400">- Set efi_os_dir to 'redhat', rather than using 'rhel'</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.29-1" date="1742299200">- Rebase to latest upstream version.</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.9.31-1" date="1752235200">- Rebase to latest upstream version</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.9.31-2" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.0.19-1" date="1766145600">- Rebase to latest upstream version</changelog>
  <changelog author="Louis Abel &lt;label@rockylinux.org&gt; - 2.0.19-2" date="1766491200">- Ensure valgrind is disabled on arches without valgrind</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.0.19-3" date="1773057600">- Use the accidentally-dropped efi_os_dir</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.0.19-4.1" date="1773057601">- bump release to overcome "GenericError: Target build already exists"</changelog>
</package>
<package pkgid="59169e29decce2afc440d3497fa106a7b5f06d05c6fb935cde2f5b1a578be499" name="fxload" arch="x86_64">
  <version epoch="0" ver="2008_10_13" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2008_10_13-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2008_10_13-24" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2008_10_13-25" date="1694088000">- SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2008_10_13-26" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2008_10_13-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2008_10_13-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2008_10_13-29" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2008_10_13-30" date="1734523200">- use /usr/sbin directory</changelog>
</package>
<package pkgid="565f754048cc0d6f85352fa17c08d9f153c4b52e8fee236660df623195bb8a21" name="galera" arch="x86_64">
  <version epoch="0" ver="26.4.25" rel="1.el10_2"/>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.18-3" date="1717934400">- Bump release for package rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 26.4.18-4" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.19-1" date="1724068800">- Rebase to 26.4.19</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 26.4.19-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.21-1" date="1738756800">- Rebase to 26.4.21</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 26.4.21-2" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.22-1" date="1753876800">- Rebase to 26.4.22</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.23-1" date="1754654400">- Rebase to 26.4.23</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.24-1" date="1767700800">- Rebase to 26.4.24</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.25-1" date="1770552000">- Rebased to 26.4.25</changelog>
</package>
<package pkgid="b2a4f5dd0414745bde19d00c2ec3a2c5966309daaf804d5ffba2737f1d27a228" name="galera" arch="x86_64">
  <version epoch="0" ver="26.4.27" rel="1.el10_2"/>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.19-1" date="1724068800">- Rebase to 26.4.19</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 26.4.19-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.21-1" date="1738756800">- Rebase to 26.4.21</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 26.4.21-2" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.22-1" date="1753876800">- Rebase to 26.4.22</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.23-1" date="1754654400">- Rebase to 26.4.23</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.24-1" date="1767700800">- Rebase to 26.4.24</changelog>
  <changelog author="Michal Schorm &lt;mschorm@redhat.com&gt; - 26.4.25-1" date="1770552000">- Rebased to 26.4.25</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 26.4.26-1" date="1779710400">- Rebased to 26.4.26</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 26.4.27-1" date="1780488000">- Rebased to 26.4.27</changelog>
</package>
<package pkgid="e5c1dc87652328b0c0851980734576b0cc472aad2beb6eac1053f8a1814d4622" name="gawk" arch="x86_64">
  <version epoch="0" ver="5.3.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.1-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 5.1.1-6" date="1681214400">- migrate to SPDX license format</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.2.2-1" date="1684756800">- New upstream release - 5.2.2
- Disable the pma test for now (it breaks the build right now).
Resolves rhbz#2124101</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.2-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.3.0-1" date="1704974400">- New upstream release - 5.3.0
- libsigsegv should no longer be needed for the build
Resolves rhbz#2247650</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.3.0-4" date="1724068800">- Rebuild with enabled gating
Resolves RHEL-52115</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="be5528326fdc9eac8ea60fe9a88886e13e1d564a99e322fbc4270a0ed9fa1ab7" name="gawk-all-langpacks" arch="x86_64">
  <version epoch="0" ver="5.3.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.1-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 5.1.1-6" date="1681214400">- migrate to SPDX license format</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.2.2-1" date="1684756800">- New upstream release - 5.2.2
- Disable the pma test for now (it breaks the build right now).
Resolves rhbz#2124101</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.2-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.3.0-1" date="1704974400">- New upstream release - 5.3.0
- libsigsegv should no longer be needed for the build
Resolves rhbz#2247650</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.3.0-4" date="1724068800">- Rebuild with enabled gating
Resolves RHEL-52115</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="960a3b03536d0a51d6aa91b6c9f249af0a46acde8782b196ac9a71f2056be670" name="gawk-devel" arch="x86_64">
  <version epoch="0" ver="5.3.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.1-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 5.1.1-6" date="1681214400">- migrate to SPDX license format</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.2.2-1" date="1684756800">- New upstream release - 5.2.2
- Disable the pma test for now (it breaks the build right now).
Resolves rhbz#2124101</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.2-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.3.0-1" date="1704974400">- New upstream release - 5.3.0
- libsigsegv should no longer be needed for the build
Resolves rhbz#2247650</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.3.0-4" date="1724068800">- Rebuild with enabled gating
Resolves RHEL-52115</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5e2ee5fc64a69e41352ffc54955b89da02d03443e8f6d6aa04e0bbaec3b3aabd" name="gawk-doc" arch="noarch">
  <version epoch="0" ver="5.3.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.1-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 5.1.1-6" date="1681214400">- migrate to SPDX license format</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.2.2-1" date="1684756800">- New upstream release - 5.2.2
- Disable the pma test for now (it breaks the build right now).
Resolves rhbz#2124101</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.2-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.3.0-1" date="1704974400">- New upstream release - 5.3.0
- libsigsegv should no longer be needed for the build
Resolves rhbz#2247650</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.3.0-4" date="1724068800">- Rebuild with enabled gating
Resolves RHEL-52115</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d094914644572e00c866e694af7cf5e575cb9ca1697c2e9b04586e1ba794f926" name="gcab" arch="x86_64">
  <version epoch="0" ver="1.6" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.6-1" date="1688990400">- new version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.6-3" date="1690977600">- Add MinGW packages.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fdbe80a3814b1826f0e8fd6e8b458f7909bce742924f6095a300e078c594a888" name="gcc" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="3c7fdc3cef30a2f293e6f02e4fbf71019e9ff6db43e00e04d11127ea4363f6c4" name="gcc-c++" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="37c96860071b3c7bbd933e56f917dfdf0629f98206aa3bc100347c7b280f0bca" name="gcc-gdb-plugin" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="b500583c16e32a1ba5c6019f60771564d1cc79860001b3503ded914e72cd0758" name="gcc-gfortran" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="7ded150c5bc4042e38105244ae3b438a9324c85571ec96cb291fc0180bba5d04" name="gcc-offload-amdgcn" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="e6a90c60cd3329226530e586fbcda897d1bbeee55fdebcec219001ace4bfbae0" name="gcc-offload-nvptx" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="c0c9dffdf1198f0c5932c817c8c2cede0b0ea0c966c33c270f4f7d858be2625d" name="gcc-plugin-annobin" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="2ac62f7cf563d205325cdd061615d163e3f670459f5b8e770fcf9b5fe5c8034b" name="gcc-plugin-devel" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="fee7022d209842875c2d490a8551c2d56a15c92fa09051c896e83c3b6aa78397" name="gcc-toolset-15" arch="x86_64">
  <version epoch="0" ver="15.0" rel="11.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-2" date="1746446400">- Split out a devel package to break the dependency look with gts-gcc and
  gts-binutils.</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-3" date="1746705600">- Drop the sudo wrapper script.</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-4" date="1747310400">- New script to replace scl-enable (RHEL-88743).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-5" date="1749038400">- Fix quoting and other issues in gcc-toolset-env script (RHEL-94760)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-6" date="1749124800">- Split out scripts into a -runtime package on RHEL10 (RHEL-94841)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-7" date="1749556800">- Man page and documentation updates (RHEL-95996)
- Support scl-style quoted invocation (RHEL-94760)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-8" date="1749643200">- Fix typo in gcc-toolset-env (RHEL-94760)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-9" date="1750420800">- Compress man page and fix its name (RHEL-96490)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-10" date="1751544000">- Bump for rebuild (RHEL-96490)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-11" date="1751544001">- Bump again for rebuild (RHEL-96490)</changelog>
</package>
<package pkgid="e32ff91b2e6766c189f9cb515fbb8350755a3ccb37f0db8c13bcd6d2860c3f2d" name="gcc-toolset-15-binutils" arch="x86_64">
  <version epoch="0" ver="2.44" rel="8.el10"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-1" date="1746532800">- Initial commit: Import Fedora 42 binutils to GTS-15.  (RHELPLAN-172023) (RHEL-81745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-2" date="1746705600">- Switch back to using SCL macros.</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.44-3" date="1747051200">- Avoid using SCL for c10s.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-4" date="1750766400">- Use the new gcc-toolset-15-runtime package.  (RHEL-94763)
- Add in the temporary fix for ppc64 gcc/glibc generating bad code.  (RHEL-49348)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-5" date="1753185600">- Disable bootstrapping.  (RHEL-94763)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-6" date="1754481600">- Rebuild with glibc fixed for CVE-2025-5702.  (RHEL-100160)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-7" date="1754913600">- Remove uneeded glibc/powerpc patch.  (RHEL-100160)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-8" date="1764072000">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-130615)</changelog>
</package>
<package pkgid="b9b633c7ae39bd2fdeb759c8e72e6192bddda7b40058a36ee07fb6516c42736f" name="gcc-toolset-15-binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.44" rel="8.el10"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-1" date="1746532800">- Initial commit: Import Fedora 42 binutils to GTS-15.  (RHELPLAN-172023) (RHEL-81745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-2" date="1746705600">- Switch back to using SCL macros.</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.44-3" date="1747051200">- Avoid using SCL for c10s.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-4" date="1750766400">- Use the new gcc-toolset-15-runtime package.  (RHEL-94763)
- Add in the temporary fix for ppc64 gcc/glibc generating bad code.  (RHEL-49348)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-5" date="1753185600">- Disable bootstrapping.  (RHEL-94763)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-6" date="1754481600">- Rebuild with glibc fixed for CVE-2025-5702.  (RHEL-100160)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-7" date="1754913600">- Remove uneeded glibc/powerpc patch.  (RHEL-100160)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-8" date="1764072000">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-130615)</changelog>
</package>
<package pkgid="d26c24d4da98e257fbd4fca217935f5f702b314ea864edbb2e69ed25d50d8c1e" name="gcc-toolset-15-binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.44" rel="8.el10"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-1" date="1746532800">- Initial commit: Import Fedora 42 binutils to GTS-15.  (RHELPLAN-172023) (RHEL-81745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-2" date="1746705600">- Switch back to using SCL macros.</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.44-3" date="1747051200">- Avoid using SCL for c10s.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-4" date="1750766400">- Use the new gcc-toolset-15-runtime package.  (RHEL-94763)
- Add in the temporary fix for ppc64 gcc/glibc generating bad code.  (RHEL-49348)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-5" date="1753185600">- Disable bootstrapping.  (RHEL-94763)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-6" date="1754481600">- Rebuild with glibc fixed for CVE-2025-5702.  (RHEL-100160)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-7" date="1754913600">- Remove uneeded glibc/powerpc patch.  (RHEL-100160)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-8" date="1764072000">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-130615)</changelog>
</package>
<package pkgid="22c0c65c83e0af2cd603f549b50371ed4d5b56ac1678af23d3db8e8c86294c3e" name="gcc-toolset-15-binutils-gprofng" arch="x86_64">
  <version epoch="0" ver="2.44" rel="8.el10"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-1" date="1746532800">- Initial commit: Import Fedora 42 binutils to GTS-15.  (RHELPLAN-172023) (RHEL-81745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-2" date="1746705600">- Switch back to using SCL macros.</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.44-3" date="1747051200">- Avoid using SCL for c10s.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-4" date="1750766400">- Use the new gcc-toolset-15-runtime package.  (RHEL-94763)
- Add in the temporary fix for ppc64 gcc/glibc generating bad code.  (RHEL-49348)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-5" date="1753185600">- Disable bootstrapping.  (RHEL-94763)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-6" date="1754481600">- Rebuild with glibc fixed for CVE-2025-5702.  (RHEL-100160)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-7" date="1754913600">- Remove uneeded glibc/powerpc patch.  (RHEL-100160)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.44-8" date="1764072000">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-130615)</changelog>
</package>
<package pkgid="3d10f0f0206dcd85449b6a2bb5f0cf4fbda9cc7feae2679b332c82b4a5cf0ab4" name="gcc-toolset-15-devel" arch="x86_64">
  <version epoch="0" ver="15.0" rel="11.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-2" date="1746446400">- Split out a devel package to break the dependency look with gts-gcc and
  gts-binutils.</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-3" date="1746705600">- Drop the sudo wrapper script.</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-4" date="1747310400">- New script to replace scl-enable (RHEL-88743).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-5" date="1749038400">- Fix quoting and other issues in gcc-toolset-env script (RHEL-94760)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-6" date="1749124800">- Split out scripts into a -runtime package on RHEL10 (RHEL-94841)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-7" date="1749556800">- Man page and documentation updates (RHEL-95996)
- Support scl-style quoted invocation (RHEL-94760)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-8" date="1749643200">- Fix typo in gcc-toolset-env (RHEL-94760)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-9" date="1750420800">- Compress man page and fix its name (RHEL-96490)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-10" date="1751544000">- Bump for rebuild (RHEL-96490)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-11" date="1751544001">- Bump again for rebuild (RHEL-96490)</changelog>
</package>
<package pkgid="10308a059d118aca4b25c07f906c0ddad6725bb8cb55d78fe99a2b4f9e72580a" name="gcc-toolset-15-gcc" arch="x86_64">
  <version epoch="0" ver="15.2.1" rel="7.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95595)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.2" date="1749729600">- Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84680)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.3" date="1750075200">- ship libstdc++.modules.json (RHEL-97043)
- configure with --with-long-double-format=ieee (RHEL-97055)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.4" date="1750420800">- Require gcc-toolset-N-runtime (RHEL-94672)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1753876800">- Drop the workaround for CVE-2025-5702 (RHEL-100161)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.6" date="1757419200">- Fix glibc32 build dependency (RHEL-113183)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116507)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
</package>
<package pkgid="140fa4c926b52ae2cc970ff081b273951da8f3684e3c1b41bf522cc5440f8f1f" name="gcc-toolset-15-gcc-c++" arch="x86_64">
  <version epoch="0" ver="15.2.1" rel="7.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95595)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.2" date="1749729600">- Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84680)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.3" date="1750075200">- ship libstdc++.modules.json (RHEL-97043)
- configure with --with-long-double-format=ieee (RHEL-97055)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.4" date="1750420800">- Require gcc-toolset-N-runtime (RHEL-94672)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1753876800">- Drop the workaround for CVE-2025-5702 (RHEL-100161)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.6" date="1757419200">- Fix glibc32 build dependency (RHEL-113183)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116507)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
</package>
<package pkgid="8a8a41c98922ce593d5527f661b6943852697d07b4a13aea1e58b7d73a83e3b4" name="gcc-toolset-15-gcc-gfortran" arch="x86_64">
  <version epoch="0" ver="15.2.1" rel="7.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95595)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.2" date="1749729600">- Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84680)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.3" date="1750075200">- ship libstdc++.modules.json (RHEL-97043)
- configure with --with-long-double-format=ieee (RHEL-97055)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.4" date="1750420800">- Require gcc-toolset-N-runtime (RHEL-94672)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1753876800">- Drop the workaround for CVE-2025-5702 (RHEL-100161)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.6" date="1757419200">- Fix glibc32 build dependency (RHEL-113183)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116507)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
</package>
<package pkgid="e23de9213f52938a97e2597557fb26bb0775ba06dfd6e6fb0cab5b75feb659e3" name="gcc-toolset-15-gcc-plugin-annobin" arch="x86_64">
  <version epoch="0" ver="15.2.1" rel="7.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95595)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.2" date="1749729600">- Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84680)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.3" date="1750075200">- ship libstdc++.modules.json (RHEL-97043)
- configure with --with-long-double-format=ieee (RHEL-97055)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.4" date="1750420800">- Require gcc-toolset-N-runtime (RHEL-94672)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1753876800">- Drop the workaround for CVE-2025-5702 (RHEL-100161)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.6" date="1757419200">- Fix glibc32 build dependency (RHEL-113183)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116507)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
</package>
<package pkgid="32e05bed7f2a4b0977d266d9422bffbc695d7aab888fb7a4e35a140e0635becb" name="gcc-toolset-15-gcc-plugin-devel" arch="x86_64">
  <version epoch="0" ver="15.2.1" rel="7.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95595)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.2" date="1749729600">- Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84680)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.3" date="1750075200">- ship libstdc++.modules.json (RHEL-97043)
- configure with --with-long-double-format=ieee (RHEL-97055)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.4" date="1750420800">- Require gcc-toolset-N-runtime (RHEL-94672)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1753876800">- Drop the workaround for CVE-2025-5702 (RHEL-100161)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.6" date="1757419200">- Fix glibc32 build dependency (RHEL-113183)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116507)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
</package>
<package pkgid="8ffa7800326bac51929d6e97776213090d5eb6464251a8dd21e5db27d4fa8766" name="gcc-toolset-15-libasan-devel" arch="x86_64">
  <version epoch="0" ver="15.2.1" rel="7.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95595)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.2" date="1749729600">- Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84680)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.3" date="1750075200">- ship libstdc++.modules.json (RHEL-97043)
- configure with --with-long-double-format=ieee (RHEL-97055)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.4" date="1750420800">- Require gcc-toolset-N-runtime (RHEL-94672)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1753876800">- Drop the workaround for CVE-2025-5702 (RHEL-100161)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.6" date="1757419200">- Fix glibc32 build dependency (RHEL-113183)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116507)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
</package>
<package pkgid="92cfd5482bd897a730bd2ca0ada6bda49c2cc939cae8e4152f126b30a43eda60" name="gcc-toolset-15-libatomic-devel" arch="x86_64">
  <version epoch="0" ver="15.2.1" rel="7.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95595)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.2" date="1749729600">- Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84680)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.3" date="1750075200">- ship libstdc++.modules.json (RHEL-97043)
- configure with --with-long-double-format=ieee (RHEL-97055)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.4" date="1750420800">- Require gcc-toolset-N-runtime (RHEL-94672)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1753876800">- Drop the workaround for CVE-2025-5702 (RHEL-100161)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.6" date="1757419200">- Fix glibc32 build dependency (RHEL-113183)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116507)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
</package>
<package pkgid="12b8eb546d1db876539cc83c2669f11153c599f44f820f5a5d7cbda2d9aa6c91" name="gcc-toolset-15-libgccjit" arch="x86_64">
  <version epoch="0" ver="15.2.1" rel="7.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95595)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.2" date="1749729600">- Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84680)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.3" date="1750075200">- ship libstdc++.modules.json (RHEL-97043)
- configure with --with-long-double-format=ieee (RHEL-97055)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.4" date="1750420800">- Require gcc-toolset-N-runtime (RHEL-94672)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1753876800">- Drop the workaround for CVE-2025-5702 (RHEL-100161)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.6" date="1757419200">- Fix glibc32 build dependency (RHEL-113183)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116507)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
</package>
<package pkgid="7d18c073198bd1355f2e813f4971310ec23783786af9b3ea43d53e05cc28b4d1" name="gcc-toolset-15-libgccjit-devel" arch="x86_64">
  <version epoch="0" ver="15.2.1" rel="7.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95595)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.2" date="1749729600">- Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84680)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.3" date="1750075200">- ship libstdc++.modules.json (RHEL-97043)
- configure with --with-long-double-format=ieee (RHEL-97055)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.4" date="1750420800">- Require gcc-toolset-N-runtime (RHEL-94672)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1753876800">- Drop the workaround for CVE-2025-5702 (RHEL-100161)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.6" date="1757419200">- Fix glibc32 build dependency (RHEL-113183)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116507)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
</package>
<package pkgid="3d1fd3452929873832723b723419950c7827dcd1cacea1951bafea9b248b889f" name="gcc-toolset-15-libhwasan-devel" arch="x86_64">
  <version epoch="0" ver="15.2.1" rel="7.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95595)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.2" date="1749729600">- Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84680)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.3" date="1750075200">- ship libstdc++.modules.json (RHEL-97043)
- configure with --with-long-double-format=ieee (RHEL-97055)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.4" date="1750420800">- Require gcc-toolset-N-runtime (RHEL-94672)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1753876800">- Drop the workaround for CVE-2025-5702 (RHEL-100161)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.6" date="1757419200">- Fix glibc32 build dependency (RHEL-113183)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116507)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
</package>
<package pkgid="837fb4bc83d8ff88abe923b30e09da0dc54381e58038d1b7f7b446bc1e12a3e0" name="gcc-toolset-15-libitm-devel" arch="x86_64">
  <version epoch="0" ver="15.2.1" rel="7.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95595)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.2" date="1749729600">- Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84680)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.3" date="1750075200">- ship libstdc++.modules.json (RHEL-97043)
- configure with --with-long-double-format=ieee (RHEL-97055)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.4" date="1750420800">- Require gcc-toolset-N-runtime (RHEL-94672)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1753876800">- Drop the workaround for CVE-2025-5702 (RHEL-100161)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.6" date="1757419200">- Fix glibc32 build dependency (RHEL-113183)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116507)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
</package>
<package pkgid="fe32f0c57170082bd208b11bca2988704cecb4c43bea00754872537b619eb8dc" name="gcc-toolset-15-liblsan-devel" arch="x86_64">
  <version epoch="0" ver="15.2.1" rel="7.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95595)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.2" date="1749729600">- Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84680)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.3" date="1750075200">- ship libstdc++.modules.json (RHEL-97043)
- configure with --with-long-double-format=ieee (RHEL-97055)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.4" date="1750420800">- Require gcc-toolset-N-runtime (RHEL-94672)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1753876800">- Drop the workaround for CVE-2025-5702 (RHEL-100161)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.6" date="1757419200">- Fix glibc32 build dependency (RHEL-113183)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116507)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
</package>
<package pkgid="89a87fc02744d6386174f4f8523e9cec95b5dec12604280b7b373c47c4575644" name="gcc-toolset-15-libquadmath-devel" arch="x86_64">
  <version epoch="0" ver="15.2.1" rel="7.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95595)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.2" date="1749729600">- Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84680)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.3" date="1750075200">- ship libstdc++.modules.json (RHEL-97043)
- configure with --with-long-double-format=ieee (RHEL-97055)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.4" date="1750420800">- Require gcc-toolset-N-runtime (RHEL-94672)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1753876800">- Drop the workaround for CVE-2025-5702 (RHEL-100161)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.6" date="1757419200">- Fix glibc32 build dependency (RHEL-113183)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116507)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
</package>
<package pkgid="9e3f737bafffbe9452832a5985957bee84b554f8a5d6ba96cfa53116723cbfa6" name="gcc-toolset-15-libstdc++-devel" arch="x86_64">
  <version epoch="0" ver="15.2.1" rel="7.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95595)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.2" date="1749729600">- Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84680)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.3" date="1750075200">- ship libstdc++.modules.json (RHEL-97043)
- configure with --with-long-double-format=ieee (RHEL-97055)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.4" date="1750420800">- Require gcc-toolset-N-runtime (RHEL-94672)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1753876800">- Drop the workaround for CVE-2025-5702 (RHEL-100161)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.6" date="1757419200">- Fix glibc32 build dependency (RHEL-113183)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116507)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
</package>
<package pkgid="26aa8361031ddd81786c69a4e601dbf8c2f2dc2c636da4ec8c5e3a4e307a8941" name="gcc-toolset-15-libstdc++-docs" arch="x86_64">
  <version epoch="0" ver="15.2.1" rel="7.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95595)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.2" date="1749729600">- Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84680)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.3" date="1750075200">- ship libstdc++.modules.json (RHEL-97043)
- configure with --with-long-double-format=ieee (RHEL-97055)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.4" date="1750420800">- Require gcc-toolset-N-runtime (RHEL-94672)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1753876800">- Drop the workaround for CVE-2025-5702 (RHEL-100161)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.6" date="1757419200">- Fix glibc32 build dependency (RHEL-113183)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116507)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
</package>
<package pkgid="82126fc59a6965f9dae1d4452a72c8dbdefa70ab214dfeec9d4057c8cf1df17b" name="gcc-toolset-15-libtsan-devel" arch="x86_64">
  <version epoch="0" ver="15.2.1" rel="7.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95595)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.2" date="1749729600">- Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84680)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.3" date="1750075200">- ship libstdc++.modules.json (RHEL-97043)
- configure with --with-long-double-format=ieee (RHEL-97055)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.4" date="1750420800">- Require gcc-toolset-N-runtime (RHEL-94672)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1753876800">- Drop the workaround for CVE-2025-5702 (RHEL-100161)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.6" date="1757419200">- Fix glibc32 build dependency (RHEL-113183)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116507)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
</package>
<package pkgid="bdab4734298d9d50e79b9daa6c8aeb5b2ab14ec520d869847e01eda9f8c8b20d" name="gcc-toolset-15-libubsan-devel" arch="x86_64">
  <version epoch="0" ver="15.2.1" rel="7.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95595)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.2" date="1749729600">- Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84680)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.3" date="1750075200">- ship libstdc++.modules.json (RHEL-97043)
- configure with --with-long-double-format=ieee (RHEL-97055)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.4" date="1750420800">- Require gcc-toolset-N-runtime (RHEL-94672)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1753876800">- Drop the workaround for CVE-2025-5702 (RHEL-100161)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.6" date="1757419200">- Fix glibc32 build dependency (RHEL-113183)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116507)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
</package>
<package pkgid="98816f76e022d314ddbd1e017b0fff7465b0d93231bd48cc94c97ca4c7135206" name="gcc-toolset-15-offload-nvptx" arch="x86_64">
  <version epoch="0" ver="15.2.1" rel="7.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95595)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.2" date="1749729600">- Tune for z16 on s390x by default on RHEL10 and later (RHEL-94282)
- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84680)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.3" date="1750075200">- ship libstdc++.modules.json (RHEL-97043)
- configure with --with-long-double-format=ieee (RHEL-97055)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.4" date="1750420800">- Require gcc-toolset-N-runtime (RHEL-94672)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1753876800">- Drop the workaround for CVE-2025-5702 (RHEL-100161)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.6" date="1757419200">- Fix glibc32 build dependency (RHEL-113183)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116507)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
</package>
<package pkgid="a774a24536bd8364cd229136c2e762fd2a7c594a826b245ed423107e5a346282" name="gcc-toolset-15-runtime" arch="x86_64">
  <version epoch="0" ver="15.0" rel="11.el10"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-2" date="1746446400">- Split out a devel package to break the dependency look with gts-gcc and
  gts-binutils.</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-3" date="1746705600">- Drop the sudo wrapper script.</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-4" date="1747310400">- New script to replace scl-enable (RHEL-88743).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-5" date="1749038400">- Fix quoting and other issues in gcc-toolset-env script (RHEL-94760)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-6" date="1749124800">- Split out scripts into a -runtime package on RHEL10 (RHEL-94841)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-7" date="1749556800">- Man page and documentation updates (RHEL-95996)
- Support scl-style quoted invocation (RHEL-94760)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-8" date="1749643200">- Fix typo in gcc-toolset-env (RHEL-94760)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-9" date="1750420800">- Compress man page and fix its name (RHEL-96490)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-10" date="1751544000">- Bump for rebuild (RHEL-96490)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 15.0-11" date="1751544001">- Bump again for rebuild (RHEL-96490)</changelog>
</package>
<package pkgid="76699ab59b7a365729e0116a6414680541fc0e9180352c05d8b32d6c3fe187b4" name="gcr" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.92.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.1.0-1" date="1687176000">- Update to 4.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.0-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.0-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 4.3.0-1" date="1732017600">- Use gnutls instead of gcrypt (RHEL-49434)</changelog>
</package>
<package pkgid="2e482ef496bea77935b0b12b876a303838802a94759233b967abf6abac67fc07" name="gcr-devel" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.92.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.1.0-1" date="1687176000">- Update to 4.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.0-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.0-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 4.3.0-1" date="1732017600">- Use gnutls instead of gcrypt (RHEL-49434)</changelog>
</package>
<package pkgid="454cf52382993047215fdbef0fe5e0d612fd4617e12b7c32f8f6aec4b2d70914" name="gcr-libs" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.92.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.1.0-1" date="1687176000">- Update to 4.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.0-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.0-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 4.3.0-1" date="1732017600">- Use gnutls instead of gcrypt (RHEL-49434)</changelog>
</package>
<package pkgid="02a8f493cf461b981569653bd4c629972a6111cef7aca1722d009c4f9e9f0f02" name="gcr3" arch="x86_64">
  <version epoch="0" ver="3.41.1" rel="10.el10"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.41.1-4" date="1668254400">- Explicitly BR pkgconfig(systemd); fixes RHBZ#2142295</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.41.1-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.41.1-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.41.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.41.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.41.1-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.41.1-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="433f9670decd2edb78d0bf2899ae3a69ecd2f9750931079860bd3b7050814d99" name="gcr3-base" arch="x86_64">
  <version epoch="0" ver="3.41.1" rel="10.el10"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.41.1-4" date="1668254400">- Explicitly BR pkgconfig(systemd); fixes RHBZ#2142295</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.41.1-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.41.1-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.41.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.41.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.41.1-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.41.1-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b6a6384326f721036c9b495f869e94a3144a9a14aec0df2589eebe368636739a" name="gcr3-devel" arch="x86_64">
  <version epoch="0" ver="3.41.1" rel="10.el10"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.41.1-4" date="1668254400">- Explicitly BR pkgconfig(systemd); fixes RHBZ#2142295</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.41.1-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.41.1-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.41.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.41.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.41.1-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.41.1-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0bcfd6b923b583747c5a5bffdf4c2413ae77b71bbb79f45b2ddb5c54f37da488" name="gd" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="22.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.3-13" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.3-14" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.3.3-15" date="1706702400">- Rebuilt for libavif 1.0.3</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 2.3.3-16" date="1709726400">- Bump and rebuild package (for riscv64)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.3-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.3-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.3.3-19" date="1739793600">- Rebuild for Konflux</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.3.3-20" date="1743076800">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.3.3-21" date="1747310400">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 2.3.3-22" date="1750852800">- Konflux RHEL on GitLab onboarding rebuild (Resolves: RHEL-84822)</changelog>
</package>
<package pkgid="ae7e4bfe469e965760086956fac9e767b547348424d23bd1c75407ba2b791aa7" name="gd-devel" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="22.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.3-13" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.3-14" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.3.3-15" date="1706702400">- Rebuilt for libavif 1.0.3</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 2.3.3-16" date="1709726400">- Bump and rebuild package (for riscv64)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.3-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.3-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.3.3-19" date="1739793600">- Rebuild for Konflux</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.3.3-20" date="1743076800">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.3.3-21" date="1747310400">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 2.3.3-22" date="1750852800">- Konflux RHEL on GitLab onboarding rebuild (Resolves: RHEL-84822)</changelog>
</package>
<package pkgid="cae81ccb25985c0613eab559d74c30b82582a06033f04decd8f961f97363f7f4" name="gd-progs" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="22.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.3-13" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.3-14" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.3.3-15" date="1706702400">- Rebuilt for libavif 1.0.3</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 2.3.3-16" date="1709726400">- Bump and rebuild package (for riscv64)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.3-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.3-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.3.3-19" date="1739793600">- Rebuild for Konflux</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.3.3-20" date="1743076800">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.3.3-21" date="1747310400">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 2.3.3-22" date="1750852800">- Konflux RHEL on GitLab onboarding rebuild (Resolves: RHEL-84822)</changelog>
</package>
<package pkgid="f4e946e7c4e3a25af1be119541b36561a45deefa2ba9b7fe1a07d09fb4cf8072" name="gdal" arch="x86_64">
  <version epoch="0" ver="3.10.3" rel="3.el10"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.10.1-3" date="1739275200">- Rebuild (poppler)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.10.1-4" date="1739534400">- Rebuilt for libarrow 19</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.10.2-1" date="1739620800">- Update to 3.10.2</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.10.2-2" date="1740052800">- Rebuild for libarrow 19 in poppler's sidetag</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.10.2-3" date="1740052801">- Add definitions of missing int16_t and int32_t</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.10.2-4" date="1740571200">- Rebuild (poppler)</changelog>
  <changelog author="Lauren&#x21B;iu Nicola &lt;lnicola@dend.ro&gt; - 3.10.2-5" date="1740657600">- Enable blosc</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.10.3-1" date="1744027200">- Update to 3.10.3</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.10.3-2" date="1747396800">- Fix *.py scripts packaging</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 3.10.3-3" date="1748952000">- Rebuilt for Python 3.14</changelog>
</package>
<package pkgid="8031f6468fac8a31f21b8ee4ae86c123c3d9e099b62396f9992af20abe073b0c" name="gdal-devel" arch="x86_64">
  <version epoch="0" ver="3.10.3" rel="3.el10"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.10.1-3" date="1739275200">- Rebuild (poppler)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.10.1-4" date="1739534400">- Rebuilt for libarrow 19</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.10.2-1" date="1739620800">- Update to 3.10.2</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.10.2-2" date="1740052800">- Rebuild for libarrow 19 in poppler's sidetag</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.10.2-3" date="1740052801">- Add definitions of missing int16_t and int32_t</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.10.2-4" date="1740571200">- Rebuild (poppler)</changelog>
  <changelog author="Lauren&#x21B;iu Nicola &lt;lnicola@dend.ro&gt; - 3.10.2-5" date="1740657600">- Enable blosc</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.10.3-1" date="1744027200">- Update to 3.10.3</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.10.3-2" date="1747396800">- Fix *.py scripts packaging</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 3.10.3-3" date="1748952000">- Rebuilt for Python 3.14</changelog>
</package>
<package pkgid="56f5ed9b6cff63eff71adec508c60cb2a279caba60810c9ce221cfa53bf1ed24" name="gdal-libs" arch="x86_64">
  <version epoch="0" ver="3.10.3" rel="3.el10"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.10.1-3" date="1739275200">- Rebuild (poppler)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.10.1-4" date="1739534400">- Rebuilt for libarrow 19</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.10.2-1" date="1739620800">- Update to 3.10.2</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.10.2-2" date="1740052800">- Rebuild for libarrow 19 in poppler's sidetag</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.10.2-3" date="1740052801">- Add definitions of missing int16_t and int32_t</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.10.2-4" date="1740571200">- Rebuild (poppler)</changelog>
  <changelog author="Lauren&#x21B;iu Nicola &lt;lnicola@dend.ro&gt; - 3.10.2-5" date="1740657600">- Enable blosc</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.10.3-1" date="1744027200">- Update to 3.10.3</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.10.3-2" date="1747396800">- Fix *.py scripts packaging</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 3.10.3-3" date="1748952000">- Rebuilt for Python 3.14</changelog>
</package>
<package pkgid="c054317a1c9310b9f7ea46a2f830729d1a8be0b6699f5ae2e562f75d3cc10c12" name="gdb" arch="x86_64">
  <version epoch="0" ver="16.3" rel="3.el10"/>
  <changelog author="Guinevere Larsen &lt;guinevere@redhat.com&gt;" date="1737115200">- remove gdb-test-bt-cfi-without-die.patch.  This test has been
  accepted upstream and will make its way back to testing with
  the GDB 17 release.</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt;" date="1737633600">- Remove upstreamed gdb-6.3-gstack-20050411.patch.</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt; - 16.2-1" date="1739275200">- Rebase to FSF GDB 16.2.
  Dropped:  gdb-backport-buildid-related-changes.patch
            gdb-catchpoint-re-set.patch
            gdb-remove-qnx-neutrino-support.patch
  Modified: gdb-add-rpm-suggestion-script.patch</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt; - 16.2-2" date="1739448000">- Bump the release number.</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 16.2-3" date="1743163200">- Backport "Fix gstack issues" from upstream.
  (Keith Seitz, RH BZ 2354997)</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt; - 16.3-1" date="1747137600">- Rebase to FSF GDB 16.3.
  Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch</changelog>
  <changelog author="Andrew Burgess &lt;aburgess@redhat.com&gt;" date="1748433600">- Remove 32-bit ARM support for RHEL 10+.  This is not a RHEL
  supported target, so lets drop this target.  Retain for older RHEL
  versions, as well as Fedora.</changelog>
  <changelog author="Guinevere Larsen &lt;guinevere@redhat.com&gt; - 16.3-1.el10" date="1748606400">- Rebase RHEL10 GDB to 16.3
  Resolves: RHEL-56897
  Resolves: RHEL-91382</changelog>
  <changelog author="Guinevere Larsen &lt;guinevere@redhat.com&gt; - 16.3-2.el10" date="1748865600">- Backport fixes to decoding AMD64 instructions
  Resolves: RHEL-93581</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 16.3-3.el10" date="1771502400">- Include gdb-index-generation-fixes.patch (renamed).
  (Tom Tromey and Andrew Burgess, RHEL-150992)</changelog>
</package>
<package pkgid="bb4aed6b24fd7d6954bf9e91e75acab3c2697e9e4934a6e0356dc45b13225cbf" name="gdb-doc" arch="noarch">
  <version epoch="0" ver="16.3" rel="3.el10"/>
  <changelog author="Guinevere Larsen &lt;guinevere@redhat.com&gt;" date="1737115200">- remove gdb-test-bt-cfi-without-die.patch.  This test has been
  accepted upstream and will make its way back to testing with
  the GDB 17 release.</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt;" date="1737633600">- Remove upstreamed gdb-6.3-gstack-20050411.patch.</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt; - 16.2-1" date="1739275200">- Rebase to FSF GDB 16.2.
  Dropped:  gdb-backport-buildid-related-changes.patch
            gdb-catchpoint-re-set.patch
            gdb-remove-qnx-neutrino-support.patch
  Modified: gdb-add-rpm-suggestion-script.patch</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt; - 16.2-2" date="1739448000">- Bump the release number.</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 16.2-3" date="1743163200">- Backport "Fix gstack issues" from upstream.
  (Keith Seitz, RH BZ 2354997)</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt; - 16.3-1" date="1747137600">- Rebase to FSF GDB 16.3.
  Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch</changelog>
  <changelog author="Andrew Burgess &lt;aburgess@redhat.com&gt;" date="1748433600">- Remove 32-bit ARM support for RHEL 10+.  This is not a RHEL
  supported target, so lets drop this target.  Retain for older RHEL
  versions, as well as Fedora.</changelog>
  <changelog author="Guinevere Larsen &lt;guinevere@redhat.com&gt; - 16.3-1.el10" date="1748606400">- Rebase RHEL10 GDB to 16.3
  Resolves: RHEL-56897
  Resolves: RHEL-91382</changelog>
  <changelog author="Guinevere Larsen &lt;guinevere@redhat.com&gt; - 16.3-2.el10" date="1748865600">- Backport fixes to decoding AMD64 instructions
  Resolves: RHEL-93581</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 16.3-3.el10" date="1771502400">- Include gdb-index-generation-fixes.patch (renamed).
  (Tom Tromey and Andrew Burgess, RHEL-150992)</changelog>
</package>
<package pkgid="d1fb62ba4d895ab920af6f30324e9f0b854aaa2fe766657fa89df3c6db34e50d" name="gdb-gdbserver" arch="x86_64">
  <version epoch="0" ver="16.3" rel="3.el10"/>
  <changelog author="Guinevere Larsen &lt;guinevere@redhat.com&gt;" date="1737115200">- remove gdb-test-bt-cfi-without-die.patch.  This test has been
  accepted upstream and will make its way back to testing with
  the GDB 17 release.</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt;" date="1737633600">- Remove upstreamed gdb-6.3-gstack-20050411.patch.</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt; - 16.2-1" date="1739275200">- Rebase to FSF GDB 16.2.
  Dropped:  gdb-backport-buildid-related-changes.patch
            gdb-catchpoint-re-set.patch
            gdb-remove-qnx-neutrino-support.patch
  Modified: gdb-add-rpm-suggestion-script.patch</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt; - 16.2-2" date="1739448000">- Bump the release number.</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 16.2-3" date="1743163200">- Backport "Fix gstack issues" from upstream.
  (Keith Seitz, RH BZ 2354997)</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt; - 16.3-1" date="1747137600">- Rebase to FSF GDB 16.3.
  Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch</changelog>
  <changelog author="Andrew Burgess &lt;aburgess@redhat.com&gt;" date="1748433600">- Remove 32-bit ARM support for RHEL 10+.  This is not a RHEL
  supported target, so lets drop this target.  Retain for older RHEL
  versions, as well as Fedora.</changelog>
  <changelog author="Guinevere Larsen &lt;guinevere@redhat.com&gt; - 16.3-1.el10" date="1748606400">- Rebase RHEL10 GDB to 16.3
  Resolves: RHEL-56897
  Resolves: RHEL-91382</changelog>
  <changelog author="Guinevere Larsen &lt;guinevere@redhat.com&gt; - 16.3-2.el10" date="1748865600">- Backport fixes to decoding AMD64 instructions
  Resolves: RHEL-93581</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 16.3-3.el10" date="1771502400">- Include gdb-index-generation-fixes.patch (renamed).
  (Tom Tromey and Andrew Burgess, RHEL-150992)</changelog>
</package>
<package pkgid="98b2cd2f64742545da5eee1bdd19f43e9afe97199432fe9efb5a78d8ddc41140" name="gdb-headless" arch="x86_64">
  <version epoch="0" ver="16.3" rel="3.el10"/>
  <changelog author="Guinevere Larsen &lt;guinevere@redhat.com&gt;" date="1737115200">- remove gdb-test-bt-cfi-without-die.patch.  This test has been
  accepted upstream and will make its way back to testing with
  the GDB 17 release.</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt;" date="1737633600">- Remove upstreamed gdb-6.3-gstack-20050411.patch.</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt; - 16.2-1" date="1739275200">- Rebase to FSF GDB 16.2.
  Dropped:  gdb-backport-buildid-related-changes.patch
            gdb-catchpoint-re-set.patch
            gdb-remove-qnx-neutrino-support.patch
  Modified: gdb-add-rpm-suggestion-script.patch</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt; - 16.2-2" date="1739448000">- Bump the release number.</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 16.2-3" date="1743163200">- Backport "Fix gstack issues" from upstream.
  (Keith Seitz, RH BZ 2354997)</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt; - 16.3-1" date="1747137600">- Rebase to FSF GDB 16.3.
  Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch</changelog>
  <changelog author="Andrew Burgess &lt;aburgess@redhat.com&gt;" date="1748433600">- Remove 32-bit ARM support for RHEL 10+.  This is not a RHEL
  supported target, so lets drop this target.  Retain for older RHEL
  versions, as well as Fedora.</changelog>
  <changelog author="Guinevere Larsen &lt;guinevere@redhat.com&gt; - 16.3-1.el10" date="1748606400">- Rebase RHEL10 GDB to 16.3
  Resolves: RHEL-56897
  Resolves: RHEL-91382</changelog>
  <changelog author="Guinevere Larsen &lt;guinevere@redhat.com&gt; - 16.3-2.el10" date="1748865600">- Backport fixes to decoding AMD64 instructions
  Resolves: RHEL-93581</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 16.3-3.el10" date="1771502400">- Include gdb-index-generation-fixes.patch (renamed).
  (Tom Tromey and Andrew Burgess, RHEL-150992)</changelog>
</package>
<package pkgid="faf99bbacfce090d4b615a0be75fbea52426e12741e3ebb32bb96df78f60955d" name="gdb-minimal" arch="x86_64">
  <version epoch="0" ver="16.3" rel="3.el10"/>
  <changelog author="Guinevere Larsen &lt;guinevere@redhat.com&gt;" date="1737115200">- remove gdb-test-bt-cfi-without-die.patch.  This test has been
  accepted upstream and will make its way back to testing with
  the GDB 17 release.</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt;" date="1737633600">- Remove upstreamed gdb-6.3-gstack-20050411.patch.</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt; - 16.2-1" date="1739275200">- Rebase to FSF GDB 16.2.
  Dropped:  gdb-backport-buildid-related-changes.patch
            gdb-catchpoint-re-set.patch
            gdb-remove-qnx-neutrino-support.patch
  Modified: gdb-add-rpm-suggestion-script.patch</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt; - 16.2-2" date="1739448000">- Bump the release number.</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 16.2-3" date="1743163200">- Backport "Fix gstack issues" from upstream.
  (Keith Seitz, RH BZ 2354997)</changelog>
  <changelog author="Alexandra H&#xE1;jkov&#xE1; &lt;ahajkova@redhat.com&gt; - 16.3-1" date="1747137600">- Rebase to FSF GDB 16.3.
  Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch</changelog>
  <changelog author="Andrew Burgess &lt;aburgess@redhat.com&gt;" date="1748433600">- Remove 32-bit ARM support for RHEL 10+.  This is not a RHEL
  supported target, so lets drop this target.  Retain for older RHEL
  versions, as well as Fedora.</changelog>
  <changelog author="Guinevere Larsen &lt;guinevere@redhat.com&gt; - 16.3-1.el10" date="1748606400">- Rebase RHEL10 GDB to 16.3
  Resolves: RHEL-56897
  Resolves: RHEL-91382</changelog>
  <changelog author="Guinevere Larsen &lt;guinevere@redhat.com&gt; - 16.3-2.el10" date="1748865600">- Backport fixes to decoding AMD64 instructions
  Resolves: RHEL-93581</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 16.3-3.el10" date="1771502400">- Include gdb-index-generation-fixes.patch (renamed).
  (Tom Tromey and Andrew Burgess, RHEL-150992)</changelog>
</package>
<package pkgid="3df170410844459c5449e19a8c34e3738a0ea129ddfe1681c239206fadeb982b" name="gdbm" arch="x86_64">
  <version epoch="1" ver="1.23" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.23-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.23-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.23-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.23-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 1:1.23-8" date="1721908800">- Address issues from static analysis</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.23-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 1:1.23-11" date="1740657600">- Rebuild for Konflux
- Resolves: RHEL-79677</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 1:1.23-12" date="1743076800">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1:1.23-13" date="1747310400">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 1:1.23-14" date="1750852800">- Konflux RHEL on GitLab onboarding rebuild (Resolves: RHEL-84822)</changelog>
</package>
<package pkgid="31693c61ae7782c3ceb62030d044c74648c5b3305d6a13ad5372610df4630d2c" name="gdbm-devel" arch="x86_64">
  <version epoch="1" ver="1.23" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.23-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.23-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.23-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.23-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 1:1.23-8" date="1721908800">- Address issues from static analysis</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.23-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 1:1.23-11" date="1740657600">- Rebuild for Konflux
- Resolves: RHEL-79677</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 1:1.23-12" date="1743076800">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1:1.23-13" date="1747310400">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 1:1.23-14" date="1750852800">- Konflux RHEL on GitLab onboarding rebuild (Resolves: RHEL-84822)</changelog>
</package>
<package pkgid="373a3c49225efed92569c2230502733ba60f8a341e400507d05e5f3f7274a98a" name="gdbm-libs" arch="x86_64">
  <version epoch="1" ver="1.23" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.23-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.23-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.23-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.23-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 1:1.23-8" date="1721908800">- Address issues from static analysis</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.23-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 1:1.23-11" date="1740657600">- Rebuild for Konflux
- Resolves: RHEL-79677</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 1:1.23-12" date="1743076800">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1:1.23-13" date="1747310400">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 1:1.23-14" date="1750852800">- Konflux RHEL on GitLab onboarding rebuild (Resolves: RHEL-84822)</changelog>
</package>
<package pkgid="0f10e2b54827459dc8d4d0c0a5b693c99f30fe993618d13fc9f6c1c49aa29204" name="gdk-pixbuf2" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="4.el10_1.5"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.42.10-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.42.12-1" date="1721390400">- Update to 2.42.12 and sync with Fedora</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.42.12-2" date="1724328000">- Recommend webp loader only on Fedora</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.42.12-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.42.12-4" date="1752235200">- jpeg: Be more careful with chunked icc data</changelog>
  <changelog author="Benjamin Otte &lt;otte@redhat.com&gt; - 2.42.12-5" date="1776772800">- jpeg: Reject unsupported number of components</changelog>
</package>
<package pkgid="ec62d18124f5b9275b7439732fc4088d82d0b7a90e38003089c482403315cdd2" name="gdk-pixbuf2-devel" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="4.el10_1.5"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.42.10-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.42.12-1" date="1721390400">- Update to 2.42.12 and sync with Fedora</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.42.12-2" date="1724328000">- Recommend webp loader only on Fedora</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.42.12-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.42.12-4" date="1752235200">- jpeg: Be more careful with chunked icc data</changelog>
  <changelog author="Benjamin Otte &lt;otte@redhat.com&gt; - 2.42.12-5" date="1776772800">- jpeg: Reject unsupported number of components</changelog>
</package>
<package pkgid="de5a7450e05a6ac80992886ef49a286abe72c5ac2df44a62b236faed2052c073" name="gdk-pixbuf2-modules" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="4.el10_1.5"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.42.10-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.42.12-1" date="1721390400">- Update to 2.42.12 and sync with Fedora</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.42.12-2" date="1724328000">- Recommend webp loader only on Fedora</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.42.12-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.42.12-4" date="1752235200">- jpeg: Be more careful with chunked icc data</changelog>
  <changelog author="Benjamin Otte &lt;otte@redhat.com&gt; - 2.42.12-5" date="1776772800">- jpeg: Reject unsupported number of components</changelog>
</package>
<package pkgid="3b748790d09e57957c855c4541da4644cdc548d0476ff44987138b858eed5807" name="gdk-pixbuf2-tests" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="4.el10_1.5"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.42.10-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.42.12-1" date="1721390400">- Update to 2.42.12 and sync with Fedora</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.42.12-2" date="1724328000">- Recommend webp loader only on Fedora</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.42.12-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.42.12-4" date="1752235200">- jpeg: Be more careful with chunked icc data</changelog>
  <changelog author="Benjamin Otte &lt;otte@redhat.com&gt; - 2.42.12-5" date="1776772800">- jpeg: Reject unsupported number of components</changelog>
</package>
<package pkgid="3ae5682cf2a2d2a96373ce7ac6bbcb3c31079758667fabce166e37589146ceb7" name="gdm" arch="x86_64">
  <version epoch="1" ver="47.0" rel="19.el10_2"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 1:47.0-10" date="1752667200">- Fix launching headless service on boot</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-11" date="1755777600">- Quit plymouth when no local display is available</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-12" date="1762344000">- Add starting headless sessions with C tool</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-13" date="1766404800">- Improve plymouth handling</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-14" date="1766404801">- Fix recording wtmp/utmp/btmp</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-15" date="1768824000">- Keep register display method</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-16" date="1768824001">- Backport GDM passwordless feature</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-17" date="1771329600">- Update debug_json_requests with extra optimization</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-18" date="1771329601">- Fix reporting false failed authentication</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-19" date="1776945600">- Check for "boot_vga" when creating the display</changelog>
</package>
<package pkgid="13066719a473500c4525c7fc364381d5c1c99892a17caee74a7a6cfce642bbf5" name="gdm" arch="x86_64">
  <version epoch="1" ver="47.0" rel="21.el10_2"/>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-12" date="1762344000">- Add starting headless sessions with C tool</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-13" date="1766404800">- Improve plymouth handling</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-14" date="1766404801">- Fix recording wtmp/utmp/btmp</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-15" date="1768824000">- Keep register display method</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-16" date="1768824001">- Backport GDM passwordless feature</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-17" date="1771329600">- Update debug_json_requests with extra optimization</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-18" date="1771329601">- Fix reporting false failed authentication</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-19" date="1776945600">- Check for "boot_vga" when creating the display</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-20" date="1779883200">- Update how GDM handles Registering session/display to properly</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:47.0-21" date="1779969600">- Resolves: https://redhat.atlassian.net/browse/RHEL-178665</changelog>
</package>
<package pkgid="a9af76b56c2acee07b0d6ea843f80443eea75a78d26f23be630b428a9f9d918c" name="gdm" arch="x86_64">
  <version epoch="1" ver="47.0" rel="22.el10_2"/>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-13" date="1766404800">- Improve plymouth handling</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-14" date="1766404801">- Fix recording wtmp/utmp/btmp</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-15" date="1768824000">- Keep register display method</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-16" date="1768824001">- Backport GDM passwordless feature</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-17" date="1771329600">- Update debug_json_requests with extra optimization</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-18" date="1771329601">- Fix reporting false failed authentication</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-19" date="1776945600">- Check for "boot_vga" when creating the display</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-20" date="1779883200">- Update how GDM handles Registering session/display to properly</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:47.0-21" date="1779969600">- Resolves: https://redhat.atlassian.net/browse/RHEL-178665</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-22" date="1783684800">- Fix auth bypass in authselect pam substacks</changelog>
</package>
<package pkgid="5e3f96fa874a6e3e05525e3cfa332cd1507a77cfae7441bb1605257271bcf9d0" name="gdm-devel" arch="x86_64">
  <version epoch="1" ver="47.0" rel="19.el10_2"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 1:47.0-10" date="1752667200">- Fix launching headless service on boot</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-11" date="1755777600">- Quit plymouth when no local display is available</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-12" date="1762344000">- Add starting headless sessions with C tool</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-13" date="1766404800">- Improve plymouth handling</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-14" date="1766404801">- Fix recording wtmp/utmp/btmp</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-15" date="1768824000">- Keep register display method</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-16" date="1768824001">- Backport GDM passwordless feature</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-17" date="1771329600">- Update debug_json_requests with extra optimization</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-18" date="1771329601">- Fix reporting false failed authentication</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-19" date="1776945600">- Check for "boot_vga" when creating the display</changelog>
</package>
<package pkgid="61cba3d980748f8d6c6eb2e9e2dbaa1f11d7320ab7dbb2548c5eaa0086eceb6c" name="gdm-devel" arch="x86_64">
  <version epoch="1" ver="47.0" rel="21.el10_2"/>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-12" date="1762344000">- Add starting headless sessions with C tool</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-13" date="1766404800">- Improve plymouth handling</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-14" date="1766404801">- Fix recording wtmp/utmp/btmp</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-15" date="1768824000">- Keep register display method</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-16" date="1768824001">- Backport GDM passwordless feature</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-17" date="1771329600">- Update debug_json_requests with extra optimization</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-18" date="1771329601">- Fix reporting false failed authentication</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-19" date="1776945600">- Check for "boot_vga" when creating the display</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-20" date="1779883200">- Update how GDM handles Registering session/display to properly</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:47.0-21" date="1779969600">- Resolves: https://redhat.atlassian.net/browse/RHEL-178665</changelog>
</package>
<package pkgid="90f1dc361b53288c28045fccc2a9eb19141d278c0514cb07ec6ddb0cffee9d07" name="gdm-devel" arch="x86_64">
  <version epoch="1" ver="47.0" rel="22.el10_2"/>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-13" date="1766404800">- Improve plymouth handling</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-14" date="1766404801">- Fix recording wtmp/utmp/btmp</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-15" date="1768824000">- Keep register display method</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-16" date="1768824001">- Backport GDM passwordless feature</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-17" date="1771329600">- Update debug_json_requests with extra optimization</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-18" date="1771329601">- Fix reporting false failed authentication</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-19" date="1776945600">- Check for "boot_vga" when creating the display</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-20" date="1779883200">- Update how GDM handles Registering session/display to properly</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:47.0-21" date="1779969600">- Resolves: https://redhat.atlassian.net/browse/RHEL-178665</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-22" date="1783684800">- Fix auth bypass in authselect pam substacks</changelog>
</package>
<package pkgid="73f340cc7d9a90c67eb05087237bd41962d8dbb204bcbd8b03954a252ed28fd8" name="gdm-pam-extensions-devel" arch="x86_64">
  <version epoch="1" ver="47.0" rel="19.el10_2"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 1:47.0-10" date="1752667200">- Fix launching headless service on boot</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-11" date="1755777600">- Quit plymouth when no local display is available</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-12" date="1762344000">- Add starting headless sessions with C tool</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-13" date="1766404800">- Improve plymouth handling</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-14" date="1766404801">- Fix recording wtmp/utmp/btmp</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-15" date="1768824000">- Keep register display method</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-16" date="1768824001">- Backport GDM passwordless feature</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-17" date="1771329600">- Update debug_json_requests with extra optimization</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-18" date="1771329601">- Fix reporting false failed authentication</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-19" date="1776945600">- Check for "boot_vga" when creating the display</changelog>
</package>
<package pkgid="1c2c7d89b7ef08f0ae94340bfd6036b89010f394842ffac170c8e6c225e999d1" name="gdm-pam-extensions-devel" arch="x86_64">
  <version epoch="1" ver="47.0" rel="21.el10_2"/>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-12" date="1762344000">- Add starting headless sessions with C tool</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-13" date="1766404800">- Improve plymouth handling</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-14" date="1766404801">- Fix recording wtmp/utmp/btmp</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-15" date="1768824000">- Keep register display method</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-16" date="1768824001">- Backport GDM passwordless feature</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-17" date="1771329600">- Update debug_json_requests with extra optimization</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-18" date="1771329601">- Fix reporting false failed authentication</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-19" date="1776945600">- Check for "boot_vga" when creating the display</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-20" date="1779883200">- Update how GDM handles Registering session/display to properly</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:47.0-21" date="1779969600">- Resolves: https://redhat.atlassian.net/browse/RHEL-178665</changelog>
</package>
<package pkgid="ccf01a1e99bdcc0d09469577aee906716b18691afb887f02d6832fc556b56bb9" name="gdm-pam-extensions-devel" arch="x86_64">
  <version epoch="1" ver="47.0" rel="22.el10_2"/>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-13" date="1766404800">- Improve plymouth handling</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-14" date="1766404801">- Fix recording wtmp/utmp/btmp</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-15" date="1768824000">- Keep register display method</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-16" date="1768824001">- Backport GDM passwordless feature</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-17" date="1771329600">- Update debug_json_requests with extra optimization</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-18" date="1771329601">- Fix reporting false failed authentication</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-19" date="1776945600">- Check for "boot_vga" when creating the display</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-20" date="1779883200">- Update how GDM handles Registering session/display to properly</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:47.0-21" date="1779969600">- Resolves: https://redhat.atlassian.net/browse/RHEL-178665</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 1:47.0-22" date="1783684800">- Fix auth bypass in authselect pam substacks</changelog>
</package>
<package pkgid="5431798d8618e85423a0d74972ea778db16268952ba5a7f7ff2c041975c3b4f7" name="geoclue2" arch="x86_64">
  <version epoch="0" ver="2.7.2" rel="1.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.7.0-1" date="1680091200">- Update to 2.7.0
- Switch to libsoup 3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Daan De Meyer &lt;daan.j.demeyer@gmail.com&gt; - 2.7.0-3" date="1696248000">- Provide a sysusers.d file to get user() and group() provides
  (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.7.0-8" date="1738584000">- Resolves: RHEL-44940 (Remove Mozilla Location Service)</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 2.7.2-1" date="1739361600">- Update to 2.7.2
  + Backport fixes from upstream to use BeaconDB
  + Use BeaconDB for the default location services source
  Resolves: RHEL-79063</changelog>
</package>
<package pkgid="76325d2c0ced06f650e6a86f88b1c1f4b0e10991c8d96267e251e5a142095d87" name="geoclue2-demos" arch="x86_64">
  <version epoch="0" ver="2.7.2" rel="1.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.7.0-1" date="1680091200">- Update to 2.7.0
- Switch to libsoup 3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Daan De Meyer &lt;daan.j.demeyer@gmail.com&gt; - 2.7.0-3" date="1696248000">- Provide a sysusers.d file to get user() and group() provides
  (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.7.0-8" date="1738584000">- Resolves: RHEL-44940 (Remove Mozilla Location Service)</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 2.7.2-1" date="1739361600">- Update to 2.7.2
  + Backport fixes from upstream to use BeaconDB
  + Use BeaconDB for the default location services source
  Resolves: RHEL-79063</changelog>
</package>
<package pkgid="d5ca5c530439c166b23bd905edff0f18dd9eb930073d18a141289c632ecec61d" name="geoclue2-devel" arch="x86_64">
  <version epoch="0" ver="2.7.2" rel="1.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.7.0-1" date="1680091200">- Update to 2.7.0
- Switch to libsoup 3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Daan De Meyer &lt;daan.j.demeyer@gmail.com&gt; - 2.7.0-3" date="1696248000">- Provide a sysusers.d file to get user() and group() provides
  (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.7.0-8" date="1738584000">- Resolves: RHEL-44940 (Remove Mozilla Location Service)</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 2.7.2-1" date="1739361600">- Update to 2.7.2
  + Backport fixes from upstream to use BeaconDB
  + Use BeaconDB for the default location services source
  Resolves: RHEL-79063</changelog>
</package>
<package pkgid="8070c0de2d0bef28a30adfabcdefb879e1b57fc37f4c39dd24dbbb55aeb162e4" name="geoclue2-libs" arch="x86_64">
  <version epoch="0" ver="2.7.2" rel="1.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.7.0-1" date="1680091200">- Update to 2.7.0
- Switch to libsoup 3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Daan De Meyer &lt;daan.j.demeyer@gmail.com&gt; - 2.7.0-3" date="1696248000">- Provide a sysusers.d file to get user() and group() provides
  (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.7.0-8" date="1738584000">- Resolves: RHEL-44940 (Remove Mozilla Location Service)</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 2.7.2-1" date="1739361600">- Update to 2.7.2
  + Backport fixes from upstream to use BeaconDB
  + Use BeaconDB for the default location services source
  Resolves: RHEL-79063</changelog>
</package>
<package pkgid="5d88be628f8a8940ad604b703e33d524a8fa9da1c1d29be8d2a78d5299f1cbde" name="geocode-glib" arch="x86_64">
  <version epoch="0" ver="3.26.4" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.26.4-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.26.4-6" date="1689940800">- Remove the libsoup 2 build</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.4-7" date="1691928000">- Rename geocode-glib2 back to geocode-glib</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.4-8" date="1691928001">- Add provides for geocode-glib2</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 3.26.4-9" date="1704283200">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.26.4-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.26.4-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 3.26.4-12" date="1713355200">- enable gating</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.26.4-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.26.4-14" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="50cd2d64bf44df0fa77db0a63529020f45383c3b7641978ba3b0618a486d442f" name="geocode-glib-devel" arch="x86_64">
  <version epoch="0" ver="3.26.4" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.26.4-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.26.4-6" date="1689940800">- Remove the libsoup 2 build</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.4-7" date="1691928000">- Rename geocode-glib2 back to geocode-glib</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.4-8" date="1691928001">- Add provides for geocode-glib2</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 3.26.4-9" date="1704283200">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.26.4-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.26.4-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 3.26.4-12" date="1713355200">- enable gating</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.26.4-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.26.4-14" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="c74753d14da1a286f1b05a096e00d85d37fd2c7527bc61b01f61f3ee19f64af2" name="geolite2-asn" arch="noarch">
  <version epoch="0" ver="20191217" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20191217-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20191217-9" date="1677844800">- Use SPDX-format license tag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20191217-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20191217-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20191217-12" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20191217-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20191217-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7d5220c7998943d6e90db7007d660b3c0cc795e1a06c35c942cc5ff7dfeff268" name="geolite2-city" arch="noarch">
  <version epoch="0" ver="20191217" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20191217-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20191217-9" date="1677844800">- Use SPDX-format license tag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20191217-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20191217-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20191217-12" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20191217-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20191217-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="442bb29db97ea400602d55b78e559580690ff865981818537374c2301c186352" name="geolite2-country" arch="noarch">
  <version epoch="0" ver="20191217" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20191217-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20191217-9" date="1677844800">- Use SPDX-format license tag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20191217-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20191217-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20191217-12" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20191217-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20191217-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b404e2dc043350dd2f3cb01a1dd621adf5abc70751cbd68c8b25153243165f3b" name="geos" arch="x86_64">
  <version epoch="0" ver="3.13.1" rel="1.el10"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.12.1-1" date="1688644800">- Update to 3.12.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.1-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.12.1-1" date="1699790400">- Update to 3.12.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.12.2-1" date="1717675200">- Update to 3.12.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.2-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.13.0-1" date="1725883200">- Update to 3.13.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.13.0-2" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.13.1-1" date="1741176000">- Update to 3.13.1</changelog>
</package>
<package pkgid="996164351d7df4b18bfa19964d9d9fcb1b1a78a5a09fc3c315c6c8864c68ad60" name="geos-devel" arch="x86_64">
  <version epoch="0" ver="3.13.1" rel="1.el10"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.12.1-1" date="1688644800">- Update to 3.12.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.1-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.12.1-1" date="1699790400">- Update to 3.12.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.12.2-1" date="1717675200">- Update to 3.12.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.2-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.13.0-1" date="1725883200">- Update to 3.13.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.13.0-2" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.13.1-1" date="1741176000">- Update to 3.13.1</changelog>
</package>
<package pkgid="11f2bd3ec44812c136261565a5e262d9c425faca05a7f44f6af30a24305c5aa2" name="gettext" arch="x86_64">
  <version epoch="0" ver="0.22.5" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.4-1" date="1707480000">- update to 0.22.4 release
- https://savannah.gnu.org/news/?id=10544</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.4-2" date="1708516800">- Add back libtextstyle library for rawhide (#2264128)</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-1" date="1709553600">- update to 0.22.5 release
- https://savannah.gnu.org/news/?id=10597</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.22.5-2" date="1709899200">- condition libtextstyle obsoletes</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.5-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-4" date="1720094400">- Add explicit package version requirement for libtextstyle</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-5" date="1720699200">- CI gating tests migration to tmt</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="797f3db200e39fd4022f4bb123afc82f23c11b611ade403697c37775a5d18589" name="gettext-common-devel" arch="noarch">
  <version epoch="0" ver="0.22.5" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.4-1" date="1707480000">- update to 0.22.4 release
- https://savannah.gnu.org/news/?id=10544</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.4-2" date="1708516800">- Add back libtextstyle library for rawhide (#2264128)</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-1" date="1709553600">- update to 0.22.5 release
- https://savannah.gnu.org/news/?id=10597</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.22.5-2" date="1709899200">- condition libtextstyle obsoletes</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.5-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-4" date="1720094400">- Add explicit package version requirement for libtextstyle</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-5" date="1720699200">- CI gating tests migration to tmt</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c12325eca58319de5883069fe2c8551fea2b051c75fc30701d313ffe8fb84da1" name="gettext-devel" arch="x86_64">
  <version epoch="0" ver="0.22.5" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.4-1" date="1707480000">- update to 0.22.4 release
- https://savannah.gnu.org/news/?id=10544</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.4-2" date="1708516800">- Add back libtextstyle library for rawhide (#2264128)</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-1" date="1709553600">- update to 0.22.5 release
- https://savannah.gnu.org/news/?id=10597</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.22.5-2" date="1709899200">- condition libtextstyle obsoletes</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.5-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-4" date="1720094400">- Add explicit package version requirement for libtextstyle</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-5" date="1720699200">- CI gating tests migration to tmt</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6a497e0cc8807954ab1511d4f4988b3ac6308c147427506ade957d555737e158" name="gettext-envsubst" arch="x86_64">
  <version epoch="0" ver="0.22.5" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.4-1" date="1707480000">- update to 0.22.4 release
- https://savannah.gnu.org/news/?id=10544</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.4-2" date="1708516800">- Add back libtextstyle library for rawhide (#2264128)</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-1" date="1709553600">- update to 0.22.5 release
- https://savannah.gnu.org/news/?id=10597</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.22.5-2" date="1709899200">- condition libtextstyle obsoletes</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.5-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-4" date="1720094400">- Add explicit package version requirement for libtextstyle</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-5" date="1720699200">- CI gating tests migration to tmt</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="08bd0593319c53fc7773aad94e011a1d75db5870b49fe28c17966d894012ffce" name="gettext-libs" arch="x86_64">
  <version epoch="0" ver="0.22.5" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.4-1" date="1707480000">- update to 0.22.4 release
- https://savannah.gnu.org/news/?id=10544</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.4-2" date="1708516800">- Add back libtextstyle library for rawhide (#2264128)</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-1" date="1709553600">- update to 0.22.5 release
- https://savannah.gnu.org/news/?id=10597</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.22.5-2" date="1709899200">- condition libtextstyle obsoletes</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.5-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-4" date="1720094400">- Add explicit package version requirement for libtextstyle</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-5" date="1720699200">- CI gating tests migration to tmt</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ddfcbd612a98d90688579b38544a234bb231758eab6c70db44d15756734f8d64" name="gettext-runtime" arch="x86_64">
  <version epoch="0" ver="0.22.5" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.4-1" date="1707480000">- update to 0.22.4 release
- https://savannah.gnu.org/news/?id=10544</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.4-2" date="1708516800">- Add back libtextstyle library for rawhide (#2264128)</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-1" date="1709553600">- update to 0.22.5 release
- https://savannah.gnu.org/news/?id=10597</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.22.5-2" date="1709899200">- condition libtextstyle obsoletes</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.5-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-4" date="1720094400">- Add explicit package version requirement for libtextstyle</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.22.5-5" date="1720699200">- CI gating tests migration to tmt</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.22.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1935e829c0e5d21793638ca51e3fb23faf4f2dc4ec13bc4c4ba53f65b7a2b4cc" name="ghc-filesystem" arch="noarch">
  <version epoch="0" ver="2.6.5" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.2-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.5.3-1" date="1691150400">- ghc-deps.sh: correctly map internal library id to internal package .conf
- tweak cabal_configure to only set --htmldir once for subpackaging
- add ghc_major_version
- F39: obsolete geniplate-mirror</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.5.3-2" date="1695038400">- obsolete ghc-data-array-byte
- migrate to SPDX license tag</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.6.0-1" date="1695038401">- add ghc-info.sh to read fields from ghc --info</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.6.1-1" date="1698148800">- ghc_gen_filelists: tweak pkgdir for ghc-9.8 short hash suffices</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.6.3-1" date="1698667200">- Fix flatpak builds</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.6.4-1" date="1699531200">- fix my flatpak comments</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.6.5-1" date="1699790400">- ghc-deps.sh: ghc-9.8 prof fixes adapted from mimi1vx (opensuse)
- improve ghc-info.sh with a show mode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="18f8584acbd0e9b087b8e54b5a3fcff153ab0801e09bb84e4b910caf581952bc" name="ghc-hscolour" arch="x86_64">
  <version epoch="0" ver="1.24.4" rel="29.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-14" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.24.4-15" date="1655467200">- rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-16" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.24.4-17" date="1676548800">- refresh to cabal-rpm-2.1.0 including SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.24.4-28" date="1690632000">- bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="0120278173164b97ff2ea3512d4209a58d87a39e6c9150c497f0dfcd3f11b5b3" name="ghc-hscolour-devel" arch="x86_64">
  <version epoch="0" ver="1.24.4" rel="29.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-14" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.24.4-15" date="1655467200">- rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-16" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.24.4-17" date="1676548800">- refresh to cabal-rpm-2.1.0 including SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.24.4-28" date="1690632000">- bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="72e5d5c5e231800631f893272faa8d7446ed56cf3a77f88be5fb3d9c91cfd7fc" name="ghc-hscolour-doc" arch="noarch">
  <version epoch="0" ver="1.24.4" rel="29.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-14" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.24.4-15" date="1655467200">- rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-16" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.24.4-17" date="1676548800">- refresh to cabal-rpm-2.1.0 including SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.24.4-28" date="1690632000">- bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="0c46b1a60fdc9687d0eb35a9ee1b73f6d853f0929368756b978a4a16baac1bda" name="ghc-hscolour-prof" arch="x86_64">
  <version epoch="0" ver="1.24.4" rel="29.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-14" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.24.4-15" date="1655467200">- rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-16" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.24.4-17" date="1676548800">- refresh to cabal-rpm-2.1.0 including SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.24.4-28" date="1690632000">- bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="69226354ec639ccf6c37cb0abdeb88422149793f422e7e783316be7789d8a1ac" name="ghc-rpm-macros" arch="noarch">
  <version epoch="0" ver="2.6.5" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.2-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.5.3-1" date="1691150400">- ghc-deps.sh: correctly map internal library id to internal package .conf
- tweak cabal_configure to only set --htmldir once for subpackaging
- add ghc_major_version
- F39: obsolete geniplate-mirror</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.5.3-2" date="1695038400">- obsolete ghc-data-array-byte
- migrate to SPDX license tag</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.6.0-1" date="1695038401">- add ghc-info.sh to read fields from ghc --info</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.6.1-1" date="1698148800">- ghc_gen_filelists: tweak pkgdir for ghc-9.8 short hash suffices</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.6.3-1" date="1698667200">- Fix flatpak builds</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.6.4-1" date="1699531200">- fix my flatpak comments</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.6.5-1" date="1699790400">- ghc-deps.sh: ghc-9.8 prof fixes adapted from mimi1vx (opensuse)
- improve ghc-info.sh with a show mode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="146bbeee3a73727827f14f7d65c5da5f219e2fc9a26cec3a8897c8ec5253f65b" name="ghc-rpm-macros-extra" arch="noarch">
  <version epoch="0" ver="2.6.5" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.2-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.5.3-1" date="1691150400">- ghc-deps.sh: correctly map internal library id to internal package .conf
- tweak cabal_configure to only set --htmldir once for subpackaging
- add ghc_major_version
- F39: obsolete geniplate-mirror</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.5.3-2" date="1695038400">- obsolete ghc-data-array-byte
- migrate to SPDX license tag</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.6.0-1" date="1695038401">- add ghc-info.sh to read fields from ghc --info</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.6.1-1" date="1698148800">- ghc_gen_filelists: tweak pkgdir for ghc-9.8 short hash suffices</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.6.3-1" date="1698667200">- Fix flatpak builds</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.6.4-1" date="1699531200">- fix my flatpak comments</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.6.5-1" date="1699790400">- ghc-deps.sh: ghc-9.8 prof fixes adapted from mimi1vx (opensuse)
- improve ghc-info.sh with a show mode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="333ab9f322d5bc4013edd28aa8ce7417bc09d9b032c6931bb4d44ea79ab0d80c" name="ghc-xml" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="41.el10"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.3.14-23" date="1655467200">- rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-24" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.3.14-25" date="1676548800">- refresh to cabal-rpm-2.1.0 with SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-38" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.3.14-39" date="1690632000">- bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-40" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-41" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="655137035ea8b05b1878954dc607380917680e366de5c1d10f39cf7f78bf2d69" name="ghc-xml-devel" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="41.el10"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.3.14-23" date="1655467200">- rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-24" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.3.14-25" date="1676548800">- refresh to cabal-rpm-2.1.0 with SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-38" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.3.14-39" date="1690632000">- bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-40" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-41" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="62e32d47b020d637b5324b2a0994e141bbdb5fb1bfc1a5fcc4b6ae29f0a39b66" name="ghc-xml-doc" arch="noarch">
  <version epoch="0" ver="1.3.14" rel="41.el10"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.3.14-23" date="1655467200">- rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-24" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.3.14-25" date="1676548800">- refresh to cabal-rpm-2.1.0 with SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-38" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.3.14-39" date="1690632000">- bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-40" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-41" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="dd23d535d6e08d08d544c154533d50980171777b2ac52740875d23e1df5317df" name="ghc-xml-prof" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="41.el10"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.3.14-23" date="1655467200">- rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-24" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.3.14-25" date="1676548800">- refresh to cabal-rpm-2.1.0 with SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-38" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.3.14-39" date="1690632000">- bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-40" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-41" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="6a496ded250061a30ca1ef44ac66a3228e0a6fe8f36105040152b1e7366ffcf0" name="ghc-xml-types" arch="x86_64">
  <version epoch="0" ver="0.3.8" rel="11.el10"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.3.8-3" date="1655467200">- rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.8-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.3.8-5" date="1676548800">- refresh to cabal-rpm-2.1.0 with SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.8-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.3.8-9" date="1690632000">- bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.8-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.8-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="9e5aca17ec7f1ee023dfad9052fcd35aae1715d12065df5c1993e203bbbec9ea" name="ghc-xml-types-devel" arch="x86_64">
  <version epoch="0" ver="0.3.8" rel="11.el10"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.3.8-3" date="1655467200">- rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.8-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.3.8-5" date="1676548800">- refresh to cabal-rpm-2.1.0 with SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.8-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.3.8-9" date="1690632000">- bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.8-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.8-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="caa7a9000e4c4c3e36fe59a788d7d5c72434fc1fbb11f49e9e3a5733c7fd4359" name="ghc-xml-types-doc" arch="noarch">
  <version epoch="0" ver="0.3.8" rel="11.el10"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.3.8-3" date="1655467200">- rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.8-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.3.8-5" date="1676548800">- refresh to cabal-rpm-2.1.0 with SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.8-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.3.8-9" date="1690632000">- bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.8-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.8-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="13ce3668757923b3dd8a729fae76adb795a1f7243c54fc7edfa2fbbf713d17ae" name="ghc-xml-types-prof" arch="x86_64">
  <version epoch="0" ver="0.3.8" rel="11.el10"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.3.8-3" date="1655467200">- rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.8-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.3.8-5" date="1676548800">- refresh to cabal-rpm-2.1.0 with SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.8-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.3.8-9" date="1690632000">- bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.8-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.8-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="8f6a4f89f0bca9dc3bfcb6e1a38e955b5979ac45660fff9fae3bf53c56ee994f" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="10.02.1" rel="16.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.02.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-9" date="1718884800">- RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-10" date="1718971200">- RHEL-38835 run the package with correct tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.02.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-12" date="1720699200">- RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-12" date="1721131200">- RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
- RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
- RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
- RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
- RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-13" date="1721217600">- RHEL-46575 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.02.1-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-15" date="1744718400">- RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
- RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
- RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
- RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
- RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-16" date="1746619200">- RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow</changelog>
</package>
<package pkgid="f4914cfd80f9e897646ac8e36f35e168dff0f5d687bedd1ecc1e5136f57ddfa7" name="ghostscript-doc" arch="noarch">
  <version epoch="0" ver="10.02.1" rel="16.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.02.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-9" date="1718884800">- RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-10" date="1718971200">- RHEL-38835 run the package with correct tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.02.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-12" date="1720699200">- RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-12" date="1721131200">- RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
- RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
- RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
- RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
- RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-13" date="1721217600">- RHEL-46575 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.02.1-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-15" date="1744718400">- RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
- RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
- RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
- RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
- RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-16" date="1746619200">- RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow</changelog>
</package>
<package pkgid="29f348163c17242317caf7eb20eba1a268f5de251cf27aee4d89188a9923900e" name="ghostscript-gtk" arch="x86_64">
  <version epoch="0" ver="10.02.1" rel="16.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.02.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-9" date="1718884800">- RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-10" date="1718971200">- RHEL-38835 run the package with correct tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.02.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-12" date="1720699200">- RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-12" date="1721131200">- RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
- RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
- RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
- RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
- RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-13" date="1721217600">- RHEL-46575 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.02.1-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-15" date="1744718400">- RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
- RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
- RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
- RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
- RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-16" date="1746619200">- RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow</changelog>
</package>
<package pkgid="54fb136fdd8aea9f60674f30963ceec016563f9ea1c49d3f6681b454df42acea" name="ghostscript-tools-dvipdf" arch="noarch">
  <version epoch="0" ver="10.02.1" rel="16.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.02.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-9" date="1718884800">- RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-10" date="1718971200">- RHEL-38835 run the package with correct tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.02.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-12" date="1720699200">- RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-12" date="1721131200">- RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
- RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
- RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
- RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
- RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-13" date="1721217600">- RHEL-46575 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.02.1-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-15" date="1744718400">- RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
- RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
- RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
- RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
- RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-16" date="1746619200">- RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow</changelog>
</package>
<package pkgid="c86349f057a12bd7dcb6abc7f6f0724a83df500266b99fe894462a62ef242058" name="ghostscript-tools-fonts" arch="noarch">
  <version epoch="0" ver="10.02.1" rel="16.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.02.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-9" date="1718884800">- RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-10" date="1718971200">- RHEL-38835 run the package with correct tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.02.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-12" date="1720699200">- RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-12" date="1721131200">- RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
- RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
- RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
- RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
- RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-13" date="1721217600">- RHEL-46575 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.02.1-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-15" date="1744718400">- RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
- RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
- RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
- RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
- RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-16" date="1746619200">- RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow</changelog>
</package>
<package pkgid="f20d5ba7b32a253d2c2a24a263142c8d24062116a76f8bb2d82a0ece4b9875ea" name="ghostscript-tools-printing" arch="noarch">
  <version epoch="0" ver="10.02.1" rel="16.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.02.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-9" date="1718884800">- RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-10" date="1718971200">- RHEL-38835 run the package with correct tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.02.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-12" date="1720699200">- RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-12" date="1721131200">- RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
- RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
- RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
- RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
- RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-13" date="1721217600">- RHEL-46575 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.02.1-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-15" date="1744718400">- RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
- RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
- RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
- RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
- RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-16" date="1746619200">- RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow</changelog>
</package>
<package pkgid="5fb185ca5a38c98ab8c3442eeadf1ad1f32cf5479897f25ae62399f48f809cd8" name="gi-docgen" arch="noarch">
  <version epoch="0" ver="2023.3" rel="10.el10"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2023.3-1" date="1701000000">- Update to 2023.3 (close RHBZ#2251397)</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2023.3-2" date="1702900800">- Add patch to fix broken Since/Obsoletes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2023.3-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2023.3-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2023.3-5" date="1714046400">- Add gating.yaml via API</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2023.3-6" date="1714564800">- Drop Source Code Pro depedency</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2023.3-7" date="1717502400">- Fix requirements after recent redhat-fonts change</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2023.3-8" date="1717588800">- Revert the last change</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2023.3-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2023.3-10" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="7d0229329a259389777247c47ee58196145f32b8f3c1979d837a53edc8e0d657" name="gi-docgen-doc" arch="noarch">
  <version epoch="0" ver="2023.3" rel="10.el10"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2023.3-1" date="1701000000">- Update to 2023.3 (close RHBZ#2251397)</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2023.3-2" date="1702900800">- Add patch to fix broken Since/Obsoletes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2023.3-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2023.3-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2023.3-5" date="1714046400">- Add gating.yaml via API</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2023.3-6" date="1714564800">- Drop Source Code Pro depedency</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2023.3-7" date="1717502400">- Fix requirements after recent redhat-fonts change</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2023.3-8" date="1717588800">- Revert the last change</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2023.3-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2023.3-10" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="d156919ecbd3474e7280678e5e26ac71c4c83f21c34b75904e1de1d4302fb438" name="gi-docgen-fonts" arch="noarch">
  <version epoch="0" ver="2023.3" rel="10.el10"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 2023.3-1" date="1701000000">- Update to 2023.3 (close RHBZ#2251397)</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2023.3-2" date="1702900800">- Add patch to fix broken Since/Obsoletes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2023.3-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2023.3-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2023.3-5" date="1714046400">- Add gating.yaml via API</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2023.3-6" date="1714564800">- Drop Source Code Pro depedency</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2023.3-7" date="1717502400">- Fix requirements after recent redhat-fonts change</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2023.3-8" date="1717588800">- Revert the last change</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2023.3-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2023.3-10" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="5cc587525933d1ff8e57e4c5816405822c43aa4155e47e52942258335a9f6952" name="giflib" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="24.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.2.1-20" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.2.1-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-22" date="1738843200">- fix giftext memmory access error (RHEL-77803)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-23" date="1773921600">- fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154850)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-24" date="1778500800">- rebuild</changelog>
</package>
<package pkgid="79a1ecd5d35366e0cfa5884d120aaeb900bcb26da68ffb55e937dd1736cb695a" name="giflib" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="25.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.2.1-20" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.2.1-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-22" date="1738843200">- fix giftext memmory access error (RHEL-77803)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-23" date="1773921600">- fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154850)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-24" date="1778500800">- rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-25" date="1780920000">- fix CVE-2026-26740: buffer overflow in EGifGCBToExtension (RHEL-157086)</changelog>
</package>
<package pkgid="bd3788c39110072176072c209f4e752c3c2320f1b231b0195d459e7ffce2a189" name="giflib-devel" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="24.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.2.1-20" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.2.1-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-22" date="1738843200">- fix giftext memmory access error (RHEL-77803)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-23" date="1773921600">- fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154850)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-24" date="1778500800">- rebuild</changelog>
</package>
<package pkgid="fab731dcf6e2f9be8f8a280276c60e30e840ae03c7cdb4954aed560f9e226f62" name="giflib-devel" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="25.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.2.1-20" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.2.1-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-22" date="1738843200">- fix giftext memmory access error (RHEL-77803)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-23" date="1773921600">- fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154850)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-24" date="1778500800">- rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-25" date="1780920000">- fix CVE-2026-26740: buffer overflow in EGifGCBToExtension (RHEL-157086)</changelog>
</package>
<package pkgid="a598185198d0d120e7992d346cdd603a826e2cde647ce1a3640dbb03fca69a3d" name="giflib-utils" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="24.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.2.1-20" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.2.1-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-22" date="1738843200">- fix giftext memmory access error (RHEL-77803)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-23" date="1773921600">- fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154850)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-24" date="1778500800">- rebuild</changelog>
</package>
<package pkgid="5fef000bce018ca64dc47c12bd26d0658a1df2a0e3cc86c27ad29642093da97d" name="giflib-utils" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="25.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.2.1-20" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.2.1-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-22" date="1738843200">- fix giftext memmory access error (RHEL-77803)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-23" date="1773921600">- fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154850)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-24" date="1778500800">- rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-25" date="1780920000">- fix CVE-2026-26740: buffer overflow in EGifGCBToExtension (RHEL-157086)</changelog>
</package>
<package pkgid="7332a382d84ec25a135010ac3f12a7dc108c8c619d7f68e8844d575d8192a3c4" name="git" arch="x86_64">
  <version epoch="0" ver="2.52.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.43.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.43.1-1" date="1707739200">- update to 2.43.1
- resolves: #2263575</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.43.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-1" date="1719835200">- update to 2.45.2
- add glibc-utils BuildRequires
- build docs with asciidoc instead of a asciidoctor
- drop git-p4 subpackage
- Resolves: RHEL-45572, RHEL-45215</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-3" date="1721390400">- build without perl_modcompat in EL &gt;= 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.45.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-1" date="1732795200">- update to 2.47.1
- Resolves: RHEL-63966</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-2" date="1743422400">- add the option to sanitize sideband channel messages
- Resolves: RHEL-74175</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.3-1" date="1752148800">- update to 2.47.3
- Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.52.0-1" date="1767960000">- update to 2.52.0
- Resolves: RHEL-118145, RHEL-111334</changelog>
</package>
<package pkgid="e6f3ff30139792410707efdfa42d0ad6680e4404169da84e85c14933defe6f69" name="git-all" arch="noarch">
  <version epoch="0" ver="2.52.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.43.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.43.1-1" date="1707739200">- update to 2.43.1
- resolves: #2263575</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.43.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-1" date="1719835200">- update to 2.45.2
- add glibc-utils BuildRequires
- build docs with asciidoc instead of a asciidoctor
- drop git-p4 subpackage
- Resolves: RHEL-45572, RHEL-45215</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-3" date="1721390400">- build without perl_modcompat in EL &gt;= 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.45.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-1" date="1732795200">- update to 2.47.1
- Resolves: RHEL-63966</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-2" date="1743422400">- add the option to sanitize sideband channel messages
- Resolves: RHEL-74175</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.3-1" date="1752148800">- update to 2.47.3
- Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.52.0-1" date="1767960000">- update to 2.52.0
- Resolves: RHEL-118145, RHEL-111334</changelog>
</package>
<package pkgid="634455823fa6eaca6c30ddb30719e2fde4b3150b97c4e270baafe83ad7b774cf" name="git-clang-format" arch="x86_64">
  <version epoch="0" ver="21.1.8" rel="1.el10"/>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-8" date="1749556800">- Invert symlink direction
- Fix i686 multilib installation (rhbz#2365079)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-9" date="1750075200">- Use libdir suffix in versioned prefix</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-10" date="1750161600">- Fix llvm-config alternatives handling (rhbz#2361779)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.7-1" date="1750334400">- Update to LLVM 20.1.7</changelog>
  <changelog author="Kashyap Chamarthy &lt;kchamart@redhat.com&gt; - 20.1.7-2" date="1750420800">- Add riscv64 enablement bits; thanks: Songsong Zhang
   (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.8-1" date="1752062400">- Update to LLVM 20.1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20.1.8-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 20.1.8-3" date="1753704000">- Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
- Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
- Backport fix for build of highway package on ppc64le (rhbz#2383182)</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; - 21.1.8-1" date="1771502400">- Update to 21.1.8</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 21.1.8-1" date="1771934400">- Ensure riscv64 has reduced debuginfo
- Ensure riscv64 dwz is ok</changelog>
</package>
<package pkgid="d5085785c55f38924e8c934dcba30a4c4b2018c37472a5cde07b7c0de4608afa" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.52.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.43.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.43.1-1" date="1707739200">- update to 2.43.1
- resolves: #2263575</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.43.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-1" date="1719835200">- update to 2.45.2
- add glibc-utils BuildRequires
- build docs with asciidoc instead of a asciidoctor
- drop git-p4 subpackage
- Resolves: RHEL-45572, RHEL-45215</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-3" date="1721390400">- build without perl_modcompat in EL &gt;= 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.45.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-1" date="1732795200">- update to 2.47.1
- Resolves: RHEL-63966</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-2" date="1743422400">- add the option to sanitize sideband channel messages
- Resolves: RHEL-74175</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.3-1" date="1752148800">- update to 2.47.3
- Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.52.0-1" date="1767960000">- update to 2.52.0
- Resolves: RHEL-118145, RHEL-111334</changelog>
</package>
<package pkgid="325f2d557d74ad83433a21ddb8be12d6d8ff0b87bdbfa794857d98ab7a3ef408" name="git-core-doc" arch="noarch">
  <version epoch="0" ver="2.52.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.43.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.43.1-1" date="1707739200">- update to 2.43.1
- resolves: #2263575</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.43.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-1" date="1719835200">- update to 2.45.2
- add glibc-utils BuildRequires
- build docs with asciidoc instead of a asciidoctor
- drop git-p4 subpackage
- Resolves: RHEL-45572, RHEL-45215</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-3" date="1721390400">- build without perl_modcompat in EL &gt;= 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.45.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-1" date="1732795200">- update to 2.47.1
- Resolves: RHEL-63966</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-2" date="1743422400">- add the option to sanitize sideband channel messages
- Resolves: RHEL-74175</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.3-1" date="1752148800">- update to 2.47.3
- Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.52.0-1" date="1767960000">- update to 2.52.0
- Resolves: RHEL-118145, RHEL-111334</changelog>
</package>
<package pkgid="247fdb2a11b24e4f9aeac44339791af832a7b7dd5ea21dd1194766c66f36d1f1" name="git-credential-libsecret" arch="x86_64">
  <version epoch="0" ver="2.52.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.43.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.43.1-1" date="1707739200">- update to 2.43.1
- resolves: #2263575</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.43.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-1" date="1719835200">- update to 2.45.2
- add glibc-utils BuildRequires
- build docs with asciidoc instead of a asciidoctor
- drop git-p4 subpackage
- Resolves: RHEL-45572, RHEL-45215</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-3" date="1721390400">- build without perl_modcompat in EL &gt;= 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.45.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-1" date="1732795200">- update to 2.47.1
- Resolves: RHEL-63966</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-2" date="1743422400">- add the option to sanitize sideband channel messages
- Resolves: RHEL-74175</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.3-1" date="1752148800">- update to 2.47.3
- Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.52.0-1" date="1767960000">- update to 2.52.0
- Resolves: RHEL-118145, RHEL-111334</changelog>
</package>
<package pkgid="5ffbfd6f8704b16dc2924c8a90d48353d413e9a89fa966fe96827996da2f1080" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.52.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.43.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.43.1-1" date="1707739200">- update to 2.43.1
- resolves: #2263575</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.43.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-1" date="1719835200">- update to 2.45.2
- add glibc-utils BuildRequires
- build docs with asciidoc instead of a asciidoctor
- drop git-p4 subpackage
- Resolves: RHEL-45572, RHEL-45215</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-3" date="1721390400">- build without perl_modcompat in EL &gt;= 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.45.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-1" date="1732795200">- update to 2.47.1
- Resolves: RHEL-63966</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-2" date="1743422400">- add the option to sanitize sideband channel messages
- Resolves: RHEL-74175</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.3-1" date="1752148800">- update to 2.47.3
- Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.52.0-1" date="1767960000">- update to 2.52.0
- Resolves: RHEL-118145, RHEL-111334</changelog>
</package>
<package pkgid="0f38309835a754d80da1ed6b55a27610b28c0f84d334fec6311e9908686d2776" name="git-email" arch="noarch">
  <version epoch="0" ver="2.52.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.43.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.43.1-1" date="1707739200">- update to 2.43.1
- resolves: #2263575</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.43.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-1" date="1719835200">- update to 2.45.2
- add glibc-utils BuildRequires
- build docs with asciidoc instead of a asciidoctor
- drop git-p4 subpackage
- Resolves: RHEL-45572, RHEL-45215</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-3" date="1721390400">- build without perl_modcompat in EL &gt;= 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.45.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-1" date="1732795200">- update to 2.47.1
- Resolves: RHEL-63966</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-2" date="1743422400">- add the option to sanitize sideband channel messages
- Resolves: RHEL-74175</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.3-1" date="1752148800">- update to 2.47.3
- Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.52.0-1" date="1767960000">- update to 2.52.0
- Resolves: RHEL-118145, RHEL-111334</changelog>
</package>
<package pkgid="1a53ca5cbe77ca2be3742804cca70c11428705a7ef78cdada937867c34e8650a" name="git-gui" arch="noarch">
  <version epoch="0" ver="2.52.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.43.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.43.1-1" date="1707739200">- update to 2.43.1
- resolves: #2263575</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.43.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-1" date="1719835200">- update to 2.45.2
- add glibc-utils BuildRequires
- build docs with asciidoc instead of a asciidoctor
- drop git-p4 subpackage
- Resolves: RHEL-45572, RHEL-45215</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-3" date="1721390400">- build without perl_modcompat in EL &gt;= 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.45.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-1" date="1732795200">- update to 2.47.1
- Resolves: RHEL-63966</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-2" date="1743422400">- add the option to sanitize sideband channel messages
- Resolves: RHEL-74175</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.3-1" date="1752148800">- update to 2.47.3
- Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.52.0-1" date="1767960000">- update to 2.52.0
- Resolves: RHEL-118145, RHEL-111334</changelog>
</package>
<package pkgid="6404d57b4e18ebcde8f341aa32c19762a2dddafa50a6f083ead2390705dc75f4" name="git-instaweb" arch="noarch">
  <version epoch="0" ver="2.52.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.43.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.43.1-1" date="1707739200">- update to 2.43.1
- resolves: #2263575</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.43.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-1" date="1719835200">- update to 2.45.2
- add glibc-utils BuildRequires
- build docs with asciidoc instead of a asciidoctor
- drop git-p4 subpackage
- Resolves: RHEL-45572, RHEL-45215</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-3" date="1721390400">- build without perl_modcompat in EL &gt;= 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.45.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-1" date="1732795200">- update to 2.47.1
- Resolves: RHEL-63966</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-2" date="1743422400">- add the option to sanitize sideband channel messages
- Resolves: RHEL-74175</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.3-1" date="1752148800">- update to 2.47.3
- Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.52.0-1" date="1767960000">- update to 2.52.0
- Resolves: RHEL-118145, RHEL-111334</changelog>
</package>
<package pkgid="996bc245a9039a0e1a4422f64a95474cef33f9ee5e486520c671e3bf9f3b83fd" name="git-lfs" arch="x86_64">
  <version epoch="0" ver="3.7.1" rel="4.el10_2"/>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.5.1-5" date="1728648000">- Rebuild with new Golang</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.0-1" date="1734004800">- Update to 3.6.0</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-1" date="1736942400">- Update to 3.6.1</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-2" date="1748952000">- Rebuild with new Golang</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-3" date="1754913600">- Use constant format string</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-1" date="1767614400">- Update to 3.7.1</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-2" date="1769083200">- Rebuild with new Golang</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-3" date="1771243200">- Rebuild with new Golang</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-4" date="1777377600">- Rebuild with new Golang</changelog>
</package>
<package pkgid="31271bf0b9070f6c3bcf29cee459b665e8e4470420ee7d28b9229fa7bd7ac4c8" name="git-lfs" arch="x86_64">
  <version epoch="0" ver="3.7.1" rel="5.el10_2.5"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.0-1" date="1734004800">- Update to 3.6.0</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-1" date="1736942400">- Update to 3.6.1</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-2" date="1748952000">- Rebuild with new Golang</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-3" date="1754913600">- Use constant format string</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-1" date="1767614400">- Update to 3.7.1</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-2" date="1769083200">- Rebuild with new Golang</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-3" date="1771243200">- Rebuild with new Golang</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-4" date="1777377600">- Rebuild with new Golang</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.7.1-5" date="1781179200">- Fix CVE-2026-39821 in vendored golang.org/x/net idna package</changelog>
</package>
<package pkgid="8172af8c513e5eb7181677cd9eb865d7994f5510310ffb6cff49b78f46b0c38f" name="git-lfs" arch="x86_64">
  <version epoch="0" ver="3.7.1" rel="5.el10_2.6"/>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.0-1" date="1734004800">- Update to 3.6.0</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-1" date="1736942400">- Update to 3.6.1</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-2" date="1748952000">- Rebuild with new Golang</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.6.1-3" date="1754913600">- Use constant format string</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-1" date="1767614400">- Update to 3.7.1</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-2" date="1769083200">- Rebuild with new Golang</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-3" date="1771243200">- Rebuild with new Golang</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 3.7.1-4" date="1777377600">- Rebuild with new Golang</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.7.1-5" date="1781179200">- Fix CVE-2026-39821 in vendored golang.org/x/net idna package</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.7.1-6" date="1783512000">- Rebuild with new Golang</changelog>
</package>
<package pkgid="b96af065d86fe5c4d41fb2c4b578fd52f7a9bd75a2340e91b64e3eb3fb014a7b" name="git-subtree" arch="noarch">
  <version epoch="0" ver="2.52.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.43.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.43.1-1" date="1707739200">- update to 2.43.1
- resolves: #2263575</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.43.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-1" date="1719835200">- update to 2.45.2
- add glibc-utils BuildRequires
- build docs with asciidoc instead of a asciidoctor
- drop git-p4 subpackage
- Resolves: RHEL-45572, RHEL-45215</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-3" date="1721390400">- build without perl_modcompat in EL &gt;= 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.45.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-1" date="1732795200">- update to 2.47.1
- Resolves: RHEL-63966</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-2" date="1743422400">- add the option to sanitize sideband channel messages
- Resolves: RHEL-74175</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.3-1" date="1752148800">- update to 2.47.3
- Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.52.0-1" date="1767960000">- update to 2.52.0
- Resolves: RHEL-118145, RHEL-111334</changelog>
</package>
<package pkgid="aab2e1d82d3fd419fab24265e0555a0fa25adc6ceeaa77e62e09567998f03ec3" name="git-svn" arch="noarch">
  <version epoch="0" ver="2.52.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.43.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.43.1-1" date="1707739200">- update to 2.43.1
- resolves: #2263575</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.43.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-1" date="1719835200">- update to 2.45.2
- add glibc-utils BuildRequires
- build docs with asciidoc instead of a asciidoctor
- drop git-p4 subpackage
- Resolves: RHEL-45572, RHEL-45215</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-3" date="1721390400">- build without perl_modcompat in EL &gt;= 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.45.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-1" date="1732795200">- update to 2.47.1
- Resolves: RHEL-63966</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-2" date="1743422400">- add the option to sanitize sideband channel messages
- Resolves: RHEL-74175</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.3-1" date="1752148800">- update to 2.47.3
- Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.52.0-1" date="1767960000">- update to 2.52.0
- Resolves: RHEL-118145, RHEL-111334</changelog>
</package>
<package pkgid="0eee43cc46744e88a457b61f3c68cf47c2b42d01cf25331d246c051c47dbfda7" name="gitk" arch="noarch">
  <version epoch="0" ver="2.52.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.43.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.43.1-1" date="1707739200">- update to 2.43.1
- resolves: #2263575</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.43.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-1" date="1719835200">- update to 2.45.2
- add glibc-utils BuildRequires
- build docs with asciidoc instead of a asciidoctor
- drop git-p4 subpackage
- Resolves: RHEL-45572, RHEL-45215</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-3" date="1721390400">- build without perl_modcompat in EL &gt;= 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.45.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-1" date="1732795200">- update to 2.47.1
- Resolves: RHEL-63966</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-2" date="1743422400">- add the option to sanitize sideband channel messages
- Resolves: RHEL-74175</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.3-1" date="1752148800">- update to 2.47.3
- Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.52.0-1" date="1767960000">- update to 2.52.0
- Resolves: RHEL-118145, RHEL-111334</changelog>
</package>
<package pkgid="f6090bb861a9ddc5f64de19e71212a6d3a455ea6f1118e90c7f95a49efcf1403" name="gitweb" arch="noarch">
  <version epoch="0" ver="2.52.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.43.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.43.1-1" date="1707739200">- update to 2.43.1
- resolves: #2263575</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.43.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-1" date="1719835200">- update to 2.45.2
- add glibc-utils BuildRequires
- build docs with asciidoc instead of a asciidoctor
- drop git-p4 subpackage
- Resolves: RHEL-45572, RHEL-45215</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.45.2-3" date="1721390400">- build without perl_modcompat in EL &gt;= 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.45.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-1" date="1732795200">- update to 2.47.1
- Resolves: RHEL-63966</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.1-2" date="1743422400">- add the option to sanitize sideband channel messages
- Resolves: RHEL-74175</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.47.3-1" date="1752148800">- update to 2.47.3
- Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 2.52.0-1" date="1767960000">- update to 2.52.0
- Resolves: RHEL-118145, RHEL-111334</changelog>
</package>
<package pkgid="00eefac7ff96bd685abac13189ecb3de06956c89a1a19bdf08601c138dc4e619" name="gjs" arch="x86_64">
  <version epoch="0" ver="1.80.2" rel="11.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.80.2-1" date="1711454400">- Update to 1.80.2</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-3" date="1715860800">- Bundle mozjs on RHEL
- Fix SPDX license information
- Add rpminspect configuration</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-4" date="1716206400">- Adjust rpminspect configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.80.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-6" date="1719835200">- Re-enable LTO for all archs
  Resolves: RHEL-40915</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-7" date="1719835201">- Bump bundled mozjs version
  Resolves: RHEL-45601</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-8" date="1720440000">- Replace xvfb dependency
  Resolves: RHEL-36637</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-9" date="1725969600">- Update mozjs to 115.15.0
  Resolves: RHEL-58016</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-10" date="1726142400">- Actually apply test patch
  Related: Resolves: RHEL-58016</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.80.2-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6cad833b7f4edd8d1662921820b8a32bdac4993a2f16c70d25768d4fff87e33d" name="gjs-devel" arch="x86_64">
  <version epoch="0" ver="1.80.2" rel="11.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.80.2-1" date="1711454400">- Update to 1.80.2</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-3" date="1715860800">- Bundle mozjs on RHEL
- Fix SPDX license information
- Add rpminspect configuration</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-4" date="1716206400">- Adjust rpminspect configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.80.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-6" date="1719835200">- Re-enable LTO for all archs
  Resolves: RHEL-40915</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-7" date="1719835201">- Bump bundled mozjs version
  Resolves: RHEL-45601</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-8" date="1720440000">- Replace xvfb dependency
  Resolves: RHEL-36637</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-9" date="1725969600">- Update mozjs to 115.15.0
  Resolves: RHEL-58016</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-10" date="1726142400">- Actually apply test patch
  Related: Resolves: RHEL-58016</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.80.2-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ce5f7fc824f40489016b2590b5c8e26dbd060fcaf84ac02c18623bc7c7da6d27" name="gjs-tests" arch="x86_64">
  <version epoch="0" ver="1.80.2" rel="11.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.80.2-1" date="1711454400">- Update to 1.80.2</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-3" date="1715860800">- Bundle mozjs on RHEL
- Fix SPDX license information
- Add rpminspect configuration</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-4" date="1716206400">- Adjust rpminspect configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.80.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-6" date="1719835200">- Re-enable LTO for all archs
  Resolves: RHEL-40915</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-7" date="1719835201">- Bump bundled mozjs version
  Resolves: RHEL-45601</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-8" date="1720440000">- Replace xvfb dependency
  Resolves: RHEL-36637</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-9" date="1725969600">- Update mozjs to 115.15.0
  Resolves: RHEL-58016</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.80.2-10" date="1726142400">- Actually apply test patch
  Related: Resolves: RHEL-58016</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.80.2-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="64813065f8b098b3746719ac2e292623a891997e98dc3e33caab5cb4dcd95b45" name="glib-networking" arch="x86_64">
  <version epoch="0" ver="2.80.0" rel="3.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.78.0-3" date="1702641600">- Run tests during check phase</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.78.0-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.78.0-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.80~alpha-1" date="1706270400">- Update to 2.80.alpha</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80~alpha-2" date="1712664000">- Update file gating.yaml</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.80~alpha-3" date="1713441600">- Fix license tag so its validated by license-validate</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80~alpha-4" date="1713441601">- libproxy lives! Remove the !libproxy conditionals</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.0-1" date="1713441602">- Update to 2.80.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.80.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.80.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="6cd4e071c36e4865375ca8059c760d57ae9c00dbfac04fd35b3201ade7f39acc" name="glib-networking-tests" arch="x86_64">
  <version epoch="0" ver="2.80.0" rel="3.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.78.0-3" date="1702641600">- Run tests during check phase</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.78.0-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.78.0-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.80~alpha-1" date="1706270400">- Update to 2.80.alpha</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80~alpha-2" date="1712664000">- Update file gating.yaml</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.80~alpha-3" date="1713441600">- Fix license tag so its validated by license-validate</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80~alpha-4" date="1713441601">- libproxy lives! Remove the !libproxy conditionals</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.0-1" date="1713441602">- Update to 2.80.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.80.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.80.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="37890d743545744383773b0e6ee6118c204e36bfb4174c0257ff8b9168976780" name="glib2" arch="x86_64">
  <version epoch="0" ver="2.80.4" rel="12.el10_2.13"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.80.4-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-5" date="1730289600">- metadata preparation for RHIVOS RHELMISC-7537</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-6" date="1742558400">- Add patch to fix test failure with newer tzdata</changelog>
  <changelog author="Lumir Balhar &lt;lbalhar@redhat.com&gt; - 2.80.4-7" date="1742817600">- Add new systemtap-sdt-dtrace to build deps</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-8" date="1752148800">- Add patches for CVE-2024-52533 and CVE-2025-4373</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-9" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.80.4-10" date="1758024001">- Backport patch to prevent sending a serial of zero on overflow</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 2.80.4-11" date="1764158400">- Allow to get startup notify ID without GAppInfo</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-12" date="1768824000">- Add patch for CVE-2025-13601 and patches for GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-13" date="1776945600">- Fix CVE-2025-14087 and CVE-2025-14512</changelog>
</package>
<package pkgid="8d280d6b7dc381838a644a9b669338486c36614aca5d5f335d7dc2e50d66b11a" name="glib2" arch="x86_64">
  <version epoch="0" ver="2.80.4" rel="12.el10_2.14"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-5" date="1730289600">- metadata preparation for RHIVOS RHELMISC-7537</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-6" date="1742558400">- Add patch to fix test failure with newer tzdata</changelog>
  <changelog author="Lumir Balhar &lt;lbalhar@redhat.com&gt; - 2.80.4-7" date="1742817600">- Add new systemtap-sdt-dtrace to build deps</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-8" date="1752148800">- Add patches for CVE-2024-52533 and CVE-2025-4373</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-9" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.80.4-10" date="1758024001">- Backport patch to prevent sending a serial of zero on overflow</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 2.80.4-11" date="1764158400">- Allow to get startup notify ID without GAppInfo</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-12" date="1768824000">- Add patch for CVE-2025-13601 and patches for GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-13" date="1776945600">- Fix CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-14" date="1783598400">- Fix CVE-2026-58016: D-Bus introspection XML node nesting validation</changelog>
</package>
<package pkgid="33c481d75b1bd7ac78b43bc238b7a5517618dd18a6f560c06292c0b75cdce70d" name="glib2" arch="x86_64">
  <version epoch="0" ver="2.80.4" rel="12.el10_2.21"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-12" date="1768824000">- Add patch for CVE-2025-13601 and patches for GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-13" date="1776945600">- Fix CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-14" date="1783598400">- Fix CVE-2026-58016: D-Bus introspection XML node nesting validation</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-15" date="1785412800">- Fix CVE-2026-58013: GIOChannel memcmp buffer over-read</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-16" date="1785412801">- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-17" date="1785412802">- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-18" date="1785412803">- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-19" date="1785412804">- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-20" date="1785412805">- Fix CVE-2026-58011: range validation in g_date_time_add_full()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-21" date="1785412806">- Fix CVE-2026-15588: limit D-Bus auth line read length</changelog>
</package>
<package pkgid="7baa63f33aabc5ada0fbe7f6a6919c503654b09168223bcae41653f405c9aad2" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.80.4" rel="12.el10_2.13"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.80.4-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-5" date="1730289600">- metadata preparation for RHIVOS RHELMISC-7537</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-6" date="1742558400">- Add patch to fix test failure with newer tzdata</changelog>
  <changelog author="Lumir Balhar &lt;lbalhar@redhat.com&gt; - 2.80.4-7" date="1742817600">- Add new systemtap-sdt-dtrace to build deps</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-8" date="1752148800">- Add patches for CVE-2024-52533 and CVE-2025-4373</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-9" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.80.4-10" date="1758024001">- Backport patch to prevent sending a serial of zero on overflow</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 2.80.4-11" date="1764158400">- Allow to get startup notify ID without GAppInfo</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-12" date="1768824000">- Add patch for CVE-2025-13601 and patches for GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-13" date="1776945600">- Fix CVE-2025-14087 and CVE-2025-14512</changelog>
</package>
<package pkgid="cde6044d54f72acd9044b51f5a12c071ab202948c3dc17f9ba9e922cc3193ad0" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.80.4" rel="12.el10_2.14"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-5" date="1730289600">- metadata preparation for RHIVOS RHELMISC-7537</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-6" date="1742558400">- Add patch to fix test failure with newer tzdata</changelog>
  <changelog author="Lumir Balhar &lt;lbalhar@redhat.com&gt; - 2.80.4-7" date="1742817600">- Add new systemtap-sdt-dtrace to build deps</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-8" date="1752148800">- Add patches for CVE-2024-52533 and CVE-2025-4373</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-9" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.80.4-10" date="1758024001">- Backport patch to prevent sending a serial of zero on overflow</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 2.80.4-11" date="1764158400">- Allow to get startup notify ID without GAppInfo</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-12" date="1768824000">- Add patch for CVE-2025-13601 and patches for GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-13" date="1776945600">- Fix CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-14" date="1783598400">- Fix CVE-2026-58016: D-Bus introspection XML node nesting validation</changelog>
</package>
<package pkgid="ec77c2e2dd0a2370859fe81be0eda5284e69cc886401670879976ccd71a21595" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.80.4" rel="12.el10_2.21"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-12" date="1768824000">- Add patch for CVE-2025-13601 and patches for GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-13" date="1776945600">- Fix CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-14" date="1783598400">- Fix CVE-2026-58016: D-Bus introspection XML node nesting validation</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-15" date="1785412800">- Fix CVE-2026-58013: GIOChannel memcmp buffer over-read</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-16" date="1785412801">- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-17" date="1785412802">- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-18" date="1785412803">- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-19" date="1785412804">- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-20" date="1785412805">- Fix CVE-2026-58011: range validation in g_date_time_add_full()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-21" date="1785412806">- Fix CVE-2026-15588: limit D-Bus auth line read length</changelog>
</package>
<package pkgid="e4650065299f721cff6dc294361b52e82a90203d0551d06254a939d84742173a" name="glib2-doc" arch="x86_64">
  <version epoch="0" ver="2.80.4" rel="12.el10_2.13"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.80.4-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-5" date="1730289600">- metadata preparation for RHIVOS RHELMISC-7537</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-6" date="1742558400">- Add patch to fix test failure with newer tzdata</changelog>
  <changelog author="Lumir Balhar &lt;lbalhar@redhat.com&gt; - 2.80.4-7" date="1742817600">- Add new systemtap-sdt-dtrace to build deps</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-8" date="1752148800">- Add patches for CVE-2024-52533 and CVE-2025-4373</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-9" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.80.4-10" date="1758024001">- Backport patch to prevent sending a serial of zero on overflow</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 2.80.4-11" date="1764158400">- Allow to get startup notify ID without GAppInfo</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-12" date="1768824000">- Add patch for CVE-2025-13601 and patches for GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-13" date="1776945600">- Fix CVE-2025-14087 and CVE-2025-14512</changelog>
</package>
<package pkgid="c5866e8a4fca4c993e5b9bafd93c60f467c29a0d4398da2391860b117b45c018" name="glib2-doc" arch="x86_64">
  <version epoch="0" ver="2.80.4" rel="12.el10_2.14"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-5" date="1730289600">- metadata preparation for RHIVOS RHELMISC-7537</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-6" date="1742558400">- Add patch to fix test failure with newer tzdata</changelog>
  <changelog author="Lumir Balhar &lt;lbalhar@redhat.com&gt; - 2.80.4-7" date="1742817600">- Add new systemtap-sdt-dtrace to build deps</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-8" date="1752148800">- Add patches for CVE-2024-52533 and CVE-2025-4373</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-9" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.80.4-10" date="1758024001">- Backport patch to prevent sending a serial of zero on overflow</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 2.80.4-11" date="1764158400">- Allow to get startup notify ID without GAppInfo</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-12" date="1768824000">- Add patch for CVE-2025-13601 and patches for GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-13" date="1776945600">- Fix CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-14" date="1783598400">- Fix CVE-2026-58016: D-Bus introspection XML node nesting validation</changelog>
</package>
<package pkgid="905b0c2759d746d3eb7ae3270c7fefb34dbfe0c3fe7abf6443f210ca335f5a69" name="glib2-doc" arch="x86_64">
  <version epoch="0" ver="2.80.4" rel="12.el10_2.21"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-12" date="1768824000">- Add patch for CVE-2025-13601 and patches for GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-13" date="1776945600">- Fix CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-14" date="1783598400">- Fix CVE-2026-58016: D-Bus introspection XML node nesting validation</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-15" date="1785412800">- Fix CVE-2026-58013: GIOChannel memcmp buffer over-read</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-16" date="1785412801">- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-17" date="1785412802">- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-18" date="1785412803">- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-19" date="1785412804">- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-20" date="1785412805">- Fix CVE-2026-58011: range validation in g_date_time_add_full()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-21" date="1785412806">- Fix CVE-2026-15588: limit D-Bus auth line read length</changelog>
</package>
<package pkgid="51d0f0041873a1a43e14eceb02ac41e7448a562e05513564fb17298975e7f480" name="glib2-static" arch="x86_64">
  <version epoch="0" ver="2.80.4" rel="12.el10_2.13"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.80.4-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-5" date="1730289600">- metadata preparation for RHIVOS RHELMISC-7537</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-6" date="1742558400">- Add patch to fix test failure with newer tzdata</changelog>
  <changelog author="Lumir Balhar &lt;lbalhar@redhat.com&gt; - 2.80.4-7" date="1742817600">- Add new systemtap-sdt-dtrace to build deps</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-8" date="1752148800">- Add patches for CVE-2024-52533 and CVE-2025-4373</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-9" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.80.4-10" date="1758024001">- Backport patch to prevent sending a serial of zero on overflow</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 2.80.4-11" date="1764158400">- Allow to get startup notify ID without GAppInfo</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-12" date="1768824000">- Add patch for CVE-2025-13601 and patches for GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-13" date="1776945600">- Fix CVE-2025-14087 and CVE-2025-14512</changelog>
</package>
<package pkgid="d68c70fbf0a63736ca28342e7d84fa6c761ee5a0aa8cb012e1f3897fdce46d84" name="glib2-static" arch="x86_64">
  <version epoch="0" ver="2.80.4" rel="12.el10_2.14"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-5" date="1730289600">- metadata preparation for RHIVOS RHELMISC-7537</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-6" date="1742558400">- Add patch to fix test failure with newer tzdata</changelog>
  <changelog author="Lumir Balhar &lt;lbalhar@redhat.com&gt; - 2.80.4-7" date="1742817600">- Add new systemtap-sdt-dtrace to build deps</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-8" date="1752148800">- Add patches for CVE-2024-52533 and CVE-2025-4373</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-9" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.80.4-10" date="1758024001">- Backport patch to prevent sending a serial of zero on overflow</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 2.80.4-11" date="1764158400">- Allow to get startup notify ID without GAppInfo</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-12" date="1768824000">- Add patch for CVE-2025-13601 and patches for GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-13" date="1776945600">- Fix CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-14" date="1783598400">- Fix CVE-2026-58016: D-Bus introspection XML node nesting validation</changelog>
</package>
<package pkgid="ac7dfe55bbafe25213b969bf3c4f68a46486d606b0d152b082194d5d2b139aa3" name="glib2-static" arch="x86_64">
  <version epoch="0" ver="2.80.4" rel="12.el10_2.21"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-12" date="1768824000">- Add patch for CVE-2025-13601 and patches for GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-13" date="1776945600">- Fix CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-14" date="1783598400">- Fix CVE-2026-58016: D-Bus introspection XML node nesting validation</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-15" date="1785412800">- Fix CVE-2026-58013: GIOChannel memcmp buffer over-read</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-16" date="1785412801">- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-17" date="1785412802">- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-18" date="1785412803">- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-19" date="1785412804">- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-20" date="1785412805">- Fix CVE-2026-58011: range validation in g_date_time_add_full()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-21" date="1785412806">- Fix CVE-2026-15588: limit D-Bus auth line read length</changelog>
</package>
<package pkgid="24bda55c090ef575b1624b0eaf585b56575ea430292658f38dd5372b8ffea63a" name="glib2-tests" arch="x86_64">
  <version epoch="0" ver="2.80.4" rel="12.el10_2.13"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.80.4-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-5" date="1730289600">- metadata preparation for RHIVOS RHELMISC-7537</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-6" date="1742558400">- Add patch to fix test failure with newer tzdata</changelog>
  <changelog author="Lumir Balhar &lt;lbalhar@redhat.com&gt; - 2.80.4-7" date="1742817600">- Add new systemtap-sdt-dtrace to build deps</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-8" date="1752148800">- Add patches for CVE-2024-52533 and CVE-2025-4373</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-9" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.80.4-10" date="1758024001">- Backport patch to prevent sending a serial of zero on overflow</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 2.80.4-11" date="1764158400">- Allow to get startup notify ID without GAppInfo</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-12" date="1768824000">- Add patch for CVE-2025-13601 and patches for GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-13" date="1776945600">- Fix CVE-2025-14087 and CVE-2025-14512</changelog>
</package>
<package pkgid="0aa8257bc985585c69485a51000945841474a84f6c3014e2b3b0a0371c4576a4" name="glib2-tests" arch="x86_64">
  <version epoch="0" ver="2.80.4" rel="12.el10_2.14"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-5" date="1730289600">- metadata preparation for RHIVOS RHELMISC-7537</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-6" date="1742558400">- Add patch to fix test failure with newer tzdata</changelog>
  <changelog author="Lumir Balhar &lt;lbalhar@redhat.com&gt; - 2.80.4-7" date="1742817600">- Add new systemtap-sdt-dtrace to build deps</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.80.4-8" date="1752148800">- Add patches for CVE-2024-52533 and CVE-2025-4373</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.80.4-9" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.80.4-10" date="1758024001">- Backport patch to prevent sending a serial of zero on overflow</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 2.80.4-11" date="1764158400">- Allow to get startup notify ID without GAppInfo</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-12" date="1768824000">- Add patch for CVE-2025-13601 and patches for GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-13" date="1776945600">- Fix CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-14" date="1783598400">- Fix CVE-2026-58016: D-Bus introspection XML node nesting validation</changelog>
</package>
<package pkgid="1e35c6eb58616449c78359cb966d7bc226be0b90916a17dc5e80473bef38b66a" name="glib2-tests" arch="x86_64">
  <version epoch="0" ver="2.80.4" rel="12.el10_2.21"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-12" date="1768824000">- Add patch for CVE-2025-13601 and patches for GUnixMount issues</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@gnome.org&gt; - 2.80.4-13" date="1776945600">- Fix CVE-2025-14087 and CVE-2025-14512</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-14" date="1783598400">- Fix CVE-2026-58016: D-Bus introspection XML node nesting validation</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-15" date="1785412800">- Fix CVE-2026-58013: GIOChannel memcmp buffer over-read</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-16" date="1785412801">- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-17" date="1785412802">- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-18" date="1785412803">- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-19" date="1785412804">- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-20" date="1785412805">- Fix CVE-2026-58011: range validation in g_date_time_add_full()</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.80.4-21" date="1785412806">- Fix CVE-2026-15588: limit D-Bus auth line read length</changelog>
</package>
<package pkgid="1196be4e6ecca5ff738f48f8d71f7e736afba0b3b9e3e658b77688763ac43f4b" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="085c11d7f19ab97a52323342b91336572822df98cdd5dddd6b58c39dd1ddfb2a" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="7599b50019e955190adcfd1954462f3285de292cda5c24f646b0ac6a5ab75094" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="0af7f2aefc705d477e7e155981c8112f8fa3827b4fa8c526691c7a41b1f19172" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="4f3f5a0edffc3e7808974ed94a85c8dd354ac0c55e5c2f9246b5565868b117de" name="glibc-all-langpacks" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="0fde9dad9ad64421edd2716deb943774883908f2c6756834dfa1e91782726125" name="glibc-all-langpacks" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="61fea6d27f798bcc37764f99e3f53f7e83e5ea087659b693c60c97335fb759c5" name="glibc-all-langpacks" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="2470509d819e7d56c0bead06efb408f2341e469732455ed1e5096987d15d9821" name="glibc-all-langpacks" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="f0ba6557ae86b41820b114b20c9bf4b9b0147a7854ab48e9c1bec6832d76fa08" name="glibc-benchtests" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="c17545ef047867bd7dddf26d68f7fbccd33a3ff93bbb810ac5f4759d821c9bf9" name="glibc-benchtests" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="f60e39877b31b7e198b2b52c56a5ea87a20a7dbde3466e7d79cdb427e38b05e8" name="glibc-benchtests" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="f62b916cc8a8ccf8ca462786d377990de7b62184a37e0761c078c63022a7d523" name="glibc-benchtests" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="ba2e715852620e403d2e230749bb76a36899e4fa58a27f195d0d9d5e2a7e3e39" name="glibc-common" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="c6675977de77be3c9e95e2b95285b1debc86670e68d7fa92f5dfd9c13828042d" name="glibc-common" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="e88f92caad55533f6fa5d28829e1d877d5159c23f02a7d1cfe79fa5fb44e49b7" name="glibc-common" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="81dcf047ce5ed19c506bd3cda72f80f87f12f0b9ce2e92e59f5d6c1604d80657" name="glibc-common" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="f32c41e3b9cfb4b5a0cc33aa974ecc14879ef81c2540aa666c7ffae8bfd93691" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="de77cf9d4267f11aaf752b646245161e66f2670086cb2535333b204997cb82c0" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="093b08cece91deea8d5bc6891bad85d44ea460b8f1e0002da1392d326f48850c" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="3116af11c612afcbd6aaf5f4a38f1561e7134e426415998a097bd0b480aa3328" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="253363a2a09d66db4e9c196ee3ebfe905cc34969af74f9e4687ca2a2f744d95b" name="glibc-doc" arch="noarch">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="4c7a667d8119e9cff990b2edde3413b0c8831aa70c15a6ab257849dd25e69fa8" name="glibc-doc" arch="noarch">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="7f9d25931629d5e80a20a983f2df10ff6116fb77008af05fa36b10610c34aff5" name="glibc-doc" arch="noarch">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="c5d3197081c454360d6c634682fd8d69a3d6bf63e7a2fe7404ae12d796b0039b" name="glibc-doc" arch="noarch">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="3dcf8337d499f79127d6bc439e54137ae6a44149d624d7fa90c90f2b0f5a3470" name="glibc-gconv-extra" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="5138a8e8050e76aa8a8cb9380981c6baa198a7260b7b92cf2b4a6b7029366167" name="glibc-gconv-extra" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="983dcf6e1165ed24e675f61c8593281b3749592e8e3d4d70189243d2a82b1a3d" name="glibc-gconv-extra" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="ff0a87c0f5ea15da0640156a14c006c9a3666746fab181c72692244afa737398" name="glibc-gconv-extra" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="90e8e043ab82b7a8aa6cebb8ba7f375b3f71676405f821f839613ce0fdf27629" name="glibc-langpack-aa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="f3ed6fe45f7893c1c6c1adf91b5bd0a10e824123c4da8168cd4cab6f8539984e" name="glibc-langpack-aa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="402fd8c5bda22f6ff3ffd083d2c9aa7cf3122bdeb48d4266576ce65e798d4d36" name="glibc-langpack-aa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="6e8cbb0c3c3cf5539a63c5d56c29aa3cffa074b94aaef18e3235d669b6707e58" name="glibc-langpack-aa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="af3cca551ca01a5c3c9a0e523ee9e2c765e4fadac2702f58ce395bdd0b43d8fb" name="glibc-langpack-af" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="8fdbb5820e3d35d14dca8bd7a53634c859b4de049ea75643ef74f9d03a865d8a" name="glibc-langpack-af" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="682c87990ff1b957afff648b9084b1a46a5d07808e16097b1d3f4093af005cd5" name="glibc-langpack-af" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="467b22b61798ad5fa4ccbf8d6ff31c26e7fbef808ac7c59ecb6edfabedab51ae" name="glibc-langpack-af" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="067d3ec808a3d10d3448f3930ddb1803e5a759cb699284b75371dbbd4eb62ab8" name="glibc-langpack-agr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="4641055ef0063cf0bd8789c3a9a3956b5d01e57b4b701f679bb7d46302b5d864" name="glibc-langpack-agr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="20e44dfa5de0afa771e1e9dde4af8df7cdc4726498579473685b17195781bf6c" name="glibc-langpack-agr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="c64e6dc2114a3d302073b1917979b35268ffa0e37a5fd1a59b490c6d4136b8f3" name="glibc-langpack-agr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="4bef5783b71009f22cd7bba36fb645683c0f0fc298912f0f7f4059c4d1243c85" name="glibc-langpack-ak" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="f24597951cfef34b007d97ec2d1b7ae6bad790aea11d014b17cc32f032ebc421" name="glibc-langpack-ak" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="388b970eabe7f79ba9b11ac4016553f31cac5d4815fdd620db1a07ea170aaa94" name="glibc-langpack-ak" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="fbef445c22655efab41516553a2d9e16b181c150b2a13f939e3685702ca22ac9" name="glibc-langpack-ak" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="fc01d99d1357816b243a9449d38907a7ca2d561568dbf37198e3c881ffdddbd5" name="glibc-langpack-am" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="55b2a36df2500e174c08bd3ec35d4c175c77e5cf17c3cd6bd1f65c74ff110770" name="glibc-langpack-am" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="2a5d3e024e87a77cd4866fae7e11e4377afb1327bcec25211e57c279cb00f3d3" name="glibc-langpack-am" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="9a09e3178b0263c4a507d1430083d7737428b0066b7fe03cb442b6f8a9e99099" name="glibc-langpack-am" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="df09262390253620a2449aa56f270771e7f487faeb4750a9e56b9deb2b8ffad5" name="glibc-langpack-an" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="9479d54d3819e1f8de1c973d1c620bab5a16c708bc4fef5ff1a7df0b04a90fb2" name="glibc-langpack-an" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="05566e4ee8f02b9f98ddce8dd95e2d8746b9c8f75dac4d9d2fcfaabbeedd5c3c" name="glibc-langpack-an" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="8bcf23fe715489fe6a67e12d222d6e782bd671eb7c84b9d2f28d33926b4a5c85" name="glibc-langpack-an" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="dc8bd30a32b5a8d3d8d9f1f3ab959696ef98984e8be3ce69b49dbe52f188d967" name="glibc-langpack-anp" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="b63990738ef10b1f6f6f88a9482fca60fdaea96b56a8d2f221d8904ec0383312" name="glibc-langpack-anp" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="9adca46d14bdbe2bcfde18541a81291989e509721c429777f8d0f2a13c45b45a" name="glibc-langpack-anp" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="19d1d694d28c07331d193146819279ef047773be4a18798266da01edb6c1395a" name="glibc-langpack-anp" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="e06e307d9208f75e72d71c0005bf28b75c043672a9da19381d0dbf0903a9f349" name="glibc-langpack-ar" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="6ec3e3fb5a3ed2c500d02e6e2a0c9e17d5553398dddf78ba0dce2cf70b50d4da" name="glibc-langpack-ar" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="b05887138f3d38b4a0a31583594537a951b875d51afbd51e355c3d0bf258b5cc" name="glibc-langpack-ar" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="1a07ec24e522c05174cfa32f5d819ec4d360b0adb1f31f4a4859d4214ef67b3d" name="glibc-langpack-ar" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="4afdd95ca96627a5b679c92e85ef4122a5d4a41fd45572b6bc8b03c11387192e" name="glibc-langpack-as" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="a1f5c1f1c9a2994b17767daf65f186dd59ab264e5d475ed9622777ded8e3ba88" name="glibc-langpack-as" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="e39f9466c7dba9a3791015ac63888229b6016066bb35c72df5c38c0d36276488" name="glibc-langpack-as" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="023692a5fd6431a0a97e59ed9dc7d8a2a074e7dbaca24d9407215113fa4b3a28" name="glibc-langpack-as" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="a2735019bc704fcc467b2ed46083cea2febe68a005876a3338b587a34f7cc39f" name="glibc-langpack-ast" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="b8369fbf17726c8cde11b71205c2497e022f751f2b945a0976444aae0335414f" name="glibc-langpack-ast" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="c7c3836a3c9441d7ddf2caf1ddca1118a7865a67450f02f78d38890003e044de" name="glibc-langpack-ast" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="c4257f0212d63bfbba2343ccec1f969932c63df61c7dfc72b88658ca8597075e" name="glibc-langpack-ast" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="eb58d1d65e4bed063717626f8bb2c56c1659f79724da6e924eda5fdb8aaf6e30" name="glibc-langpack-ayc" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="2d7d3ae537c8d4b5898021930305fbdb2775200d14fe8b1f13e0c8c6e0e1afd4" name="glibc-langpack-ayc" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="e77bf75b313cd974e8d54a7ad6bf44d7c8d1aaeb0a24b7164a112a3ac47e2e03" name="glibc-langpack-ayc" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="5204e882da84c910d8b9cf68aa6c31f6bf5b002eb9bc735b43d83b58c3ef8024" name="glibc-langpack-ayc" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="566a53427d804cbc6bf311a17e1e8bd3e433f280d8cc4f253eba98ffc713fb3e" name="glibc-langpack-az" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="568cf69f914aa5025f3342d7b8d4cc7e302f5f9c6be3bf5ad7f88922f239ae14" name="glibc-langpack-az" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="52c9470f45a772846100964dcd825db38a54e0e96e3e3cca38005cf3d56b7ed4" name="glibc-langpack-az" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="56bea54ad0edfef1b3db7a20551fe424e992f4aaf35081c609821b644c93604b" name="glibc-langpack-az" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="961bf61f722f39ce26ce19edbf1d41d6cc89a31297de16e2926e576c577f78a6" name="glibc-langpack-be" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="d3a5af7cda54735f99ec880ecfb86a021515e80dc90b7afe59c9ddae41e4aebd" name="glibc-langpack-be" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="20ecd4178e317b1c742777bf9bb2bbc3c50078810879b2c92dd60c5172c1b08c" name="glibc-langpack-be" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="c66d8e59d7ac74c97e6fead7a304e3da167a97311d96ae9372589427b2bcf83f" name="glibc-langpack-be" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="076c6237d553eab4a68e543bfc3fc364af524ccfda5d3395f8ffcc5e6b1cfaa1" name="glibc-langpack-bem" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="f23870d717201932ce3190b89289cc296a86c07cc3a015242b2d814f046b5850" name="glibc-langpack-bem" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="c6ce013cd44389dec5423482db3a3e20f0f1e3202c8daf80c395331834760747" name="glibc-langpack-bem" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="a770b07ed0a950b10b48bff2e0de595632b37b8559ce40ec8cd6a25315300602" name="glibc-langpack-bem" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="2da672c850383bfaa381adf4977523c3a74677b75f96cec094596141d7ea658c" name="glibc-langpack-ber" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="143b4d0cd18c7bce28cccef1ce5f0af3e28aa391cc376b18d1ddacdf29140fe3" name="glibc-langpack-ber" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="7d7f2ea38182425a2694efd2051331e2831bdca0dc2a6859118241cd3306bb2f" name="glibc-langpack-ber" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="760f2f8ac8c7374b93944d93f0e260c619b78ecc0dbb13bd847b5faab9306126" name="glibc-langpack-ber" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="4997f20349f6a6ed7f66ed5f0d39bbdc1e7062c04b8909a9d063d8fbf9f242dd" name="glibc-langpack-bg" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="99f1cfb3eae1caf65ca06b0b3dd27e761f7ae2ec7e07a6d3d1ef76e39978e1fb" name="glibc-langpack-bg" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="692a06a2709bfbe655312ce7d80c796df9ebc6f2f800a4f90be113579a377ad6" name="glibc-langpack-bg" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="abaa73b628bcb2311bd8d0006cbb63b735168e68d5e8dfb6f1e5e48089f0b264" name="glibc-langpack-bg" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="6ae9c65596152fba06c02cbdf515040e29bf464b564d2908d01280c2eb3fb053" name="glibc-langpack-bhb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="87a67c1b78dffe8dcdf66eb160e3b3b868ce995da57317cd825ee79a29c1ec0f" name="glibc-langpack-bhb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="f4a79b4877e72fce33f09f25468f5c5cc7b8e2d3ab16f125cf49257d73946b0a" name="glibc-langpack-bhb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="9a545a9c3cc9bc731dfdaef639b578b625a0361a8b15c618f6db438fb497ac74" name="glibc-langpack-bhb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="5c2cedbf379b447d0b1b7cefad3f012368de707cfc6753570c2ed289ce12cd60" name="glibc-langpack-bho" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="4eb714c387b764a3197ca37267990e5519d2a0aa996de08e00a476ae680adf3b" name="glibc-langpack-bho" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="de640fe762d33392f048824a2ee6157406ee893b5dd377efb4554f6518d22d2e" name="glibc-langpack-bho" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="b9c2cd890de2ee85cd8622b132aaae7709d7d9dfc292fa3ae6daa2d0a4b27a43" name="glibc-langpack-bho" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="b3a2adef7a5eec6847e85ff56fe676228090695cf5b5eb0246ace31bf385b497" name="glibc-langpack-bi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="c64e139806c63264c19d883420483a090cb749539053cfc6ca25a32364d954e1" name="glibc-langpack-bi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="0dae24ac2e200f4eb133aab8defedb4e04df138d2f380e1f154bc9370a819d28" name="glibc-langpack-bi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="d6dceb4674bbeabf911e6087e4928ce500bb453af7b3106bec2b2c67ad44a562" name="glibc-langpack-bi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="9f10aa2e0808ca657654a85aab7a2c31d37039ec806cd2029d639169904c67de" name="glibc-langpack-bn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="d77c1ce3d70e870dacfd470e03e725e3e8a99eed40313c186b351fafb7906dad" name="glibc-langpack-bn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="60151c4fe16fa077832da1c25bbd8e606676c7adee9d1d0d144c20ab6de1904f" name="glibc-langpack-bn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="dfc5bbf9faa89f777e59744aff24e039ca53e6c1a45ec2de880aab90b5d1f734" name="glibc-langpack-bn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="2b42e38085bfa7189a288fee23640473154edc651d94d057e36a9b62aa298b35" name="glibc-langpack-bo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="54551ee8324e56075fe2a69ff1481a6a9c0d0bc2261ccf5e77ee7a23573b26b3" name="glibc-langpack-bo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="41c50c2cb4fc83f034200cc00c878b161367b588ec4e55b625e5d29666b629b5" name="glibc-langpack-bo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="abbadd408c41303ec47b58cfa71f4fdf4396ddd9b14145a95a7af0212a561a3a" name="glibc-langpack-bo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="fabdb5ab7525512724758abf13cfb25bb28671de99d6fa8b4744fc0882867d53" name="glibc-langpack-br" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="35136e3792dbda084d90638f66ad6bb59fc518cfd384fed5866313cbc017f305" name="glibc-langpack-br" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="abb82ea3aa1995e7885b517071595e860c06846ea91685db6d1e12a983f9eaca" name="glibc-langpack-br" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="7a2e37eeb206713224f2fe2eeb9d3db7a60cf3ad72d1e3cea802f40c0341f3bc" name="glibc-langpack-br" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="f8a71282c1086d4b1252d37f1e74db6d20ba1b2c9f6d9105ca0a7e4696213dbe" name="glibc-langpack-brx" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="09c147b1c74bfebc74f6f7971b15a0940611f1f48f57163836c5c475ab709ff4" name="glibc-langpack-brx" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="51e2cd94fbadfda5c90a91019aa11fba937cd408039add601a4a1ee8f15078fe" name="glibc-langpack-brx" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="53e9966456f38386b9b3aec9a900404a8ad5e41e4e8029f33b26eb018b9ae9cb" name="glibc-langpack-brx" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="2391794014781b2e7dc560aae53a6a1438111c40d08d3f0d583871b2edac5c28" name="glibc-langpack-bs" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="990859795ff7dec8e22938acc0a8349708102754bb25d51f570b21da5c0f2729" name="glibc-langpack-bs" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="c2cff3598167a3236f248ed035bb0f9b07142657b35abbb372076865335d3c41" name="glibc-langpack-bs" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="caa5f95487eecf5c721133083a47716e7332ced0e0db7340285968f29d4e362e" name="glibc-langpack-bs" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="0de1d8440f02e5776096e4be211c77ae74618675d3ba1ec4db77a2865034e58d" name="glibc-langpack-byn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="24305aee481bb1299b9931cbad744c6f77c05a5214a3e0306f7bc7850b8411b6" name="glibc-langpack-byn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="bf291a8cc97ea62181d923604c5aac07b18025662e12bccd346a88106707ff3e" name="glibc-langpack-byn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="73f813204ffd332731618da3db640e4d37bbb51cdbd1cf7223fa7ca08f003671" name="glibc-langpack-byn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="6baf5d8c9224586e4e481215dc2e754d889ad889fd212730c3aa79af413c0a43" name="glibc-langpack-ca" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="650f10885ad5ebf519887e9fdbd2e798024d9e8eca7bc168765eac7dca502f69" name="glibc-langpack-ca" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="9cdfff66199b6d7e9234360ef5ffd6805aea6e4a3321574b944f4c021d1218f4" name="glibc-langpack-ca" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="386219b9c2790d2dc0210251a2c9ce825805bdb86de83fde963352538f0e01f8" name="glibc-langpack-ca" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="d4cf4d0383e4c678c92ccd89fd6a94195af1f0710a22fbfa024e51a351f5f3d6" name="glibc-langpack-ce" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="a60f6b2d7f53ecef9698df356f6b327e5bb9d2b1747ef3da148322916212af3f" name="glibc-langpack-ce" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="e997371b384d76c132c4129d3af448c971a2d5910210367b55ae688f9837bc04" name="glibc-langpack-ce" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="7b17451acae42b669a3f157df460240c7569f125bce19ec686b984a3e89b94d0" name="glibc-langpack-ce" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="6e5f4c2da0647ef60ccff0eebd8b517c1b7229243eee082fd243dc6aebc56edb" name="glibc-langpack-chr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="05d4f48f360b606e94c41fa68a1d7350856085e546f839602e97b1b797446c55" name="glibc-langpack-chr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="195128e236db5cddfa30844078615f1c0c3d80835c3caffd1b6e1d09025b4b94" name="glibc-langpack-chr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="a91f28f67aed00979f5e1aa9b86e9102c7f27c613916701c775426a7febc288d" name="glibc-langpack-chr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="916eea05627b3e90acd2066cae6c0bdd51c6ba8a2054bc1b986e8563e2032c42" name="glibc-langpack-ckb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="28ff22ed524eaea4d82db63baa8396f3bd2bb9644926affeffc473e091aa0b9d" name="glibc-langpack-ckb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="496a4282a101474639508683d3a99f8506e1c4bf5fd8b1dad7bbdfc1574379df" name="glibc-langpack-ckb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="1b3e9f29ef4b3102dcee6f094025784ec1ed683b38900ae32753418173b623e6" name="glibc-langpack-ckb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="8a33faa4bf03bef4ff9d7baa984b07a7fde581e837e297b408036ef53afeb506" name="glibc-langpack-cmn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="a9820a89d37d05a7e084919f9eaa29dbabbeb9be10c552845297e01390572fad" name="glibc-langpack-cmn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="746ba5f2562f2187e71f29b9d9b7bfc0d4b44b29aed5841821a7798c64437d9e" name="glibc-langpack-cmn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="78810997dfc44eacf6d6fe521aaae100bdf051c05b9495e4a6b793edf359bc21" name="glibc-langpack-cmn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="9f1c8c156bc723b2c1a964281ec13598bdbab23cd6a9716939c2a3891db48e5e" name="glibc-langpack-crh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="ebf2439a94f8accc88839b76c20025c2b38b5621056502dcc40c6311797efbab" name="glibc-langpack-crh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="d68adfb3e82c41f64102583e76ed786ad71fcb381fdf84c965ffa4d1c0e39ffe" name="glibc-langpack-crh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="712122c74b1d067af4a0eb3562777208459283afd961a724d0155ddf933b1ee4" name="glibc-langpack-crh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="a9edcbe558c7adf9df343d9d094e564b3d085a2df8e1036c0e4af0b37e9e896b" name="glibc-langpack-cs" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="a6083a614e68dc1fda51ea6d4bbdc197e499f4f35a446bb8ea272fb72471c3e6" name="glibc-langpack-cs" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="6452ad097f7f338d4e6345f696d9d93f9c35d52b90477da944034f483d39ee13" name="glibc-langpack-cs" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="341994a799d4c458704146c43795acaa83025c117cb2343db4996197faf7bc50" name="glibc-langpack-cs" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="d58a54414582f8d3ed775f6495a5ce9343a7b103301984c80aad0febb9754760" name="glibc-langpack-csb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="16c5ca43b07e6d22e96cb9546801ecbb8f00d8e893c61bc2dfac68a5bd45c422" name="glibc-langpack-csb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="e5fa01e37e39552e867c66750448b6e7027ddc65914fd0206649a0a32f654e42" name="glibc-langpack-csb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="aca47a18901eff9970cef3ced75429c558f0ddc7d6f71e2b57c308028dd5fa62" name="glibc-langpack-csb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="96f74fbc112d120b0777f25798a113177692e95c0b3c9f52846f864dce0d1b9a" name="glibc-langpack-cv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="9f8a99e74b54afc94937f458ca4e373c7d53e485fa9a7d8d5663b7633e0157cc" name="glibc-langpack-cv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="e05d2069a519a3fce645980502ebd3472bd996af9b42b7bb7c397ea712d44605" name="glibc-langpack-cv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="ed11d35c768ba3175e5d01224397321b11edb1f9eb6c06dfbd3c35fc54deb7ca" name="glibc-langpack-cv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="9d17ba918d9c669c0982c9411a155f2a80c0b34e4df6f5a89f3ddc4511a08383" name="glibc-langpack-cy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="4c327a03c4a8c1e6749de687ec0499c30304fa4d8ea6268797cb3ce6428c7d42" name="glibc-langpack-cy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="7b27cfd87edea52bd1fa4100761e91c949e18f62443f4966da964666e338aecb" name="glibc-langpack-cy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="eaafb3e9906a715e5a1c812eee165a33fdd94d4a3db5f3a229aaec01a01abfbb" name="glibc-langpack-cy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="3f9f42cda0afce8583e65ad6878efd2385e0526de8f40c9cd11e49ab18886744" name="glibc-langpack-da" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="de1c230a11a709325523f15e641e873a7057fbcbfb92b1b8cca1609b3643a84b" name="glibc-langpack-da" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="a530612565d56070d027f009beb4fec67e2f41ee2aed288be0b6483136b571c6" name="glibc-langpack-da" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="f908620f92fbad6413eaf13c5ed31871dfc2199632b46423559e52fa1248029a" name="glibc-langpack-da" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="ec4d81d086f0a76ccadce2fb77a3efdf8c1c31670db526d73642338afc0bd163" name="glibc-langpack-de" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="5c71eb462c2a4b31d635f5518022875b93b06ec81f2338d244e32347fc920685" name="glibc-langpack-de" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="b1fc86b6c3d623984ade83f7ae8b98b78e8b36aae7d2d8b52cdf467c462eacd9" name="glibc-langpack-de" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="3bdee118b8b2b1b1c4c72fd9d553164d796179989a3e5f7153bfba828e40bdfe" name="glibc-langpack-de" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="148b7df545b74100e3935df6d4bf47128a9d7443b17a1d64ac08ea66ad80e358" name="glibc-langpack-doi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="8c3298e8423a62bce86ae3eb26cd481327d89df66e2c8009664aa049c3bf395c" name="glibc-langpack-doi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="ef2e2dc790780d62cbaf6df336d0f37eda3c88fddaff642680d124a2fa373dbf" name="glibc-langpack-doi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="a6738a439c6d9637c7eef35eccf9cf05f6dcf14eec154acf8059fe1e97da1449" name="glibc-langpack-doi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="0038d4d71d14224804e4647aa9ef12374d9eb93526ecc113876a88c3b84e2cf8" name="glibc-langpack-dsb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="cc5e8b818e381d67fa849e9a8909463fd5ad877590fb9a480c440a48380b3216" name="glibc-langpack-dsb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="937586e2bec3cd59a20e595195485439b367e2b3638ce8a30c6454df849739bb" name="glibc-langpack-dsb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="321b4fa5b39831a8100c45e17080fab74c5dad158a13e465277cfd8bc0ead1a6" name="glibc-langpack-dsb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="a413900e4ec0549ff19fc4cb760c1c87fbe540f619a95aa926db059229dce141" name="glibc-langpack-dv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="0bfcfd73803cae5068e49af555bb78190021b02a368280a1c5e73059d9a199d3" name="glibc-langpack-dv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="b2321b18c32f4dd0faf7d6bf8995569ee78ca5813af500114604924b3b942b25" name="glibc-langpack-dv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="a4c6d36d6782ed59e953e2c34c6e903afba1a7c083c27e5dc6686e3df3db4221" name="glibc-langpack-dv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="56bacc01eb0ecc6350bcc41372753760735ab93c9d44942cbfa54e3989d7fc94" name="glibc-langpack-dz" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="586bcd679039e7612f180158b8d60e4a02f8c10acaa98b3cfc3a964c4f540aa4" name="glibc-langpack-dz" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="da4752aa9a4b14cd0a356f3a2791daf7a2c4a015d14306b8eae4f012b570913f" name="glibc-langpack-dz" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="33e0e31335d7516a7fa7f222ceea763e086fc217f0b3d28f4dff3a9eb1c0a62e" name="glibc-langpack-dz" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="f4c7914abb5ebee4919d0395c5c055d72e612f428295d3508e3c1ce460941d90" name="glibc-langpack-el" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="300f26e44523a045037d6297a7c5bdfa4312ed1fa0dcfbf5ae9fae8ea4bf958b" name="glibc-langpack-el" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="d3cb787e090b1785d00e956b92cc491ad3fe2c7d718ddcdc24be9abdf475cb9e" name="glibc-langpack-el" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="92cfb1b7f9583114a1a2ff2fac9456dd5c8fe12dda155bd706b51461bd710ef9" name="glibc-langpack-el" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="56b411f7e331f04e0a28c3f216178add9fc9935d2047e9e2f5cded51dabf069f" name="glibc-langpack-en" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="f549d9d4be1d466cc4fa04a57bcf293fa983fb16c7986ce291d477b1083fb66b" name="glibc-langpack-en" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="648d4b3891d662620d3face6b833075661824cfc94c3f3ac256114c34718d668" name="glibc-langpack-en" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="beaf76d8978fdc029eaa261fc3a0c3e907d1992907fa751db919d86f73cadfbb" name="glibc-langpack-en" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="1908e82c0bd040cd2b31f8fcda6488ccff4efd52bb94297881dc3905ec6eaaa1" name="glibc-langpack-eo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="1df8d0152ae69e086dcb8c930968ff720c2c507af88c4918e7efec3a78639d6c" name="glibc-langpack-eo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="43b9231c6c6170b88b8fe9f0da15cf5f6abf26f6d502fc49d406fb4d8ff3f4ba" name="glibc-langpack-eo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="45a08b0b662f149702f00c7e9a9198aff39d7349239ab8c575a80a2b249b2a1d" name="glibc-langpack-eo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="33d32d6a0f8e40134e38529cdfd1215b2e3b5a9606d8826ab975fabdf1d6b957" name="glibc-langpack-es" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="114424c392c0aae4f5e6e8cd64a3906d592b623313687cbf76c0edb72754af69" name="glibc-langpack-es" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="3f49c82c0d5bf20da88c2201bd49e1dfd7ad121447df09825893d97de44a0b51" name="glibc-langpack-es" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="b8e4189af1d3773b4d8baf4f581b377afdf27c76d20d17f354f87c589e92754b" name="glibc-langpack-es" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="80dbfc99f715efb4d5d20737252a60d194ef9dfd0a51823a4f6da1a8080b2fea" name="glibc-langpack-et" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="4c8889b5a1462b98c1a7879a740d1b37d6d40533f180f629a9d419952c45ac82" name="glibc-langpack-et" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="7487ea37ebd4c6591c1b02a24529b1257432afb041851b02c6f0f824544a077d" name="glibc-langpack-et" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="a5e5915177137cdf3ff5353359f5328822608b642cd10a13ce06d1e10c518aae" name="glibc-langpack-et" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="c88b96de0d305784b7d061a3acc3b8a08c87ba09d515dbfc7e12e2e9a8309b39" name="glibc-langpack-eu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="9c2ec676001b12e18ee0c4d511267857a4740ebdcc54330e0714d9a4949df1ca" name="glibc-langpack-eu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="e41a8d0d66fda7814af2cc38cae8f54fc3d238087c64e6ca30f6dbb3d9c804cd" name="glibc-langpack-eu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="5645709bfe99ebee547e301d0d8d296c56dd10fbfa80e7ed87103468387b9283" name="glibc-langpack-eu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="40f445ba2e3cdf6aa0b4c11e9a40116f49c28729900d65d845ef0598eb45255e" name="glibc-langpack-fa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="2c339c7ded2ece77769b504457906b0dcc838ec9854ca138e13cc8891e042b1d" name="glibc-langpack-fa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="822d0dd4a909c1c9798befaadc1105f42553435e42a924964444d5b7fba56b17" name="glibc-langpack-fa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="22134d9a077b6b324145e9836b7489c5cf49fd4b9aaa926a3e784791dadc2ad2" name="glibc-langpack-fa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="920afc2f31fbddf1518720ed63fda804ac6bc4dc894b9a128660bc1204efc5d5" name="glibc-langpack-ff" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="34966176edf6498457728c01d6a2bcb79ce1de39ede4b26c072575993576b907" name="glibc-langpack-ff" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="b05e6be0ef35dc9edaef3d736b3a1167a5d9eafe71c11fe76e1b013c604bf57b" name="glibc-langpack-ff" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="fd61b8be4d170d19bc98273ee765eb6d5f3855ee24c256a4eab6ff37cc6b9f98" name="glibc-langpack-ff" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="d7c03e8541b0b8c0abb0fe88c03e2f7364394420b015dc94aa27c85b5aa73d0c" name="glibc-langpack-fi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="03bf58d88d8ab74b0b936358339a743cda218cdfb04e277261abc455e7e53f2a" name="glibc-langpack-fi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="3bcdc5096a22416f6a238681ee92a4870902fd32ea72adf7571b8e00e3d64f76" name="glibc-langpack-fi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="ae7d6580beff76ef9186aca14a7cfac721306ea8b956f3664a21ce37b76929f3" name="glibc-langpack-fi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="bab7d80aa096d6494451c350b9f559d206368e9ec8250f34747723b582a83ceb" name="glibc-langpack-fil" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="1238f59c7d1a6fc7fd1806b11c7f2bae647c9b5d34b4f6969344d8723cfaafd6" name="glibc-langpack-fil" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="f511c483b1d3b91144c00d74f962b2fc19f8b73c3b69e966c2fc4f92bdcbce1a" name="glibc-langpack-fil" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="0951dfd59f21a444efb7c0f699ea9606599151e81ee7d77bb16b4db1879888bc" name="glibc-langpack-fil" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="cc0bc29726a5041a1db858c74f650552543f2e5952a19678214de3d5b622b80f" name="glibc-langpack-fo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="1e726a4b42bcbc46540ccd8bfcc0e6c886781922e81da204250a6ad4d225148f" name="glibc-langpack-fo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="6993fbe7c930feaf3f41c5b8c053df07355685d9ee580e5e22cabe2836581731" name="glibc-langpack-fo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="97c9f4ec2552ded356ce34a2fff1322da502cc8f49c099399f3a848e80e49138" name="glibc-langpack-fo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="c3de6253b6fc1e4ebecd7641bde9f9f5d65997e6c671b01e85705bc4c17b3ce5" name="glibc-langpack-fr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="217d8e8d442523f1fdcb7f4ef97e30dc7217e3fd40cbd1918b5a37c42a21885d" name="glibc-langpack-fr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="fb6c2d9425b021744ba2d0d8a41ce88d2eba72546616d01bdbb28a78e5aa99b2" name="glibc-langpack-fr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="5ee41abf07ecf36a103289c0c9272827c845fe02e299bb62898847e4b4e701f6" name="glibc-langpack-fr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="269bcec9f6086b0de3de13d81671a9e464bcda48bf11076d90ff74996ce99416" name="glibc-langpack-fur" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="2c80bc63e307441bc7d592ed03f8c048c107054889d30c99b828e448d1c18835" name="glibc-langpack-fur" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="f97fec7fcb7bb063baa8204d875bd06ab5b3cf3470c1bdc84ec4af997a626332" name="glibc-langpack-fur" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="8c420cccfaeecb7f493743aba095cf42de819060b34949f7dd0ef79af0c75c45" name="glibc-langpack-fur" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="878b3e9060f04ba1cd7ebb87f5b95d0beecbffad69ae9cdeb52530ac1d0ca926" name="glibc-langpack-fy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="2789090603f47d6490857942798c347032272f1406a1ab8c08ff602f1f56ac79" name="glibc-langpack-fy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="1b560a0ae3536284f329ab2eb25008d94b33fea2944030dd385d8587d2dba3ea" name="glibc-langpack-fy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="d6d1b5ca1a81fc58708ec9212bc8a533e4cda09c658957c40786ad5c5f397e87" name="glibc-langpack-fy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="ccbf47e131ca2cc8f174eeebf5ab3ac0d7812eaeef6112c98515c035b121328a" name="glibc-langpack-ga" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="55b0d5e4ac41caa6593885dfb4ba71cfb0b9c8c37c604db9bd00d01eec78ead8" name="glibc-langpack-ga" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="732b6f720648488f0e4b9aaf52beb4c4548ef661e2a22da9fa08ae703269c768" name="glibc-langpack-ga" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="e9722e5b9b367cfd9e44bcff324d5a469e05d7a3097e5f7444d0ca4284cf349f" name="glibc-langpack-ga" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="3b3b8dcaa32083afba7057cacc0eaadfbc669614028730c9027e18a4d20253ec" name="glibc-langpack-gbm" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="be546e7d87a7a8ac9faa014ed5d0dfbbd9d23aec5a82c08a87d048bccbcfbf63" name="glibc-langpack-gbm" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="aad33b7f6bbf58fe5463684d357342ee8554dcf77f219e1bb27a8045af5d99db" name="glibc-langpack-gbm" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="ac6f0d1843717bd282607dd9d7b60c3801181838b4de3363523d8878fd21b724" name="glibc-langpack-gbm" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="4cec32c47925e633b65e736155f5f31ee23827dceae2c88be3527d4ae2fa4d06" name="glibc-langpack-gd" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="ea23eee5b1d53bf2dce2ea00f7e5992425e9582141f8f8361e62f21b32de8dd2" name="glibc-langpack-gd" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="7e63841d2d5e55a13ef809c9066c56f18eee2f8709fc4b243465e0ed6bf061b3" name="glibc-langpack-gd" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="a8fee2037fd4ebd100ed8a378e20061be0dda371369e67583cc82dc6e3ab7a47" name="glibc-langpack-gd" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="6e80ad5639a30fa82d752c4d150df6b74f1ccccc88119f21651fabc94a9b485c" name="glibc-langpack-gez" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="23c63958b4b3ed060e666544016306c16df3accbc783359c003c49f6646e634b" name="glibc-langpack-gez" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="c523b570ea4c083d2a2c9e6b80ec8764511f87b7bf45531d6b7f774e65bba9f3" name="glibc-langpack-gez" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="755206e08a56b9293b37ce254cf5150567fa79ba0d0befe172f8317a2bb0827f" name="glibc-langpack-gez" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="6dcf31e2f091669f3a2600df8c713ae62893cacf76f410cb8ab5e0abc91bbdbb" name="glibc-langpack-gl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="d7c95a14a7843f2011b6687d840749035fc0e8f26391b87f041f53d7dc162955" name="glibc-langpack-gl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="8d4d857cf7c8c222384f82183f54f3a61064025832d5e9ebd150678bfb4a00aa" name="glibc-langpack-gl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="e306b2f44e0f7f4787ea9182ec8c31a47fb7eb205f32fba6197d22c506d1f27b" name="glibc-langpack-gl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="2ccb6bf31b591dbd33c7f92bde6768436ce19a4f483d204128bed9970b854bf2" name="glibc-langpack-gu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="93415d4aaa7fc0c045582f4e9c86fea8d865cb45ca76d7352a24f9da6d4cf3b9" name="glibc-langpack-gu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="bb7350ca0e8fae421c806a95762f1f4e83b560240dae921d7ee7b74c6fd0403e" name="glibc-langpack-gu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="b821f1a4e26320a755e97cb6b9d2ac3680d670fe1c310e384a55ed866449cae0" name="glibc-langpack-gu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="bdbcf950377dbcc1534148a14f638e23ed2a28b1d90f205108a6d61a6ab10db2" name="glibc-langpack-gv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="50f527aa4c8b67acb1959c293c1290231f46804f3b6f2812d75accfd13843ea1" name="glibc-langpack-gv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="458f7be3041a83c51a7bd7ec27fe3c27f7c455551c3d5cc7fbfdb3a4df19a337" name="glibc-langpack-gv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="8e2d0f545e7e4c4cbdca8f6d2fac694d5a00d1a0767e239804c51090862dec34" name="glibc-langpack-gv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="d9f9b6553602d8d6938e470be8aedeb1d09e2e4efd54cb1d9775e606cbf991a0" name="glibc-langpack-ha" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="2165ef27e290aefe1120b4b058f14038ac27aa24553c98d57581078145a4a84e" name="glibc-langpack-ha" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="fa1d6c2ccb945affdb80843bd3420f18dc9f84a97d11a23da8bf903ebfcaec95" name="glibc-langpack-ha" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="894df00fd53b94fb4e65de032ef8786fcd7ff8a7c74b4ee7663cbb647be6db29" name="glibc-langpack-ha" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="028864c30714840660d72a63aa666647d307e0a6101a004e58d0da1ab18a22ae" name="glibc-langpack-hak" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="01c8ce20eb5100e33036c6a0e12e9f3a111b918fa7f3f06cfbc4ca8b946da1b9" name="glibc-langpack-hak" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="4df190a077035251fabce3c4d4eeaded19de281a34f5b4bca06cbc06789cd2d5" name="glibc-langpack-hak" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="5fb3e51dbda0ac5c7f7cc7bf2fc261844889dd7c6f7ba9aa42265f41372bdf90" name="glibc-langpack-hak" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="5c869cbf671ac782a1b9e112edafd87754b1b9a4c471007ed477dbf00c7be9f6" name="glibc-langpack-he" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="c185f9a169b5c3a6724dfe0b54136fc1abdc165d8ede2add95d29a8e4cd458b0" name="glibc-langpack-he" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="add547825787ce893d70f8c380330d7b2b4d062a33de03e8d49570826418f913" name="glibc-langpack-he" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="65028023fd2ce91510e984a27ea9fe4e4a8f418a2eca5d05f3cdf4e8664ab230" name="glibc-langpack-he" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="fd866c8f3f4994d609e11151575a81f6564245b1ec025031bd5c845ffa016ba8" name="glibc-langpack-hi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="452f6452d54f0c0618d0ed736f668054e188432062207b2064dac46ba6753459" name="glibc-langpack-hi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="5400fa818429a5b37d1a7aa14fe37c3ba6867a48d50e081824c7763a4dca1dc4" name="glibc-langpack-hi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="6bde54548c0deb3a3ae48e953161d55e8df8483df3af18ed55a6db40968414ef" name="glibc-langpack-hi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="2deab569e562795cc9670ee515c73200ac394c7e36fcf92cad71dd797c37b2f6" name="glibc-langpack-hif" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="1fda2628211cbe396f1e6d74c6c9f1a69f193d4f9d96322c80b1a337b701d203" name="glibc-langpack-hif" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="b27c57326f9c4f202896031f759e12d4f4ab051abc049e57f965e8da77802e02" name="glibc-langpack-hif" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="0dbcc19fe15e58b0030b8540cad6c8388f2bcaf7fcbb5c3828b90dca219f320b" name="glibc-langpack-hif" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="5765826e8bd7dce8633ada2cb2494209f5d3c98eff1074c38c0a74fc91966805" name="glibc-langpack-hne" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="3dbf34d797481b7c74517b49c0988d46d77d29ba5678f3919bd9656616d08615" name="glibc-langpack-hne" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="aa4955651833effa13a46926be15b4390444fc4119ffed3c2cebbf41fe508817" name="glibc-langpack-hne" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="b618ead3b9a6bb3bcade27d65f7d96ff85c805aea25d84fb6d11fee9905873a4" name="glibc-langpack-hne" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="3bd031b8d8126bc79cacf643d1c8c78b72d350e6079ad5137e7c7d5c4634f554" name="glibc-langpack-hr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="f4614d87b08712cba56efe0927ee41d7b986f71d95a062838c02c16209bb8a48" name="glibc-langpack-hr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="4a188c40630480247295d0479d43a07d1f6d883a5ac02af6bddf0860c4fa11e8" name="glibc-langpack-hr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="d57c241ad2ed0491f9ff5a6a8f579d06eb44bb0c7b677251ffbdd4c3bc969ee8" name="glibc-langpack-hr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="6b090c40544dfcc2abc95f1bde4d1d4be8ee7cdfc43a20652e4a9392dda0fdf1" name="glibc-langpack-hsb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="b6a239811219563ce248f99a5e5d5b65efa40b5daaa0b9df3af8bc7260640997" name="glibc-langpack-hsb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="4ceb32994358c6c10fdba0f97a3105826c63237041069be1ad98aaf52fed82c9" name="glibc-langpack-hsb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="2f0ac1c011f2fee3d45ece31713f83c651bceb4f0c1ce7cd8996f4a822395e9c" name="glibc-langpack-hsb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="25830f8eed7b61f97e1d96b3011740c9d05e5ebf7d362fefc887e6217b3b79b7" name="glibc-langpack-ht" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="a07e264f50f873c78a207d4bade2daeccc5005491d6ea2fb1f654fa6a897b7bb" name="glibc-langpack-ht" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="b0fb7f73d6bf5157e237e545774c894e1e9574a53d537da4d019ae7dc8fe06a9" name="glibc-langpack-ht" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="a6559ee6b7b7afcbe7a9c170bbd9a1956faaf202e0fc1a5045559c35f44afeba" name="glibc-langpack-ht" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="eb12de666c038ea4fde7e86cd64596fb8441212a5dc8ccfebe80006fe8a6fa2d" name="glibc-langpack-hu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="03d156eb478e470d58944d0dab176992ca915731090501bde082ef4612d3cfd6" name="glibc-langpack-hu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="b1676e5507facaba6b60afe5a11c79785a63da672d6966fec6e59dd55add2acc" name="glibc-langpack-hu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="f748607223e408ca626c23d8d19f46e4974da0e67dc39cbb324861e6b3fd1260" name="glibc-langpack-hu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="4703c5700844914e35ef98184db6ee0e1a8a84f134c887e5b1d8014d2efaf0b4" name="glibc-langpack-hy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="dd08aa11eec8fc8d7c84b839a62607d3566c0e771f1a61e8630c4f1058aecd42" name="glibc-langpack-hy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="6db6b18c23706046f58deb02aa1513c14a55f22d545fa48498fb1c04160464de" name="glibc-langpack-hy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="101a29dd21cd5716773976aa6a573172703ae599dc84375b4cda68ac518a5a41" name="glibc-langpack-hy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="d9042c62e8984acd353cfacb8da2402058055f9991ba980fff784dc668e441a8" name="glibc-langpack-ia" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="ebe49dc8a8762a3fe45d1e23441f15bae96d26bfcc590644d077f6eb6ed0e47a" name="glibc-langpack-ia" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="5ca4e697a39b1e80f0673b3450a6e612ec232a7b1b387997b79e2db33ab2f0c1" name="glibc-langpack-ia" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="d964135f99f802d4ed724d40e3541f960b1de66c537e12539c827e4bd6e69eb5" name="glibc-langpack-ia" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="a87ff368b4423533256c9b4fb5a997873718e9552da756796105fedd605fb33b" name="glibc-langpack-id" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="2d1637afb64069d45d77a657db16e8695f5f90f5e96be6abf41467e7910fd5f5" name="glibc-langpack-id" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="6663baf2f8dd826ac9bbb16ce9cf5a6f19d01d512cbee279b5a21d199ca4b7a6" name="glibc-langpack-id" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="e8420efa7cbf10ab298f2913d448c32c3eaea42c91fb6c6d88b73e572c2eff5b" name="glibc-langpack-id" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="67b9efe8daf6087f76931cbaf2291d6e9969b1b7f7adde80f9476eb0af193709" name="glibc-langpack-ig" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="a76b77527947c3ef7dd7fdc1fff0bc7edaa4e9cc3f0ffb57b0e27a6eb4e46f55" name="glibc-langpack-ig" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="944932433ef7cc6dd9266b2c2fd69fb9291de9154e7f47b6bede8a108d3e1aac" name="glibc-langpack-ig" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="d86b74c0a88a02654c46e3558e020cd34899df32ffaaa598ff5ffc63f592809a" name="glibc-langpack-ig" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="b832ba62d8e857f3f675f4039f11b41d975c3ad290780aac9180ae28574a7735" name="glibc-langpack-ik" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="fe1e3805b7473433106bd5c5a4a8e1eae166e6eee5f985b522dbfdc92d8cfe6c" name="glibc-langpack-ik" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="d41e7e3dacc4d18545441ea03a46475247ecf20572a26ec8734c6d1b90978bdf" name="glibc-langpack-ik" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="625e755c013840b3a346799c9fe6294e4f7ad0d2e2538e31c6283fc2d09117af" name="glibc-langpack-ik" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="f475622335c23aaf4399172da87e0d454503ec74a097ffa975b443d9610b4eb0" name="glibc-langpack-is" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="ba0602fe2b5cc1f057ec92a2ee358d8bc7e7fc4ba3d5c256d6e04ae07fcdd5b4" name="glibc-langpack-is" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="76ecb65adea0dd01ed859236fb6248daee0836117e088f96024fb51336fc93ff" name="glibc-langpack-is" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="f9d09382c0858d6d03cd480e9b7fcb6e52849212f9eeb0c2386ebe16d57dbc53" name="glibc-langpack-is" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="5199dcad99a8d01521ba3a469e705028a3a11091ef1e0ffa058ccf18427d4487" name="glibc-langpack-it" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="b6b96b0af62c370fd30e86d213ba5c2cf397c5f8b1f0dc027ef6c305c4aae0f5" name="glibc-langpack-it" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="5d0c6df791d86c99ad58e827c07c90a42c370976fe25d39bb5e3cca9d0a43792" name="glibc-langpack-it" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="e41310612f6572cc5b684c8f63fe087f7ee387c0245901aad4dee7f4b2216d35" name="glibc-langpack-it" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="60ebf6643e6ca6905ee1afa8f8ab2f19eefb0cd155d4c54ab082980c8f03185e" name="glibc-langpack-iu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="bbe970505a5c20633fce0fadf2efb625ebacbd0205927be37dc6e39f8aeb1805" name="glibc-langpack-iu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="1ea769dc4de69e36a9d9ab713ef1920098c07b65d910915a317ead894582cb36" name="glibc-langpack-iu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="3ef2d864368e5787c4989dcb8d653bcb2a88ef6d8883ebb82d871357f5477457" name="glibc-langpack-iu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="34cb63fea544a6ff786de5f24096921dd12047aae9716e5b604363676b854c46" name="glibc-langpack-ja" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="8344d12fdbbcbd01e72c8185b3faf4bbdf1814d4a45b8ff0ab8af3e5c2121a52" name="glibc-langpack-ja" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="01e41cf4a9cfc67518416c8c87f628938de518c591b544505677c46157ddc10d" name="glibc-langpack-ja" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="4dbb5ea93707f483f3a4cc516a5b48ae390d55e940fdb9857376a3b75292e1a9" name="glibc-langpack-ja" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="b3b5a1cd2a62336b9f8d01d9863303807f9b799f018b3ce0fb5b6084cc4bcf61" name="glibc-langpack-ka" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="2a95fdd0be4e4b1195fe24e12f4df4aabba4817f226b90718a95eded31a4f079" name="glibc-langpack-ka" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="4f2d61dd677906ed0b17f8cacf71eee6b01b1cddd2a3bb6fb25974637935581c" name="glibc-langpack-ka" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="270898525e27a7eac786d26a9dc0d29136af5699850e3587a72e221dad7e76e2" name="glibc-langpack-ka" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="8635937a175167fddcde6e39998d172ba210a7bc67b34d81cb53f34f756addbf" name="glibc-langpack-kab" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="d1234e74ea9f4957fb13f6d8212ecc239bb2bd93fef561c15cabac34715b4630" name="glibc-langpack-kab" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="e21959bdead6f4622d30e4cecbdaed7ed6654d2a4f7f034b7f42418e82f64ba3" name="glibc-langpack-kab" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="5126177e8de2d9740d5356d878acbf7e9400220368fbf361e016c557ce1705f6" name="glibc-langpack-kab" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="6f85dfbf897fc7c51a92228e1637bbe9835123250bec0d6b63579e5f34523e6b" name="glibc-langpack-kk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="1dd93942f1d520e5b84f63c1642e841edb8e3a1f9bf17fb25b79f61f6f9c26b0" name="glibc-langpack-kk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="f5cc56cf63b3a9bc40c4c9e2cafb3425bc7d19132bec93b64a419b9461317a0d" name="glibc-langpack-kk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="e667fe81225089395952b6537615b076f5d975d304326d5b1cf8de0949ce20ff" name="glibc-langpack-kk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="ecdc75d3810d40d0d6bff9cda1c98c0ae02cf9948db6c10ad01a6d3027cf7427" name="glibc-langpack-kl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="5687c9fa41d27b0f94d81b054d65d3ca906ab2d632d79712857b5fc8b34b8ca3" name="glibc-langpack-kl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="6e187f065e6e0909e349ae0aeb16c574a576e6fe69145c0289fc6d1ce20e741f" name="glibc-langpack-kl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="0ca32d5c4353c0a0cd19391eda9409bae800d6c24cf68413ca7e929e62594b75" name="glibc-langpack-kl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="0f3ebb3d296f27a16a78134ba019b68736039968954aa1176aaa8872c54291d3" name="glibc-langpack-km" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="d6e2263d8825a0cf273a3fac57d48985fcd458b7ca463b819d64e5eea0c60c75" name="glibc-langpack-km" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="55a2238da6413b170595ce635ddfab0169c51022fe16587cbe3085d830aec7c5" name="glibc-langpack-km" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="831e9dc05ef9915c481e8679b546a3040afa4ec875a8ddf11c09b8c9a894f7b5" name="glibc-langpack-km" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="669ccb641e232f9e7ebbce903fa5f537f0350e5dc82d335a245f6d0c3aed344d" name="glibc-langpack-kn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="591af5a193b271b614c60a8640224de9b6cb38dd58a72d0683fd087c82f49b39" name="glibc-langpack-kn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="daea025aa00697f49caeafacd6b992155f1ce49f0a3c63deb08f68805eb4a0fd" name="glibc-langpack-kn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="98869dd9e4968be68108adf00797181f0e79348b27eaa8340a8539572296330a" name="glibc-langpack-kn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="cb49e5cd50390b9b6f6f48798abbfa079f2d5c7b3820b8b33f036cc931d3daac" name="glibc-langpack-ko" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="49cd4edd2e2a7131abb38c00b2b47e3f1c026c2aac8e9942cfc65746fd87563b" name="glibc-langpack-ko" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="3e1cc755b03bc393c14fcf9a86b7ca2c27449349ad346de373512396685aa6ad" name="glibc-langpack-ko" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="6ae8091ebad06217ecb4156c6c32d5ef934ecd457b1342c3ee660cd7ec78feb9" name="glibc-langpack-ko" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="45e39c93d2c301a1b914c823224e80785e2920011571b4eac836a4a7e449c4fe" name="glibc-langpack-kok" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="df1730db00b675d104003c554474482c1a4cddc39d66db1cfdd174f29d4d9ae0" name="glibc-langpack-kok" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="c14c674f78e0f1897745e1cc547479730e830275f349e8c3f75c1c3fbb716d69" name="glibc-langpack-kok" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="daa3355255bd14b87f01107f45042b4d58aadf5726db40f8155d94cb93f3c1c1" name="glibc-langpack-kok" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="5175db08da1dd08a18d521a028e8d747c98a5b1480a57101852871fa490b484d" name="glibc-langpack-ks" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="fe57d05cb9b7a0bc597e312a8c984d1dd5449e7d58474aab731c80e57397e89d" name="glibc-langpack-ks" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="94df2855f2afed7d01d9134ab4b752b2da2d16c74f1088fa5cb76547469f7f5a" name="glibc-langpack-ks" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="7707c07b1382b016dc811c27ac76bfd011e32fcaa86dd504f32dfe24e02d18f8" name="glibc-langpack-ks" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="1e45f8796ab8921a6bea0ed50fb380f3480df4ac70c28fb7b13e49cdb7b992a8" name="glibc-langpack-ku" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="6ce1e98a7c2a37c64a312ea1b1ff9c62979e554d444226db8f4588b1e70cd0c9" name="glibc-langpack-ku" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="b5fa7819f5b5db98d3aade930a98a26637e47be349f76e53575e1740559aca0d" name="glibc-langpack-ku" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="da69211ed755c1f1221945b95583ee9a479264b204f4c0b0047ae4c00e703a43" name="glibc-langpack-ku" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="a4397eb0f87c06599c1e2b27c44709a4c193a418dcd4227f55d04d351b7632ea" name="glibc-langpack-kv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="7fb225152f73ad0a5522cb68a6d8c6627847ced08bc001c365af26c487a292b8" name="glibc-langpack-kv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="1f3a59de74870ae575149acb5151747ed01b6182e4dfd4400d67fccde7363032" name="glibc-langpack-kv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="b5d40b4ed23ee0735f7d33ada1acca7759d43d6518f8e579f98ecddf37d67506" name="glibc-langpack-kv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="608b7d6bf8c2da6dcfddd935f4771b2f4164f51628819e6fae3cc4ada24ae1c4" name="glibc-langpack-kw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="a6e52fad6612aa990522d462b2f768d9c7e1a59fae720dabf71dc1c9bf60c146" name="glibc-langpack-kw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="26486e62bf1bfc19c852275c08637bf3ba854209d6f65a30dfbd27d202f9393e" name="glibc-langpack-kw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="0d7bbd51e0b9773e0bd6a8b1022a97df1320b53de80333ddbce40e8e2c968ded" name="glibc-langpack-kw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="3a6ba628dad1b7345adb8ddd93b35ac0b71b1edcaf01172f352a398ec9bf60cb" name="glibc-langpack-ky" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="11028aede4ef69318110fed34498cd26495d8c99b103558d350597cea4c4ff81" name="glibc-langpack-ky" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="7ac5724bbb99a3351f9698211badfd879dc8900c7a1f50df1b6ee6537ec05c91" name="glibc-langpack-ky" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="e8676fe32e2a2dcb1c86b786848e5f1f15be09cfb66c6bcebfa19bda54764560" name="glibc-langpack-ky" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="c2a811fa5fe5500a82c344d23e1f580936042231215f594ea797e2eb01055f44" name="glibc-langpack-lb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="6b349302330ff1c11f9d7c5af1334ecefddeba57af399816c0eb2d1f86785f15" name="glibc-langpack-lb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="5d8ca2cbc5c7ef730bed5bb46ef9f95a705b193c1d3678c8807c97d2a3a59ac2" name="glibc-langpack-lb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="7eeb13d27be4eba74b4a8ede4f478705af9ee3e9cdd8005d58d6170cd52b7489" name="glibc-langpack-lb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="0e232763d8104c8503ef0e622eacf3d10e0af1ab91219df53e67a6e7410a9120" name="glibc-langpack-lg" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="fb1962487a298cac5c4e5b2c501b993eeec182640570a09b76f1261649cf94a1" name="glibc-langpack-lg" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="7c43e2201e6992e0c2f6f7945e31d302277b128142f7bc57c3cc9529ca79e1ec" name="glibc-langpack-lg" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="4f6ab930f28080820c09bb4519c5203d9e70ec9982d4b944a4920827dfe54989" name="glibc-langpack-lg" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="41111f52c5b4f9fbb9e743f28674f4de79bc851aaa5550a8bb11c42452f42b96" name="glibc-langpack-li" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="c4ac2f4ea1ac081d1a76de06310247991b007c8a701d0c44f3f9d2dfecb6bfff" name="glibc-langpack-li" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="6f73d5b771ad11f962dbc281c88a538b6844b43207e8b7fbb7b0d8e631b9f89c" name="glibc-langpack-li" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="136248a1c4fd1c81d50d77c0cbdadf27df3f61fad82c34e08f70a862f669d1a8" name="glibc-langpack-li" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="dbcd4c3d958f0b5827b12963068fdeb8be1a475a92fa68c965fab5c84aa6a574" name="glibc-langpack-lij" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="1547550073230816c9c8d6d21a524d0faaf09fa2fd7ec988fdf271d0fb566317" name="glibc-langpack-lij" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="d96fc5c6bf7dc9ae40bc0a33f1114aa646c6bfbe2511c8473c2fec4bfe0f2be9" name="glibc-langpack-lij" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="345a9a7e06997a1d1d8bca569159e0e394e66bfef9b6b2d2819359c47dbdbf1a" name="glibc-langpack-lij" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="7e348d6684a9e964679b70dbb577bca74c81b2f0241f7807105ac9fe38973e68" name="glibc-langpack-ln" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="dec75bd51c74a54d9a23a5d9697edfe4f207368dad9d47c739733c3ab8751a71" name="glibc-langpack-ln" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="91f1b0a289d1a9a7d8dfa08bdf2111571d6c6e79582547eceb6aa74655224429" name="glibc-langpack-ln" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="74d2bdff4db3c5d020b71808a490094e8e46f9e266e873fe331c2546b3a74389" name="glibc-langpack-ln" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="d1b6c000fe834b108cb6c4a0554492fb448451dc1312a0941162fbae3a00cba0" name="glibc-langpack-lo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="1d5ad4da1d15610c92a97658b4b43e5ed006d484334629171762c529192bccf9" name="glibc-langpack-lo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="441ae297456669ae074b8f654bf3d50fc1d5740d2a96d591869da3d54d819b97" name="glibc-langpack-lo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="8421a7fc575b6e9400284662b6f57d9cd7fe330299a7c895f7f2200293c9ded7" name="glibc-langpack-lo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="444b2715bfec42e58e2ecb18f467d892d3ee76a65a9f9fee08c865361629d7e9" name="glibc-langpack-lt" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="5ef8c370ee893fdfe81782f1a430c5c778be17b7b9903565611b1b02d0400b1f" name="glibc-langpack-lt" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="c5e4f26ce50eb328479251858175ec58d42043446be280e9b0c6c65357e7a181" name="glibc-langpack-lt" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="99d79f3622a4dee55aee35dc26063533262f8d234779bb8d37622a1dfdce78d6" name="glibc-langpack-lt" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="8c928b7e246cc194972652a5a0f3b772296f520466b6f8f23eb41554c9be5dc6" name="glibc-langpack-lv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="44e4fa92f6f653b5162780e233ae3e0a2fbdaa9a674f6006f3ab7866d561f634" name="glibc-langpack-lv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="ce8cc9cd7429f789fe07f527d8a154f40105b0e6b59103b96ca37a3713cb1566" name="glibc-langpack-lv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="c27ec702702fe6d13365edf6fa6baf476b61398635f98b2788842c915775abc4" name="glibc-langpack-lv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="3b559ba85f81a04ea71305ced97415e6bb207a888c551b202bb24dd9a8468d3d" name="glibc-langpack-lzh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="c48c3ac9703e30228bb228c474fef0cd9effb9fbad00614f849760f28c6ce0aa" name="glibc-langpack-lzh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="824d0da2dc3b13f5b172a649f81e5d6ccbb121e4ec93b7e4e9a34751abe18596" name="glibc-langpack-lzh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="1395c29316f798e5de672b4f03a47ba2c2d2a0f624575278e75f2afc4d0cb394" name="glibc-langpack-lzh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="8afc7d308022db5f3fadad2f6e29f7c77d2b899a641adbd1032cdf493d12685e" name="glibc-langpack-mag" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="e20bffcfa856383d1690c857c1df8254add237b45ac9670c35d54a998e6e62f3" name="glibc-langpack-mag" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="a7f5564f48727121354700d022e596a1a9e729b0c2350e603fa0948086c192a9" name="glibc-langpack-mag" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="295bd35d909e5ede0870c84f2304f7643cec1512b39755c535d5414930c443ee" name="glibc-langpack-mag" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="fdedb679e3e3014ecfcf074c2eeac3bb24b1da1ca5c1b6a52cb2b8ce95dc6d4f" name="glibc-langpack-mai" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="43c89a0d0b7907043e6f7555e0b96ac2e5a8aba2ce2bd5ddad1521ad4e96eeca" name="glibc-langpack-mai" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="ef03243d2e1dab24227cebca70744ceded44dfd5e16644b0df5141196b94378c" name="glibc-langpack-mai" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="05bfb6e220f6af6bd1cf1f33c39d38f7c1b113099b186964e9924fecf03bb276" name="glibc-langpack-mai" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="42ca0bb13cf6b3a052fc3fa882aee8b8cc01690ecd990eafa76dbb8d158e5c4b" name="glibc-langpack-mfe" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="8d2f5197ada716ac5f4e684d1265a73a013ab34ac01f8c10ef26f971aecfb8a6" name="glibc-langpack-mfe" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="e42b0287eeb68002fbb6873df3d8deb77428368099916365d15bc5f700e8d335" name="glibc-langpack-mfe" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="4fb9fddde16856b29fd4e142c492bbd6cbd5c6a7291b2b043485de0d778a72d6" name="glibc-langpack-mfe" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="764d33c842e9398a4751cf63f180ff31ae647433cbf5f3fa72a3b606b9e00080" name="glibc-langpack-mg" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="0564a07b04b7011f2fae51c9d542a4b1a202d1cf263ba995b60e2439d4fec434" name="glibc-langpack-mg" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="0935625854cc231dd46b5859deb00caf319862eb97bb29bc2c40520ef1d0f8e0" name="glibc-langpack-mg" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="0dbaa7a18b72ceb8d412ea44e0c36d868c19026a6ea3dcf429b3b6da13584314" name="glibc-langpack-mg" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="69a93eafc236e1e875f9c1c5463a1a4f7c5f1a148bf5b1191cf4a0d568f8e1c3" name="glibc-langpack-mhr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="4b6490bf19af9d0624825a89edbf43fa3eac89371e95e7e8b88c35b47a03c2d5" name="glibc-langpack-mhr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="8abee68a8f451caf1dd3ff5be48e41731bbaf9ab0de95a71fe0c410cae0c11a2" name="glibc-langpack-mhr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="c90f69ce8a0f728ddcc7b94c2ec724a6c38cf4900d1d91b3e41ee3d11a8a3d53" name="glibc-langpack-mhr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="5571b9db6f05f3399a3eed2042a66430b0b526bb58234f35c3d496aee983ed87" name="glibc-langpack-mi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="76727577c7c6149436e4a39a6dce35ca921d70e4b01b03235c067f99cdb27a2d" name="glibc-langpack-mi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="44116cb2caf466c9db41fc2cc6e6b3959362b3128a411ea897c3bcd63b30a7f9" name="glibc-langpack-mi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="710d9adfc9faabb5456d578b09cfaa87a8260b6cafded0b53abcc2e85497bf1e" name="glibc-langpack-mi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="bac75cf5b0d087cd711217f472f73ec3a7615ec8be093d0d6078ebd3e2b73cc2" name="glibc-langpack-miq" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="de2f8883e5a55f0465909ee86750e05f75b846c731b229795527abe43367432b" name="glibc-langpack-miq" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="a99a1e10bdf5f7835b8bd49431db441f03bd7f60ed9c4adc00409d3c541b64e6" name="glibc-langpack-miq" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="13b95b6ef5a243617e78993080f94dd60d5498b22e33a5bc1c2cc9f655a74f36" name="glibc-langpack-miq" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="1ebc1347b35ed7ea239a399c2f035a93b14f6324cc03e741bc8291c24d18541f" name="glibc-langpack-mjw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="ef9dc1331bcac8524459ab313363e6eef28675b70547b2c6fa64df04f138e636" name="glibc-langpack-mjw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="61718a84b42860c40533411c374d88d2ff3b1cf13493024d3d6da9fb869fdbad" name="glibc-langpack-mjw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="4b818cdcf41f130b58367c7a3f7bc914f710e257a16327f11514b09dc010f7e1" name="glibc-langpack-mjw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="17dbf759c1d7fff721162e43b4d7bcec73322b78be2f23b060842073193ed76d" name="glibc-langpack-mk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="93a483e18d10c13517d61f2722eb263cf7695fcb22bb08888cd698454f0fd17b" name="glibc-langpack-mk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="fb1c75edac642084c6b4b828765323f22c5060defd82c0476c36edb0b27b62f0" name="glibc-langpack-mk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="6935b393b8c065739ec98e4f3fc982f5bd54809ef61fbd44f74069569f6ab2c6" name="glibc-langpack-mk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="6e63d0cf26cd4efcf001498db2c75135adae2b6d4c4704be4bd2b9a2363721bb" name="glibc-langpack-ml" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="60d500de7be532903a738ac662182425c671bbd79aaff8d247990399a5a43f66" name="glibc-langpack-ml" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="1dd7b46a4db10489f2e2fb9605a2ee047dc1059358f0c38b1243b4f11fe34376" name="glibc-langpack-ml" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="8c72cd60a04218fb745d1b5e4610ddbc671e51171c49aa4de436b35654ce173a" name="glibc-langpack-ml" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="8c5c8682649e77a618bae0a6951c60cc0386de9e794f6d71f581d13db50d25eb" name="glibc-langpack-mn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="d77898a3cc2d3a7125ea423ee2086cd99b72c86bca9cbe8cc07b3d8269cb2ae8" name="glibc-langpack-mn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="9bfdc0cdff598ded5c9e3b50f76b7d465c64f0a6bbeeafb0a94ee27a6fbffb62" name="glibc-langpack-mn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="cfd5eefeae48650d9fb7ef2260a1e5a1c98efbd0338b0266f63a434da2428a90" name="glibc-langpack-mn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="3b7c03a77a2950177b1047062feebd90157f9500f4fbcfa07d9618155c1d14a9" name="glibc-langpack-mni" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="be37fa751635fb137bf7d4e3483605cbc8149baa0eca2c4d82df8b3b53598aab" name="glibc-langpack-mni" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="2f92b86d3133c51e496d29e7a7908974606015eeb8a70927d02afdc87df61edd" name="glibc-langpack-mni" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="4346b0787e329ce789065e18b12460645921321f2814b2cbbcdf861873df36ad" name="glibc-langpack-mni" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="72fe34cd4627230b18465ef04cc52b3ff128f5a8a476b11ed4193900833ee915" name="glibc-langpack-mnw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="f5ed3e8a787e02abbc4dbff4727cb6d8c417995ee3491ab0011712f947413066" name="glibc-langpack-mnw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="e8d737d75fc57d436c583c788edcf01aaa056dd3bda4ad18211024b0add0aa97" name="glibc-langpack-mnw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="e2a09eabebee01848cc922f5bd43c833a3d4dd8fa3b8170ebe813afa171bd073" name="glibc-langpack-mnw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="36f380f7aafa7f0918624bb0f09cc453cbc5329d75087750c25eb265b48ef953" name="glibc-langpack-mr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="15f3e7a20d112db88a7357f7d7966003ebb6f8fe768db5e699336f5dbadc9efd" name="glibc-langpack-mr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="03dd67c4d70aaa1173bc17b5302fdc17e430beb941e5f4cae3a0cd4eb36706c4" name="glibc-langpack-mr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="d158be5b3d891757ec55ead909d3a98f37473b73773aaac2e7c5e372a1e6e246" name="glibc-langpack-mr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="72c6ad2fb11ec448c2427c88d6c5e32af21037995bc2962a13419032d46d1758" name="glibc-langpack-ms" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="095f17aaf25f59f7959248b6601bd6d80416701d0491e3488a9fa673cc559a68" name="glibc-langpack-ms" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="b5994ca04428b7e91259d7fc7d85a5c0e59385bac2eb59b29572d674772f410b" name="glibc-langpack-ms" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="50192e74b857ff385a2bc0a44f70be36c3c5c2c5efb39c5551d6405785557f00" name="glibc-langpack-ms" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="d8d77040139a6b59248979a6e321f67aafcf26e3443da934bebf786272432402" name="glibc-langpack-mt" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="88f457e222d036a69f50e1c2e7218f4312666b0a6f29764884f3509e2403dace" name="glibc-langpack-mt" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="d02b80946158b9621833d05549e4c441a5f51e9effdbbf1f710c42ef0f520586" name="glibc-langpack-mt" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="2fd857e42f521959cad70f18852be982ca552c21a327f1a2bb98e47127028a73" name="glibc-langpack-mt" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="1c69f0ba3531461908711eab534afed11c28c12391b90ed37814b08a4cf06de2" name="glibc-langpack-my" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="4da7e8a350d6d40acad72579ddd89e1f1b218aeabe2ebb04032d175e3967da0d" name="glibc-langpack-my" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="eb0286abb4559a78132b779ea4620b155dfcb75cb15b08eef30a01934f5fa445" name="glibc-langpack-my" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="141fb9c12132c3d741933452d929cf347a8541e3cc9e21c89431ce2c33b0debd" name="glibc-langpack-my" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="97734a1fae55535e567bc1abbb3b3138877cfa84f08a7c12154b5e9928dc6e40" name="glibc-langpack-nan" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="1cd8ce85a4f7c3c57c2b5eac1d86dd9599aa497d561c3d27d28bf5caefe749b4" name="glibc-langpack-nan" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="264cb0bc1a330eaae96cc0cd2e017a430a0f3f7764b138ccb671f013686bb159" name="glibc-langpack-nan" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="4dc29e5208669ed1c0aa667ef3520d3774e62c380eb53452f341a7c590a5b981" name="glibc-langpack-nan" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="d9ccd24b1940be95c2dfa9c29831234a3e25c546185e0d6e311c75296bc09e89" name="glibc-langpack-nb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="14c8d9cf6e0db87f57be7b8a3185bacb3dd4603aac7313c775ec8bac29a7adb9" name="glibc-langpack-nb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="a9654082d47706fda5116078738f61ae90918edca93bf1b7659be6e48f63f88b" name="glibc-langpack-nb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="b2ce4dc6ae07491cae56a7d2b4d7391e03fc5b1a4253cc8688d49aff6eba0dc7" name="glibc-langpack-nb" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="5ff27194ef66d8af49d2681a0f740d87c9124320e06b8dfe6b191b0faad12209" name="glibc-langpack-nds" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="610482af078e819e9c4e31f35d5ea6e8d76fc346b836d37fea92a960cd73b557" name="glibc-langpack-nds" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="81ea25e9eaca398915c25a7e968202fc9eb41cdb4994ea7bef2dd48ff2d9501d" name="glibc-langpack-nds" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="2c833851339b7bd572da179c51354331750687501f809ed0ff3a70af9eae65d9" name="glibc-langpack-nds" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="192b85a8f53423b52f037d6fde78388f8e5e9f0dbd2d8d238602088da70d5834" name="glibc-langpack-ne" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="57439dc5fac953eadc6a2997377867527ab084744d96023391620b83b51718a1" name="glibc-langpack-ne" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="c686c609866ef071fe3dda6b89498012dcb5191b2c0e975c21cf9126f7890a52" name="glibc-langpack-ne" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="7b8fd3dd9ffa244022e8c3c2e75036b82ea0d7e7cb87e22702cf3428837910af" name="glibc-langpack-ne" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="2c12dc2f9e15b5b77a2d867cb9cbb8bbbe2776b6237bbeb4331658785c180bf8" name="glibc-langpack-nhn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="6ec985344e390b4889f3f1a0a09cd23f679263043818c917deb40f251feb7ddc" name="glibc-langpack-nhn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="9befd14eadf6941cc0e08099663f34ccc5e999fa114e17c8f402563fb7cec07b" name="glibc-langpack-nhn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="7fcf7735f95f9fb82c213fdc82b05f058e065ffda8e23b0505317bcfaa74af47" name="glibc-langpack-nhn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="d03f86b97e27d579dd563e64057816c0d846e4172bde141d923ef46787263330" name="glibc-langpack-niu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="d210c1b860a65d0fe6dde7e840f62669a0eb7c288efbe85df1aff854ec3b12b8" name="glibc-langpack-niu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="28840e3e2f1e3e573ffa892f878dc2ebb385f6ac1e9dbf5104d3c17f7d04a6b6" name="glibc-langpack-niu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="2ef0f883d807d71222917b074ee8f7a12b6742d225f85aeea2e1137782cdc9cf" name="glibc-langpack-niu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="1677b4e49d4e876fd3a5d535fcb0fdd8aa1f04c62035691ac735da64fc092fbc" name="glibc-langpack-nl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="eebb2d41c23b2a21c851dd32757a0569d841b4b35fe8cc05242b470f956ec1f3" name="glibc-langpack-nl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="8bb05913e473a1d59f851f1228afb6b7f4a14c1e5af9b00066901f3bafd1e1fb" name="glibc-langpack-nl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="a63d2301c2c1af447b64575926fd5a602e3253a763c26a66066741baf931fa62" name="glibc-langpack-nl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="92e019608697920ef2ed99b5e4686f34604227a05d98e8be385d482f82df343c" name="glibc-langpack-nn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="17dffcd5cf018efab6bb5026581c44b5e96eb7e6b8ae5e3c814da063963b19c6" name="glibc-langpack-nn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="aef767f74ffb7a8990b5f45f259f33397821e6f840a64b77e92054d338515052" name="glibc-langpack-nn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="7ae4ddd8259595c15764bd494d2b59a0d5def255c7eda77f14606c45e218880d" name="glibc-langpack-nn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="d930c013b1852b218c00237b1b8098be0521cf1064e99f6b92345995520e39c4" name="glibc-langpack-nr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="95deb684749a23bfc6a6ebbe0ffb3e2d23f653a8113f1e50f3b7abaed4324afd" name="glibc-langpack-nr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="22dc20bb601c4d02384208482f3f7823a01e29671c4e5f203a7aa7107a446990" name="glibc-langpack-nr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="bd045ac4acc28984d6499f409dacbad447fd56d96f4fd07f98038ebac28c5c7d" name="glibc-langpack-nr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="353c4097da462b5e835a4da2fbd4330c73333942c234eeb7b47846799f247491" name="glibc-langpack-nso" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="6885ffe417cf9b49a453b0294462e3d525d0bd67f69958f2c6b683a3d4229b16" name="glibc-langpack-nso" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="9337f1cae133c8587f2c78d322e534ffacad32d1e3279ca0db356405c80a516e" name="glibc-langpack-nso" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="d15d8a27abd4e15bde14ac0c6101d3215765f78f96edfde132dc0562139584ca" name="glibc-langpack-nso" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="5eaabe2ca0f85e18a04d2e7563c71c1ba344b0d2bcd91dfe4830ff31689f7294" name="glibc-langpack-oc" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="9c07a39a804c4c58d890b7d9116e591459b7b417f37886e406a8a3d160819460" name="glibc-langpack-oc" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="f7adb8d325747d2cd2dad1222f7a0da3a2c8993ad7278b519dab1d616e498a7a" name="glibc-langpack-oc" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="498bef0d5f5bdfa868f1a45eb3730647d8af9a7d0fc0fae6fff445863873f276" name="glibc-langpack-oc" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="efe1b34ee828e28c932b90abd4463cfd10ceb866e8a8a1a3a52eb0c7db46b04c" name="glibc-langpack-om" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="cee1da1616aec2b30db70e0d0c8143723fe950efbfacfa62c24a6c134c98b0ee" name="glibc-langpack-om" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="0031fc1c7fe1802de9065e1843d276ae05ae129197628bb698b944a7cde1d3d6" name="glibc-langpack-om" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="ed681f6159720992ce3ef50687e642f92669223f6c5459aa04f1e572aeca990c" name="glibc-langpack-om" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="92fbf05cd0733de205dd713c58ca28acdebad8bac8365891d370d57714ab933a" name="glibc-langpack-or" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="bf15dd279e00a12b14732ad6e3a7d7e52c133e43146a4e3dae3c43240b189620" name="glibc-langpack-or" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="d1e5f85c21b7ce28cf6f85f7a25ffa72486fd452a16b92bfd0ba22abc17aef3e" name="glibc-langpack-or" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="f59e5442cc6d8a82c1e15389837ce3f6b7e91c3b8ff189b8340264334ad269e5" name="glibc-langpack-or" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="a9b48aa83894cd7bac0167947a9ea2ce16e211180b7383b0332b58c9ad119523" name="glibc-langpack-os" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="441a706e8871f1c102a1b6778142bd4aa50d0d864ddde19b0845e86054dc76d1" name="glibc-langpack-os" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="1c216cab90ccd4914744e45ea45746f231d8b10b264fb18e4ef1508ebe13368a" name="glibc-langpack-os" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="1066243a0289a91c673c1073b73e417198f330272852f7cde3ceb6060b885d81" name="glibc-langpack-os" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="3bd71c8a0e96f93de301ca53f696ba41cd4d54fbc4d1f21f7d22e65ddd7df5cb" name="glibc-langpack-pa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="3ff2bca705f9f163aa05ed36d842f5cb1f28ecbbf01aed41d41558dc880088ca" name="glibc-langpack-pa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="6c4918fc1bdf58675af72474731a3a4c041461416f8d3a13bd485b0beb7754ea" name="glibc-langpack-pa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="d4eb771fa041b0850025a1b8c027230746d9478438bdf98285052acb0979109e" name="glibc-langpack-pa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="e10f844345f159c51f81ecf611c52338b774b8e23ffc7a6f0a2893a0f72d632d" name="glibc-langpack-pap" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="10d9fd430f315185187618be5109fde699dac0ba50d6788ac1e76081f0af118c" name="glibc-langpack-pap" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="277e689d47ce84c280e30257c4a08e70a918bb7ab138dff5a28df86c5a481cef" name="glibc-langpack-pap" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="93bc73c8d082e562b52bc0e2543195330794dd4a0b41144833bf1e27818393bb" name="glibc-langpack-pap" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="f5e2fecf9b336bd5356709d05a9c1ffbe060de6607696945d783fa8318ba5674" name="glibc-langpack-pl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="03709a45b6ee455589b4b38d29b8d619a8cd10a24ae41dfee299445d094fb809" name="glibc-langpack-pl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="575d2020fb1ecd19dddf4f1e3caa209367ff83b06ed05160dc8a895735c1d047" name="glibc-langpack-pl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="72251d563e6ce3f641914f818a1cd33c94a96fbf0b23682cc399e177d892aa8c" name="glibc-langpack-pl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="08ef570f6349308f7f2926eca75c7f25d1a6fafd56d7f1dd01ab3312edc18c2f" name="glibc-langpack-ps" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="b3f18a96d62298fe0e303d35fad97a500b3bdfee621c1b480b8a411c3da55a9f" name="glibc-langpack-ps" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="863d04df6d7df829049093b083298dd65948ed91e6a6c8298c01673391d661f5" name="glibc-langpack-ps" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="fdc7c1539c1dea9555426bf82a83cfe04a2d7e12d8eb263f624c5ceb1736d0a3" name="glibc-langpack-ps" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="aa83085f2f7b3583ac3d05b077c6941212c0a583b05dd739075fab2627c3219d" name="glibc-langpack-pt" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="b7c44c235ad038a64ea03c3ffb361b913edf0e057dd732e31eba6812bd58b442" name="glibc-langpack-pt" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="b2c4357b6262725d5730b27a71b7dd0ad149918a223578d3bb24a59d6bbdc6a9" name="glibc-langpack-pt" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="7b55d56661e2df65b932c3f482a53de1d24a5ca4e48d8a6d5a4bb81b4bac499f" name="glibc-langpack-pt" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="c22e3fbda9dc2635a60032c823276ee58f61fcb0288396aef13c6b8954424eae" name="glibc-langpack-quz" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="fb9c53cdb08de4c0d6a657bad7bef99afc7122f5bbb2943ae7188deb01cb4789" name="glibc-langpack-quz" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="7a6c3f321fca6b4cb9708641e55cb16eda5dde1df9455f4b9fb7cfbf319a161d" name="glibc-langpack-quz" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="b87c607b1693958a26e25848220e43bc1ac7bdb9f88bd220b82c42ab1486dac3" name="glibc-langpack-quz" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="267dd02fb1f8dab3521375f66b43954aa21cd9dacf558b37027512e1e3a031e4" name="glibc-langpack-raj" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="cf43626e091445ad67407058a7c755355fae5f1e47c96a7f93bfab2f01b66e0b" name="glibc-langpack-raj" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="1c04b2f010e54213af9abb877e7087d79111594e12b18ad647a57e882337264c" name="glibc-langpack-raj" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="e28660213d6f89ed8947ceb44aa0a80522406f274e084eadbb07187541b8a865" name="glibc-langpack-raj" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="6cae09ab924ee0d5929db04b112edeecb1b44226ef36014248b0f83fad3ec434" name="glibc-langpack-rif" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="49f7e3c5a11643ac5fcc6e4837e03ae3dfba5de23aa091e0c496eab39799c7a9" name="glibc-langpack-rif" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="a2db1ce24041abe71f7d7d740abd241997067a8fd4a4a1346e4dcbad62b96e57" name="glibc-langpack-rif" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="f937b3c903f50d0c77e38af03d3f41b42c6eb1684854aa277b718eff58276264" name="glibc-langpack-rif" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="f3f1d1c7c9b3f7bb9d30b2244bdbc7f6c2693e507336db4cf8ab31f490c6a503" name="glibc-langpack-ro" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="b7e26a5d75d4a7cfe7dd102eaee9ea8bccebab988093f80b9ec7628040919c22" name="glibc-langpack-ro" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="41aa715e6752cc484cff4e47de40acc2b654738f85ff25d345585f10ff46b31a" name="glibc-langpack-ro" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="f642a83138af9039b59aac760f65ee4997e624446abdb803e1ee72a4fc6be43f" name="glibc-langpack-ro" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="617bf56c7cdceb3bb40ef234ecbb0634ec400ce1b959ebc782cc761bb16427d0" name="glibc-langpack-ru" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="50f1b5e9fff0f3ab96075e2b7a8b88e5042f26a7cb31bcc10d0eca2091f1921a" name="glibc-langpack-ru" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="7a5164e66ba403b89329e2ebb27f164a165ac40cfba4464d888ce4ad1af04c9d" name="glibc-langpack-ru" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="80d3e4ddc57db1ca3f1d458b76d38b169f6ead85016e04d0e237cca2b5e47994" name="glibc-langpack-ru" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="1ab179da337bb77c184f6e2532d46ab7278d044e6542c8b7a1f94b03faf3d629" name="glibc-langpack-rw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="7cc44dba05102d56ac9c13001fc83d7d1beefde9738e70dbbfa2c5a12c8a9b23" name="glibc-langpack-rw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="0301763183c1dab802e993b35a4da654b4f7762858723b58493f6aa8b48079f2" name="glibc-langpack-rw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="2030df006c58511759989987d4294dd9a67eae89f37abe516a8196e41b8da718" name="glibc-langpack-rw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="213a051f3d01b7a7b2f9c642ea918b172f873673f6a6fef4022b9c4e1c35045d" name="glibc-langpack-sa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="41d9523115be255d1e421046071beb564039dda8c8745b9c07219c5c3c453270" name="glibc-langpack-sa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="b66cb2fc07a6ee3cd3f218a4f7fee0d61f906f622fbad23072aa1080698c3d5a" name="glibc-langpack-sa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="84923a2c90abf9d022456831750e26cb211e2a3d3ef50827a87cf8b4536514b2" name="glibc-langpack-sa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="62f125cf324b81a18c9f7f2f7ed91075652660df089e98d53d23aa5386c3501f" name="glibc-langpack-sah" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="5d375ebfa5e905e053fb8d76d2fc40828477986ae1d38941a27fafd0f023ce5a" name="glibc-langpack-sah" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="3ff59582b794df44c729f5d24d1911890c4b94bf2e180eda19ff22aa301cddb5" name="glibc-langpack-sah" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="0a246d2887b9f84d710c250507c424d34b524614d02d6397b468b25a43b06927" name="glibc-langpack-sah" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="fbde4e68421c81af3905c1496c48cc3b162d81b513c9e0d0f3a6af5485f2ddd5" name="glibc-langpack-sat" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="6e74bb0b1a66d8d8718b297e4f54654156cf9dbfbc42f6423d82fdde1ddd7604" name="glibc-langpack-sat" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="615478ae6b0637190a4865141d828e113bcc8400552fd409069fe4da113dd945" name="glibc-langpack-sat" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="a799204aceeb10fecaa5593811319638f3e02318fce73a7b43acf7d9554cef36" name="glibc-langpack-sat" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="3c42ebd8bb03a202332af74fefb42cc6a58e6412d3b103319f6d2a6c56ce3629" name="glibc-langpack-sc" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="9170118a6fefde9d8a7ff4d27f465697de613c516f145c979357e26f0df8fa24" name="glibc-langpack-sc" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="75663bca1979e41dcdd6555c882c159687cd41e921da22b64e58d33e0797f0b2" name="glibc-langpack-sc" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="22bce01dc28f69bc6e91626f8134d75e107d39ae5b1009d6a1557098f36267ed" name="glibc-langpack-sc" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="fdd8dbddcadaaf99ea0c55ef46cb785b4f9a44cc5704753fde5f1eb6329b75b5" name="glibc-langpack-sd" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="9425b8303ea78f07ed228d475c3739c49bdd3837f2524479591b63ecce8d1995" name="glibc-langpack-sd" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="66b8bd665fbe3f4e7fd9fce1bda261960aa48dd3e4c3cf9e682a61f061bd6ea2" name="glibc-langpack-sd" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="6ad40bfa36a7cc26a0afe786a5439b7e865fa80cc552fa41d4f3d58a817a1b16" name="glibc-langpack-sd" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="f7732c026ddd4857a9a8ee7ff3f8d8fdb51733a452be998cb9b522bc5809b6a6" name="glibc-langpack-se" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="cac7fad96295f48ecf6a8fe2ce624fa4d36246e90427efcf1cf5002200c82d5b" name="glibc-langpack-se" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="5a42b91d7b5aaa9f481875b9081e4f7d984a9a97e0ee322655d3333a8729ddae" name="glibc-langpack-se" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="f74c11a1285099046d58c4475074b6ae64f444026c0ac1ab9790add6e6c898d0" name="glibc-langpack-se" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="7243f3640c50e120a02bd4fa569a7e1b98fb64d82a7330a75531da40ad7dd68f" name="glibc-langpack-sgs" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="e0824f92088d36b0a86b34a3532ff3c4a5792e545ccdc94f35267849f83ef3dd" name="glibc-langpack-sgs" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="ff47501143b70591e09a8989849847f1b80f42b8431415d0cc8e82c8bdbc502c" name="glibc-langpack-sgs" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="67b38bd733f9fb5ca7ba97d35330c14f1c0d69cf767db388e4f4cc1e5484e969" name="glibc-langpack-sgs" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="5394bc8983d4eccefbfb681f535dc4eab82f49b6ad58377ba09c304cda445688" name="glibc-langpack-shn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="39f7f30a42f074411298f78f348b85499657746f380e36716211a905aae46407" name="glibc-langpack-shn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="b0a8f4f6a8f367e88d4aa58077df3db59326464d11dc86e881a584698e8c159c" name="glibc-langpack-shn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="d58b5dc8dabf565bdc715d93fa72c22d4f8d729f4e42cc46b215bc136c34d367" name="glibc-langpack-shn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="4abdd053a14afc7b51c1dbb276a4e013bf3a75c15240692029e136b92dd5fb1e" name="glibc-langpack-shs" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="325cb028b9d806955e6c73e88badfb1e4fce9ccbbe4b1206a9595225f0ce41bc" name="glibc-langpack-shs" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="883a63a7e4356bfb50aee93b50797f5f9e68cd65e4743285ac15655850209c1b" name="glibc-langpack-shs" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="ace2674a1f96ccc4227b822f01ba543fc726d5ba34165cf28ca3cb730aed0a64" name="glibc-langpack-shs" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="118d88fb0e251daa81f66ab95a2d32c8dec1ebcf8c9dab5573bca278e5a8a7ac" name="glibc-langpack-si" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="4dea0ec66658f6bfd0702b8f428d371275b87eb7980171c3078de0a5da0253d7" name="glibc-langpack-si" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="419f6d84609c80e4c4dbd9ac8339c9eecfeb005ff432317b9c540fa230c94bd7" name="glibc-langpack-si" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="e5adb3163278682579bee6ed1fb5497a5364edb5ca6a2f721a7370632ea5d8c9" name="glibc-langpack-si" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="a1114e86393ef81235bb944f604e5bc04a48d276e89df815d0c03a7074111375" name="glibc-langpack-sid" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="dc44cbb8700f06ff8a0b8e101125981a48e14f8d86113ab1e2a7e92283263db1" name="glibc-langpack-sid" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="83175b4a9fa55413115964a1c22be1d7d0b5bb17ce883333900f5f8a77702278" name="glibc-langpack-sid" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="7f1cffc87bdd45b0f218376bac1fa69d7c4ded934f1c581c3576d664c9006eb5" name="glibc-langpack-sid" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="c82de51be936c313683179ce9c60a0a7916346871b26aca3746183e44ee349fa" name="glibc-langpack-sk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="f72983e52d542a899fe06471f0e881ced4687338c5df1c65674091f37fbc81fd" name="glibc-langpack-sk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="1aacb1cedb6811e3cd98e079615675eaba86825313a57e93eef2dc79fe9c4145" name="glibc-langpack-sk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="85d354796e05ca23e7d52b977197fdb25f2f8c82d22f263c93824efc03cb42af" name="glibc-langpack-sk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="4e56584644f66bb5b967da11e6a73e0f8c63d4f34022fd6b15820549958d63c3" name="glibc-langpack-sl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="5d906e60a7f264f98b41a0c6be1f05ef047b6eb4958428f43d47611f929d3588" name="glibc-langpack-sl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="10acbba5103cb494dd005cc37f15ef843613c1b712099a437e9dc9a314e0c66b" name="glibc-langpack-sl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="ddbbd263dca0d46e9e437853ae59c0f7270d99c609b8c4a2d12f389ed2eddad4" name="glibc-langpack-sl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="5f8fc463fa2de11b349b06159a269f6b335d4db615f589a9954b8fd3cc7dcd35" name="glibc-langpack-sm" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="3072133f77d6bc2689b5d6350338faa29066a3ff7352f1d0079e560aabcbd413" name="glibc-langpack-sm" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="e25e179072a60a915be73ecf8c173bdd53195d576d2ab09b09bd384df21ad7e7" name="glibc-langpack-sm" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="b61569e975e2e604f8610757f71b6680a1b4a3883b8f9990fba2832fffb39e1f" name="glibc-langpack-sm" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="dabbc24d8fa9dbe32f1853f72657a82b33d74191e9733ca81ccdd6d14ac4604a" name="glibc-langpack-so" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="8de08905a5562d442684de6e3827041757d0d6fbdfb88cf0d36fea3c5794c93a" name="glibc-langpack-so" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="701140a5291c3fbf3f085ff794d6d8e4bae09ae0f48c21ab4ebc08d9e83e5b1e" name="glibc-langpack-so" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="0b845d54e598ab0a7ad038f7bdceac3c3fa0fa721b05569d6a40b9e91249f1e5" name="glibc-langpack-so" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="da0bf8c9fa28ea000e728a9f0844ebf46ad2e1bd3d58a4c03b089495c8c722d8" name="glibc-langpack-sq" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="ab10f8f16e602229be12cc1d4019e18e1882127ab9d6cb7b9828b4a554a5c2af" name="glibc-langpack-sq" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="121fec736883292bd9426a829d054f582c91ef4858c4ac2fde234023bf749ef4" name="glibc-langpack-sq" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="7eda246b53756feab050520a522f2fad7df3f2fcb726908ef394f4d9dd1037d8" name="glibc-langpack-sq" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="76fd3e533fd6ecabe05351358c0a544995c895694ebc426d623dae00c54ab319" name="glibc-langpack-sr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="6b368d6dcf6c95a2f04d8cafbd290c116c3078022a9c2c2fa65d8b4d57df469e" name="glibc-langpack-sr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="1c3a69e3446f3fcded4dadf269aea874c912ebde1ba1d5dc32b9a2ebc5aca3de" name="glibc-langpack-sr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="59619583b0c21536f56e9b6e47e2c6d71c7c76d42a2cdd47f9d04bbb5fd7b356" name="glibc-langpack-sr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="6092fedd383952127f22674d8a71755ed0cbb76b2a11433fd27599e4a54f2cf3" name="glibc-langpack-ss" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="74a8cdd0626874d3f72db6a85f97f7432dc654811fe3824161a7dafefea5664b" name="glibc-langpack-ss" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="3aa9b6bf014ca5ec791c47ecc39b8b1a4318b0c900f2dd6a20c34591310130e6" name="glibc-langpack-ss" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="db24d615e06f30202c32137ce09dcb774280703972e4a09958476cca176cddbf" name="glibc-langpack-ss" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="9424658d8e3f1cd3258adc53652c6575542134d14a43cb8a9a2a0e9ea581d915" name="glibc-langpack-ssy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="ce61a75f29314683247dda20b8a474a8a275b463f7405760b48fc542d5e92fba" name="glibc-langpack-ssy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="b8d358e8719f1dbebf5eb757cf9390111b497e14a8d931fee102f3bf39041600" name="glibc-langpack-ssy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="5975eb28baf03f1a365e85f5cce164fc5b18bb753d7c2d03e1d128d9204c88cb" name="glibc-langpack-ssy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="cc54b54d0e43702bf963e03b8e493d6a0aaef4cb6c3736f81f07929d1f70e5a4" name="glibc-langpack-st" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="f1b92158f02188515e75b8dd72cfd3955ccfc94e576a88fc4b4383b659cf6378" name="glibc-langpack-st" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="f1da2cd8eb1a162e86399f77d4c77ee5a675cc3633c0ef7316173cba44c475bf" name="glibc-langpack-st" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="e7122d28f441e08027c318d860ca5bf385249983c03ab58310e841737a29e95c" name="glibc-langpack-st" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="a918b4b21bbb5559fc8a8074bc9b7db93b7d6f945bb6c6788fccbbdb5e8880a5" name="glibc-langpack-su" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="46b298050969d59e917271101797b1a6a5e5a27307bfcaefc72d50e4201131e8" name="glibc-langpack-su" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="9f6f9970bcd7bff57741355ba2cac165a6689a3eeb061f6de649eda718c9ea0f" name="glibc-langpack-su" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="0f757d6a3900a7b59c170c87e63ff14fbbf1fc479d71fcfbd5ad33d5eb862602" name="glibc-langpack-su" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="ec1e9bc8c3061768b59ed9d30bd05b00be23541c475e96ce6cf609cccf77a45b" name="glibc-langpack-sv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="0a8c5cbdf0d026614c22766332cec4cd7d85bdc25e56197b25e477b3fd90c3ee" name="glibc-langpack-sv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="90ba3b9ddc5f890a16f8eaf96ef0a1bc5e1c7656e307db88d5813b672ee54500" name="glibc-langpack-sv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="7627b6c6d9a3dd3c8d5404c088970429779a238c1d1de509b8d81e165623e87e" name="glibc-langpack-sv" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="57874c19afdf63109eb28c36b2140c175f96f2edf6cd71c599835c13d1b457e5" name="glibc-langpack-sw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="a0f1f834559009a99fb2638910a20a59856308b54bf55fd7f41214575c06fb97" name="glibc-langpack-sw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="3bc6c9f2add06d609c35dfabb3a43887cf6b90d8becc6c1b384c80718ead27f9" name="glibc-langpack-sw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="1d1ab615c0e8a1a8746e919574d94fdbcc92826d4d0b8eb6c0c2ba54c79c2ab4" name="glibc-langpack-sw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="4a3ccada0db6d3ccfc6a0b63d0217bac77cffac14045b80ac844664fa689abce" name="glibc-langpack-syr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="a1b173ed56b108e7da0e2f035d56f38b53a7388b4e955be306922e79a5f83bb6" name="glibc-langpack-syr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="35ec2d27bd014c8cfc56762c602b7b235a1c88f23de214302689e46114812a65" name="glibc-langpack-syr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="7f31327e7fd4b46bc496f76548523c3d432452cd40f0ffa5b2895222b963eefa" name="glibc-langpack-syr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="9cec4b071b924d524452c09a03b5a0d5639e339163d892f5af764d84e54bcaad" name="glibc-langpack-szl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="1fd34bcaff066e6d5b1c1a224d0765ad566a61e37ed926a47889cbe2ba3841c7" name="glibc-langpack-szl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="0393b15c9e911914d916ec3bafd129292dc781b9653f25ee20da503b2ddd251d" name="glibc-langpack-szl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="ed75141c9adbce806e71dfae76b3137badbcb57af353304ad9b700b14f48a26b" name="glibc-langpack-szl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="82e6240d55f4112a5dd5ec9af604003c5d3a94eabdb899a7f76739c88ef197bc" name="glibc-langpack-ta" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="c07c53e6d5c0b6407488d8e672e0138883654f20cfaf0d2029d6b2b171c816da" name="glibc-langpack-ta" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="c8bb05e21d4cc2cf91f327581d0d5258a2fcf1426a2060c0f913d439ca5236a8" name="glibc-langpack-ta" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="e6098583247d52b6b07d66089020049e176258573d47d31291f90aff6a55230d" name="glibc-langpack-ta" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="5deb1201a5363dfd9a453575a998bbc4067cddeeb69c0d44aa1f6278903f881a" name="glibc-langpack-tcy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="f6384e9f95d3e903f180e8574c616c75f2b2d5317084ddcd6c5177cce06eb0eb" name="glibc-langpack-tcy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="317883f80912b9b139217e358f37f2055a0789fe35a37661e437936539853dda" name="glibc-langpack-tcy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="1df449027764ff503b42d396172ec84cedd0dbabbb27766d3a042af327d9352b" name="glibc-langpack-tcy" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="0760ffdf14aac65b09f9f5e6452dd79f4456421afdf7cbfd15ca38c7fd6e1b0f" name="glibc-langpack-te" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="179a1848544d0cfb23fe260bc441c533a212803c40967f5b6d0c6bc9d63a1f06" name="glibc-langpack-te" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="3bb3b6f8d10e7d1632411943b9b1efb047f829f7a099afd8247159aa89893ea7" name="glibc-langpack-te" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="3b7d09678d288f7cc4ae17e857eea1aaa623ceac5bb439e1d86acc4046382763" name="glibc-langpack-te" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="5e320886826f19d27fbc2aa9a79281dab1edc1b9d7d2f8933748eb1da68b13a4" name="glibc-langpack-tg" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="99e5f7975e261421e49398f0ea12408ee7dbd91e21074b6d12afe9880325ec5f" name="glibc-langpack-tg" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="aecd28e7f614d1e87b5ba44d4e1dd22bc31d07509a011f36772e347cc205199c" name="glibc-langpack-tg" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="b990f4e507aef915c3475cc56c704a7f62330ab860e8925ad77738ab81841eb5" name="glibc-langpack-tg" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="b45a527042efa435bc7ad3f9f3ab9267b6f3e44055641b3ac8ef37311fafa23e" name="glibc-langpack-th" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="828c1e059adc0c4731f6ddaa99cee5f50e56667ae9a4bd28730336a60d3392ac" name="glibc-langpack-th" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="f7ab01c7f20687b8706a7614867283c59c481bfe924e44d2cb9bb6f531cf3aeb" name="glibc-langpack-th" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="dcca81c682f72b0d8d7aa33f4693b9b78fd54d9a0da496a2a5c2f9b735f1ab6f" name="glibc-langpack-th" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="386c11b7d58e997a24ffa4832d58b107bf3330134d729a2d0ae4b7fe3bed134e" name="glibc-langpack-the" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="0a15f26a97c2072be1d572c8bc6306e0120d7279ee8d5aed892435e2f886351e" name="glibc-langpack-the" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="c1e6618d904e2f111ab7aeeddebb367878e6b7d3cd9579f8eb58891de8c37b65" name="glibc-langpack-the" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="3943a38cfd8cd82e98373edc07abf42cf45aab0fd0b01fa289a687bc5ddcc5db" name="glibc-langpack-the" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="4398e1c04b3990158be349faa437314dc6fd04c7ab063dc40787299793069318" name="glibc-langpack-ti" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="7b22bfda7f6f308cea0864cadb4c390154c3f0b100825ff14346e5b3b524cbdf" name="glibc-langpack-ti" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="c5fd19b875afc407aa2c102bd64448291f2f76e263192f0a9019b9e588b3c6f2" name="glibc-langpack-ti" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="7770e93fe24a0ef197683c28ddfefa59b54a6c53a779504a2a11cf20a7894b05" name="glibc-langpack-ti" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="89fe60db2467c0894b8a95a52611243d8f73f2a8548277fdd771b19b41979af7" name="glibc-langpack-tig" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="019ff7966331c2134abaa3c5e8b2fce9a117ac9f5af56d5481799dcc25cabf95" name="glibc-langpack-tig" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="a78bfa8ffb1b5ecd75ba11e4f4531326504a7e968f719f4364eac485096f6166" name="glibc-langpack-tig" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="3add3868703e53d17ad3372be67ff9a1864ea9616f0c10987e67ab3d0f0cf1e9" name="glibc-langpack-tig" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="5602f47c8fe3c6479ebf6f1c14845d58e1544639fb2bb64ace64d86fe3922bbf" name="glibc-langpack-tk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="d24373eab21e209c65eecb599d6a1fd9873f6b5f6db4e28b684ccc6fe51d2749" name="glibc-langpack-tk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="4f6d95322594243ac848a04b054d002ddeffa93785def0b86468d236a9a172ed" name="glibc-langpack-tk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="3f727a853842f9aca00feaa3d1c061bb217018c0659cd3ededc125f28debb1d0" name="glibc-langpack-tk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="f33c2b0d328b10d7b768936a3eb047386389e2add5cc8ec460d32eff0bb33c0f" name="glibc-langpack-tl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="815a42041ba68e2faca5280b72e6fef1d4a79d3a276fa1461f81c13d5ba34257" name="glibc-langpack-tl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="a6f5c88b6b73ed7e8a9e5f3d24dc90821840a0978eb2fde5617c1b2df3428c57" name="glibc-langpack-tl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="b3578e706da93d24f6a7cea06ddcda90ad1e39f51d56ede3b9578a1655754f87" name="glibc-langpack-tl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="f01a36312173094b6da6f0f60d36266d2da3184b7c4e8ff87d91cc35f43a0406" name="glibc-langpack-tn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="94852e4c9d7ec98dd649f566de03f744b3bcfd779252a64500a82a5c43465e35" name="glibc-langpack-tn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="0d4ba9f061fc3fe41fcb65d10cc994a4da6a97805db152246e955a4d2649cd6c" name="glibc-langpack-tn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="8937e2b48e8e2b047b29a469172dd678c9111e93419d033a7e4f4b2e956c3d1e" name="glibc-langpack-tn" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="3777a230712447500b22d4a09e0653aad96a0ca5b1210e6fafaca6a5987de200" name="glibc-langpack-to" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="36ccbbb586d322c18f333e31daaee3a13abf32bca37ac483a8ebe1f18de4ba3f" name="glibc-langpack-to" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="1d0170a5da04d34c072fd00dd47ac8be21a30913e434580e550f851442f6a114" name="glibc-langpack-to" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="1bd81d6215b764a695522ccb2138b733c384f5a8af5aaa9a8b5ac7f7201c2b3c" name="glibc-langpack-to" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="bb44f41c8a68ca87e592c2ba2a3119f0456a19db9aa3078a57a0043c4fc768d4" name="glibc-langpack-tok" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="46a94c188bd9631601805a899139b9c678172737e926d3ca6a0a7b4c4488921b" name="glibc-langpack-tok" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="e748640c9fb683d621ceac881e52f471d7fda110682c07247c79ba08535ece63" name="glibc-langpack-tok" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="eab2a627a89056c26c4174d447f1bd494f0014774e9c50e7cbfe4937e5c2d3ee" name="glibc-langpack-tok" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="29031e95d20252de72adbd2c0f23c7427c5ac4fce036d39df84a91eda1e31e51" name="glibc-langpack-tpi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="3c9b4830d136df054ee08c2a1fcc74c4dbbd578027ee652c655c31f2a3a794a4" name="glibc-langpack-tpi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="4879e2b06863551ffb364a033ab990ef469e861f8ba2706ce69c9177ab435711" name="glibc-langpack-tpi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="b93346f03ce020efe22d5d5ebe623f2a134706f8542d6b456122d42de7252287" name="glibc-langpack-tpi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="bc0ed8e12839073d2ac8b38b054a4a2c429320178a7357d62ffc71381a90155b" name="glibc-langpack-tr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="b4d15d68de499ae54b38cbcd2ac16eda02dad028989c5d0f94cc7739f3674770" name="glibc-langpack-tr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="01f94e2d9274846b36c398b4a2e4afa7d92f9a13066202ed8243c2a08aeec28e" name="glibc-langpack-tr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="98fa4e8fc5afec76e3f28eb2f8fae31864620f305f4c5480b0a241f11c5da611" name="glibc-langpack-tr" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="6c76f043483d7bf9d22d34e8050d750099328b5cba93c68b97d73f54a07c4094" name="glibc-langpack-ts" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="cc6b200a684f4964b1a31d5d92e7b711653d752ad909698715e44abafacd3135" name="glibc-langpack-ts" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="4fae2474f2eaa5c6cd030bc5b294f1afd315d834320bb6735364c48f97d56aa2" name="glibc-langpack-ts" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="b3fb53d871e42581d63cffbcfd7adad6068ee0f3c03af28ae5c6f75e4287470d" name="glibc-langpack-ts" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="6b917384d00710d34559767986db41ca865bddab7a97a68b0315a0f52092f53a" name="glibc-langpack-tt" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="8005c262cea391b2955b26084a7274348816c1d701776e339c6be857a4d7b8c1" name="glibc-langpack-tt" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="7123e9aca96923b2600c7cc881f92162c2c43bca8fc2941bcaa354ea3d45013f" name="glibc-langpack-tt" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="c1045b530f947e86f87f42148e76bd79ea9aae04309a7719bda6588e2f5c4c89" name="glibc-langpack-tt" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="2e6551136e9d57247645213b2c153a60ec575d58b70588ef6b21895cf5c2729b" name="glibc-langpack-ug" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="7d6648699fd964294a634291e50ef85537db203823f6bbe349c69e661103a186" name="glibc-langpack-ug" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="2a91fc70428b423ae8449ec2a5ae8ad4a14612da38c6709a23b89de89a38843d" name="glibc-langpack-ug" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="b6414ea5d06ad9fdeca258c1e6e0c6b79a838531c850d064282b75baed8483c5" name="glibc-langpack-ug" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="b889cf8ee370994dadaa5da7e7869e14ae6e92138b00f3c9c2ce0739d65c8df5" name="glibc-langpack-uk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="021075272d789ff8da7ab6a01af78032a34795e19331ef5dad75a83809831df2" name="glibc-langpack-uk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="7a0ddbf6261c16f9813db7b44eb6c634154e052f5d0e769ef566e2c827f31434" name="glibc-langpack-uk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="2db7f8c2818823c5a3e942c4510553ab2ec36bf3de70146b3543b972b40faff3" name="glibc-langpack-uk" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="10648e666bba8ee8e1a60c250d92fe5ed0f48080037c5db6309c627f1982e5df" name="glibc-langpack-unm" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="511ba4372abadcf3891a61f9794a9e910e7dea536d24abf5282f30c6f60cf3cd" name="glibc-langpack-unm" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="80ef4f5543b7378eeec6120cd953723e1bc042621538f4029b7083cd9ec60c50" name="glibc-langpack-unm" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="0b308fb78df55967875f65eee11bdd8df4a036eff6a964296d0d6565c731f30e" name="glibc-langpack-unm" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="9d9dd95f2e121bae35017add89d0a4e5c47a478cb3fb1ac4691ff258bbb93c1a" name="glibc-langpack-ur" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="a8bf026baa49bce5f2ecee9b64d16278df1d0498ee3268691e0d87a59a3b1a54" name="glibc-langpack-ur" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="46996e6e7c9e9b900896cf14cd3bdfc0c9758544a95acaed0de27af71e22f9a7" name="glibc-langpack-ur" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="3ab18d831240253e1c39adc6adf4fa80aa3977e674a34bc3f400b9ac546923ae" name="glibc-langpack-ur" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="b1c3851f7de6ca47b19de3494a77664eab2ec57696b311fb6b15d752c28658c5" name="glibc-langpack-uz" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="4ab0d35fd7a091be140033890b14bac01e619bc3a3723728086b42755550da5f" name="glibc-langpack-uz" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="ed22fa29ae9486479d47a58bde690c177ed7115e026d36d21d371456ce5269ce" name="glibc-langpack-uz" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="26689162a5e9b9a3f6b4f05975e24401453b86554f3258d0534b2a8863c9f710" name="glibc-langpack-uz" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="96febb9dea8d95f163909badcf49fcfe7b73f6e43a267398823409c190214340" name="glibc-langpack-ve" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="c45ed1cc75fa92777d67e986cd154b961e2ae2b657d0dbffdb3ef3707e3fd836" name="glibc-langpack-ve" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="665f99c4da06405dd8d5272e3989a110f3b8d55ef8cb334514e0fc10df5003aa" name="glibc-langpack-ve" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="e80abed6113a970e2c369947b6a4a613e16ae080b13d452ea3024e52065c91b4" name="glibc-langpack-ve" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="627cf702931b054293b3963ff99f551d329d513d9a165309155321051bd0810d" name="glibc-langpack-vi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="6efc8fc2f3c78ae9b9d93816f9ef6a20e4025525c1f6de7d14deb4df95f5cefc" name="glibc-langpack-vi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="429c8499766f667f21793fcc8d9ed5753cb02fa7584f08fa0e80d0b650a4c7eb" name="glibc-langpack-vi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="f02b7701f2c85cdbba81c0ef076da9e2a9d6ef831f8c79cf8d0ec2f662fc869a" name="glibc-langpack-vi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="2b6337ff8b9aabadca43c82a7acc6a9e3a4adc1ad6375f21dc50922307a8c2b3" name="glibc-langpack-wa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="60eb20be9f1239773dbcc5864245e891db6ff696f6f9a96d8150dac7b9f192a4" name="glibc-langpack-wa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="f4e05648c3a193b3688c0e4eff1b198d7aa40a941f914baae88963551df8872a" name="glibc-langpack-wa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="a87271962bc0a481eaec32b32bc3d8cc0ef221d61b9b2e49115d9cb1ff15c131" name="glibc-langpack-wa" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="818d139e9a92510bac88c234c5d8847c3302679198ae7ac7d41b889ea84868e5" name="glibc-langpack-wae" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="12ad8775d8f6a60c55d81c9ca8a2331f7562bd036221e80e6816bb438398a2dd" name="glibc-langpack-wae" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="ffebff877c34165a3333e618df1177d0735f15ea6704573bb7b5baa00226ec2b" name="glibc-langpack-wae" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="b77b17e935abdb8077946dc19cda98d881cd4a3f845c9c9eed49e3c21128932a" name="glibc-langpack-wae" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="59da7c4cad7d51d102315a4c45d9e55a40c874b149deb90aa4228a98dac5745b" name="glibc-langpack-wal" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="1d62680ce9a94b9fce1cd34c85a234c9008e1b78fade988d803892f392bdce79" name="glibc-langpack-wal" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="f08dafeab40ba592223d87f36f2a4b31ef0ee9ed059ed9c1e1bc7c300b8486b8" name="glibc-langpack-wal" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="db694859fd04e261bf01468ae9e287bf5c466791f529b178834d040ca93b146d" name="glibc-langpack-wal" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="5d3215d2a6123ac5f3bd6b9a3cf2e3c0dd82af132988f3e9aa903483ba10ca31" name="glibc-langpack-wo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="dae4f562327773e213709e10467d69e1faf92fb7b4545f63c733a44b32be625e" name="glibc-langpack-wo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="7853243e227f56eb99e8c748d34f1ef2075f2fd34b0a97a158e86bcf75312784" name="glibc-langpack-wo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="bb758b98ef836836f163a628247797f033a8cde04e2097e04676b2fa4f90c13e" name="glibc-langpack-wo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="172be3eececbd915574bb1410c048a2b3414a8839df6af5b8e0735e1f51c2b45" name="glibc-langpack-xh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="45870f786f91f4e381945b26dcb3ce4c30bd28578a2596d793c174447a7c3961" name="glibc-langpack-xh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="faab0d04be68fa0a7722d9f1fd68a134d7a850b19ec79e6063723ff0aa8a3866" name="glibc-langpack-xh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="83724e094faa7bf55554f7ab8401a4838167d576ae7d9684d8a2676a3c9627aa" name="glibc-langpack-xh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="028e35fc8ceae9e435deedf3ed36376bb3f0a99912f98ef2d76fafca375e0d5e" name="glibc-langpack-yi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="20c638a4ad1e7a987a4579815502cd19ff3fd1def2de2f766d9c0004b210be0d" name="glibc-langpack-yi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="ac9888be1e2f9f8fd61cbc2701e91e79c7c2983b64c4691a24ca9a88471bbfa0" name="glibc-langpack-yi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="1b2e99a5b4a68aa58652df38ea441c23ebbf366fb5e7ccf5fead72784c85e96c" name="glibc-langpack-yi" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="0fd28371d1798920cbeaad45ec4c44d1f992dd8aa0045b73e54d5d25a06110a1" name="glibc-langpack-yo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="9e3115febe8415cf933baff825e59c23e4f9ffa1fd23eba7aa9c7387d4d6ab04" name="glibc-langpack-yo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="185e9b4063487b128fb90edb10f081d3ed3c3516124e5a17d9c3770c1975e4aa" name="glibc-langpack-yo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="332a4a06df6f9038e0eb354aa45da54de9a6bdceb06d0c43168bc5d8e34f1e38" name="glibc-langpack-yo" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="63e60bf3bf54bd73f95025d8416de315fe6269e0eaeeba10dce55ef3196cd5ed" name="glibc-langpack-yue" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="86659486aa3ac3608e6c3b4f9f1ad688dfa95fda807508bdca115074c772879c" name="glibc-langpack-yue" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="a55f3d8a7ffc69aa79ba9c15c0f4c9bf739e58811d2eb15a1595584ffee2c0df" name="glibc-langpack-yue" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="541dcdbb9df41f74fad884db6cdce9f0726a63553e3b5f71a5bc52259cddd50b" name="glibc-langpack-yue" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="db143dd640c4512764e882819044ebd6d98ca6a06ae45bc732e273bdd38d32d1" name="glibc-langpack-yuw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="0b32804acdf59ebd031ec186ac8d50c8785a2a5ea7d40058a6babbce85fde9d8" name="glibc-langpack-yuw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="db9cf4209218b695d2b0cb3367c123d0ea40d6cee9dba21473791bca86fe8661" name="glibc-langpack-yuw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="02d2454b869a54af2d09572566d006098a6f79f9e8d6e0779f2ddca2294de7e6" name="glibc-langpack-yuw" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="854239b5727190088ba78e16d308f6b254cbea75711b8e9dc06cd11d0bc2b058" name="glibc-langpack-zgh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="0e1d407dd3c913faa829afb515e6a8d2669cb6eb0cc57265ccacd98c6edc9fd5" name="glibc-langpack-zgh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="e565820883009d21b25fb747899787035725c0346c340a13e125f6c7af4b15e5" name="glibc-langpack-zgh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="6f44b00c69e2692f67d93ee3dba1531b1cb9057f481d48e81801574c69433f4e" name="glibc-langpack-zgh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="1710b6c0f009f0d01e933a179ed0237ca8af74870e2fc682b29ce9c9ff15fb80" name="glibc-langpack-zh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="bed76a232852382948311aacf1e0998b0669890d7a3a13ccacaefd52ba22f4e7" name="glibc-langpack-zh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="36b4c8e5267bb2dcf01592198089d81a769399ed7ab965ccc9d90e2034bccfe8" name="glibc-langpack-zh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="9c91a2543c2e49cc4b04281bb505d6cc53eac0a5edb444d64cec79988be489b3" name="glibc-langpack-zh" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="976df05d91ed7f0d5a2fd3ebf04d979e138b5798495336dbcf85c0f989b13cc4" name="glibc-langpack-zu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="4f3276d48dbcbb1cc9455ad9c143df4ecdaebe7f11eda32ba52c9a17fdceaf9c" name="glibc-langpack-zu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="aa0b640d91d8710d22ead1e027f2475649c104c5bd2d7b8028a5ba45d892fa59" name="glibc-langpack-zu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="eaea5157cccc0145846bf32c20b5cb1dc1996018b9c2ba4039830eddcfb8d4a4" name="glibc-langpack-zu" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="a68f2e66851c5b05f008cb664ad719c6f836098f2cec569d77e916ef5a7c77fc" name="glibc-locale-source" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="0277462762deb2c5997827c8ed45715fa14a3f4783b8ada2562a1c4ce0c199ab" name="glibc-locale-source" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="3974161a3657c41635c21649927fb82dd93d13843195970670b07b974a258c3c" name="glibc-locale-source" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="bd850b903985beb5b3d9f08bbc2cf5dae1e2f47670769c9c337b027298e0aa96" name="glibc-locale-source" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="a9d93edd34f7ebafd02e002eac3ba5b673ac9c251668a879c267f664a9f3e2bf" name="glibc-minimal-langpack" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="cabd5659a96b3a6420bd70edee846b8364343f6912a7cc1cc6d52a2d90827901" name="glibc-minimal-langpack" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="ba33cf3eb2133beeb4162182dff1856bb359b988362f58c315d099544b8656fd" name="glibc-minimal-langpack" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="74f6779150cf632600a4e7f2fc1e440ee90770524f63b3d08b0b74e1c8790f18" name="glibc-minimal-langpack" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="43f3c5e0ade6550d4e79cd459b6ec72bf3710459276bf25b90413f3833b8cef4" name="glibc-nss-devel" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="acc7d3025d5f9d8aca7570d01800d88f12f856e1c1d97bfa0db89d25a7824345" name="glibc-nss-devel" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="8bb39a8fdf5f25a5ce3005f04a9213b2676a0831fd0d9b7c851ba87da720c834" name="glibc-nss-devel" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="be8435dfe2b2ccc19b3117861e5f62a7f626d3b09747312fd3a833912131b2cb" name="glibc-nss-devel" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="ff4277b270485460f0a4baa66d28f01c5f2d3833ef22bfc9e39c603243b1792d" name="glibc-static" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="07f539a57a418e2714477121b3bd6bc43ec5232698732683f920ed357e9ffbc0" name="glibc-static" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="7a195ccb94fae0e65769bcaa548dba62877ddf7ac570b903ef4e23c7b63c1ba5" name="glibc-static" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="c77e08973059a377a10a84b92fe402909cd0e957f9754a15bc0d37053203f50b" name="glibc-static" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="242c8193b92911bc1b73bfc89ba5d63b6d58c4f14450e0ffdc80e70aab88040c" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="5a519430b4e55e97fdab0c5539fd921272104c2b8e5e9bf40f33de1b472ab7b6" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="f1526fb730775099cd24a79d8388591892ed329da2ffbd5607ec50cd470edffa" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="1573fcd10dc165bec89028f27b4b7b1cd4b88c14e2fb33a980f15f9a2ac9774a" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="9ded11eaab77f48795672c16fc9f6e85546813fbfaeabb459000293f3c9ef25e" name="glibmm2.68" arch="x86_64">
  <version epoch="0" ver="2.78.1" rel="5.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.77.0-1" date="1689595200">- Update to 2.77.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.77.0-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.78.0-1" date="1695124800">- Update to 2.78.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.78.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.78.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.78.1-1" date="1706875200">- Update to 2.78.1</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.78.1-2" date="1713355200">- gating enabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.78.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.78.1-4" date="1725278400">- Require libsigc++30 and not 20</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.78.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="dc901e9e26ac214fefe27ec05fe18dfe796143c09133b406c846a6778d048ba1" name="glibmm2.68-devel" arch="x86_64">
  <version epoch="0" ver="2.78.1" rel="5.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.77.0-1" date="1689595200">- Update to 2.77.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.77.0-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.78.0-1" date="1695124800">- Update to 2.78.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.78.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.78.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.78.1-1" date="1706875200">- Update to 2.78.1</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.78.1-2" date="1713355200">- gating enabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.78.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.78.1-4" date="1725278400">- Require libsigc++30 and not 20</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.78.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="c9c981ab2d542bbd3fd1687b97c1bdd5fefc424363d9d69f81752651a42f772b" name="glibmm2.68-doc" arch="noarch">
  <version epoch="0" ver="2.78.1" rel="5.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.77.0-1" date="1689595200">- Update to 2.77.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.77.0-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.78.0-1" date="1695124800">- Update to 2.78.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.78.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.78.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.78.1-1" date="1706875200">- Update to 2.78.1</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.78.1-2" date="1713355200">- gating enabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.78.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.78.1-4" date="1725278400">- Require libsigc++30 and not 20</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.78.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="b02547b0143decb42f380181c8368c754d7e8cd46e7c53f7cfd1f2d99337f7fd" name="glslang" arch="x86_64">
  <version epoch="0" ver="16.0.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.1.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.1.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 14.2.0-1" date="1716897600">- Update to 1.3.283.0 SDK</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 14.2.0-2" date="1717070400">- Update license identifiers</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 14.2.0-3" date="1717070401">- License: AND must be all capital letters</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 14.2.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 14.2.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 15.1.0-1" date="1737460800">- Update to 1.4.304.0 SDK</changelog>
  <changelog author="Anusha Srivatsa &lt;asrivats@redhat.com&gt; - 15.3.0-1" date="1750334400">- Update to SDK v1.4.313</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 16.0.0-1" date="1767787200">- Update to 1.4.328.1 SDK</changelog>
</package>
<package pkgid="0aae39d099d8166f39bb820fee2d7937753a3214cc50f67ce75a949de71848a6" name="glslang-devel" arch="x86_64">
  <version epoch="0" ver="16.0.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.1.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.1.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 14.2.0-1" date="1716897600">- Update to 1.3.283.0 SDK</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 14.2.0-2" date="1717070400">- Update license identifiers</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 14.2.0-3" date="1717070401">- License: AND must be all capital letters</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 14.2.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 14.2.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 15.1.0-1" date="1737460800">- Update to 1.4.304.0 SDK</changelog>
  <changelog author="Anusha Srivatsa &lt;asrivats@redhat.com&gt; - 15.3.0-1" date="1750334400">- Update to SDK v1.4.313</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 16.0.0-1" date="1767787200">- Update to 1.4.328.1 SDK</changelog>
</package>
<package pkgid="97bb5cd06820bd74df0661420e46cbd33c325cfd77f2ca5fb57f13f1c4accbe0" name="glslc" arch="x86_64">
  <version epoch="0" ver="2025.4" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2023.7-2" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2023.7-3" date="1714478400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2023.7-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2024.0-1" date="1720180800">- Update to 1.3.280.0 SDK</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2024.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2024.4-1" date="1737460800">- Update to 1.4.304.0 SDK</changelog>
  <changelog author="Anusha Srivatsa &lt;asrivats@redhat.com&gt; - 2025.2-1" date="1750593600">- Update to SDK v1.4.313.0</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2025.4-1" date="1767873600">- Update to 1.4.328.1 SDK</changelog>
</package>
<package pkgid="daaf3b77cce9dcbd9adf989fdd0d7dfdb34b6292d1a9736d65fd3120527e1e09" name="glx-utils" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="8.el10"/>
  <changelog author="Erico Nunes &lt;ernunes@redhat.com&gt; - 8.5.0-1" date="1675425600">- Update to 8.5.0
- Change build system to meson</changelog>
  <changelog author="Erico Nunes &lt;ernunes@redhat.com&gt; - 9.0.0-1" date="1679918400">- Update to 9.0.0
- Enable vulkan demos</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.0.0-2" date="1682424000">- Install all necessary shader files (#1373299)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt;" date="1694088000">- SPDX migration: license is already SPDX compatible</changelog>
  <changelog author="Erico Nunes &lt;ernunes@redhat.com&gt; - 9.0.0-4" date="1696334400">- Split xdriinfo into its own package
- Remove xdriinfo additional source build and autotools dependencies</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.0-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.0-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dfad0eb179ee035d67a773956537302f208c595bee39280d45efe2d27accab27" name="glycin-loaders" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="1.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.1.1-6" date="1699963200">- Enable glycin-jxl loader</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.1.1-7" date="1699963201">- Update license tag for dependencies</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.1.2-1" date="1699963202">- Update to 0.1.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.1.2-4" date="1706788800">- Update Rust macro usage</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.1.2-6" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.2-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.0.1-1" date="1736251200">- Update to 1.0.1 and sync with Fedora</changelog>
</package>
<package pkgid="b3618328a10cf3db1cdabb90ae2d4161851202c1255dddfe8cf2acd79b5a86c9" name="gmock" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="6.el10"/>
  <changelog author="Terje Rosten &lt;terje.rosten@ntnu.no&gt; - 1.13.0-1" date="1674043200">- 1.13.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Terje Rosten &lt;terje.rosten@ntnu.no&gt; - 1.14.0-1" date="1697371200">- 1.14.0</changelog>
  <changelog author="Benson Muite &lt;benson_muite@emailplus.org&gt; - 1.14.0-2" date="1700395200">- Use SPDX license identifiers</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.0-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7eb5f9ab469181ae7bec6225ed5d1e6094dd0f8a0f9e6bedffcde9663b310602" name="gmock-devel" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="6.el10"/>
  <changelog author="Terje Rosten &lt;terje.rosten@ntnu.no&gt; - 1.13.0-1" date="1674043200">- 1.13.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Terje Rosten &lt;terje.rosten@ntnu.no&gt; - 1.14.0-1" date="1697371200">- 1.14.0</changelog>
  <changelog author="Benson Muite &lt;benson_muite@emailplus.org&gt; - 1.14.0-2" date="1700395200">- Use SPDX license identifiers</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.0-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="105bb31fd35c791d0ee1425fbcb6fc874bdd4e3d0c4cc920a51b39821f347393" name="gmp" arch="x86_64">
  <version epoch="1" ver="6.2.1" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.2.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:6.2.1-6" date="1691409600">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.2.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.2.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:6.2.1-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:6.2.1-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.1-11" date="1748520000">- Port the ibm z13 optimization patches
  Resolves: RHEL-24118</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.1-12" date="1749643200">- Release bump due to internal issue with the build system (missing debug symbols)
  Related: RHEL-24118</changelog>
</package>
<package pkgid="e87e82d18750548207f500337960a5281c375ed94bcfca1cb4b9ccfd6c1a423e" name="gmp-c++" arch="x86_64">
  <version epoch="1" ver="6.2.1" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.2.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:6.2.1-6" date="1691409600">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.2.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.2.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:6.2.1-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:6.2.1-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.1-11" date="1748520000">- Port the ibm z13 optimization patches
  Resolves: RHEL-24118</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.1-12" date="1749643200">- Release bump due to internal issue with the build system (missing debug symbols)
  Related: RHEL-24118</changelog>
</package>
<package pkgid="b5a3950216b106ff3f5bba8debef7e29063f155f3f093c83abb159895e941938" name="gmp-devel" arch="x86_64">
  <version epoch="1" ver="6.2.1" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.2.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:6.2.1-6" date="1691409600">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.2.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.2.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:6.2.1-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:6.2.1-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.1-11" date="1748520000">- Port the ibm z13 optimization patches
  Resolves: RHEL-24118</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.1-12" date="1749643200">- Release bump due to internal issue with the build system (missing debug symbols)
  Related: RHEL-24118</changelog>
</package>
<package pkgid="c54e58692f74e9d6251b4bf9d37403c0fb03e347063ca850f86b94990cb623dd" name="gmp-static" arch="x86_64">
  <version epoch="1" ver="6.2.1" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.2.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:6.2.1-6" date="1691409600">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.2.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.2.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:6.2.1-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:6.2.1-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.1-11" date="1748520000">- Port the ibm z13 optimization patches
  Resolves: RHEL-24118</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.1-12" date="1749643200">- Release bump due to internal issue with the build system (missing debug symbols)
  Related: RHEL-24118</changelog>
</package>
<package pkgid="dceeedca0550c3a5d50b7f6558674924c8c139f924834d9daabdc97633d14718" name="gnome-autoar" arch="x86_64">
  <version epoch="0" ver="0.4.5" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.3-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.4.4-1" date="1679140800">- Update to 0.4.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.4-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.4-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.4-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 0.4.4-5" date="1707480000">- Migrate to SPDX license</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.4-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.4.5-1" date="1725019200">- Update to 0.4.5</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.5-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2e339f3fb3e7f1651a3674e8afcc321f49f0945696a03dd52a3e5131dbaa9111" name="gnome-autoar-devel" arch="x86_64">
  <version epoch="0" ver="0.4.5" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.3-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.4.4-1" date="1679140800">- Update to 0.4.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.4-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.4-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.4-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 0.4.4-5" date="1707480000">- Migrate to SPDX license</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.4-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.4.5-1" date="1725019200">- Update to 0.4.5</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.5-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="55fb982e6d2bf8b6637d4e6e82508f6592854a74790c45bb751ab71779998542" name="gnome-bluetooth" arch="x86_64">
  <version epoch="1" ver="47.1" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:42.5-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:42.6-1" date="1692014400">- Update to 42.6</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:42.7-1" date="1700136000">- Update to 42.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:42.7-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:42.7-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:42.8-1" date="1707220800">- Update to 42.8</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:46~beta-1" date="1707566400">- Update to 46.beta</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:46~beta-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:46~beta-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jiri Koten &lt;jkoten@redhat.com&gt; - 1:47.1-1" date="1732708800">- Update to 47.1
  Resolves: RHEL-62344</changelog>
</package>
<package pkgid="b4047672fa2e8ede2b9899e5a5edbda666ef9df0b4d77e33ae10227df5a20804" name="gnome-bluetooth-libs" arch="x86_64">
  <version epoch="1" ver="47.1" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:42.5-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:42.6-1" date="1692014400">- Update to 42.6</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:42.7-1" date="1700136000">- Update to 42.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:42.7-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:42.7-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:42.8-1" date="1707220800">- Update to 42.8</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:46~beta-1" date="1707566400">- Update to 46.beta</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:46~beta-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:46~beta-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jiri Koten &lt;jkoten@redhat.com&gt; - 1:47.1-1" date="1732708800">- Update to 47.1
  Resolves: RHEL-62344</changelog>
</package>
<package pkgid="ca2b789aad5b6b11a3469db85c4b7753e64a52776f073f34d9f4bbd1f9086e76" name="gnome-bluetooth-libs-devel" arch="x86_64">
  <version epoch="1" ver="47.1" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:42.5-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:42.6-1" date="1692014400">- Update to 42.6</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:42.7-1" date="1700136000">- Update to 42.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:42.7-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:42.7-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:42.8-1" date="1707220800">- Update to 42.8</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:46~beta-1" date="1707566400">- Update to 46.beta</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:46~beta-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:46~beta-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jiri Koten &lt;jkoten@redhat.com&gt; - 1:47.1-1" date="1732708800">- Update to 47.1
  Resolves: RHEL-62344</changelog>
</package>
<package pkgid="bbc9751ea838675700f16c061b4c7b3c1de55a25bac95aafd1ecd0d9c811fab8" name="gnome-browser-connector" arch="x86_64">
  <version epoch="0" ver="42.1" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 42.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 42.1-3" date="1686830400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 42.1-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 42.1-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 42.1-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 42.1-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 42.1-8" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 42.1-9" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="6249eb817c2c52f6bb42b6af2da62a3f34ae666deb042fcea01ae07c04ad9af4" name="gnome-calculator" arch="x86_64">
  <version epoch="0" ver="46.3" rel="1.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0-1" date="1692273600">- Update to 45.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0.1-1" date="1693915200">- Update to 45.0.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0.2-1" date="1695124800">- Update to 45.0.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.0.2-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 46~alpha-1" date="1705924800">- Update to 46.alpha</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 46~alpha-2" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46~alpha-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46~alpha-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 46.1-1" date="1732190400">- Update to 46.1</changelog>
  <changelog author="Lukas Tyrychtr &lt;ltyrycht@redhat.com&gt;" date="1747310400">- Update to 46.3.
  Resolves: RHEL-89562</changelog>
</package>
<package pkgid="9d41462e5cee5da896a84dd3e97f4be3fc59a63137a484626993dd10925bd36f" name="gnome-calculator-devel" arch="x86_64">
  <version epoch="0" ver="46.3" rel="1.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0-1" date="1692273600">- Update to 45.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0.1-1" date="1693915200">- Update to 45.0.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0.2-1" date="1695124800">- Update to 45.0.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.0.2-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 46~alpha-1" date="1705924800">- Update to 46.alpha</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 46~alpha-2" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46~alpha-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46~alpha-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 46.1-1" date="1732190400">- Update to 46.1</changelog>
  <changelog author="Lukas Tyrychtr &lt;ltyrycht@redhat.com&gt;" date="1747310400">- Update to 46.3.
  Resolves: RHEL-89562</changelog>
</package>
<package pkgid="d72755296993427f800298464db58df9a976ff33425be70316c6f80a4caf728c" name="gnome-characters" arch="x86_64">
  <version epoch="0" ver="46.0" rel="3.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 44.0-1" date="1679227200">- Update to 44.0 (#2179673)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45~alpha-1" date="1688472000">- Update to 45.alpha</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45~alpha-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; - 45~alpha-3" date="1690545600">- Add patch to fix gjs crash</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0-1" date="1695124800">- Update to 45.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 46.0-1" date="1710936000">- Update to 46.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4f8ab6f8c1ed1353f1b8f0acd8ea08a916b56c6d78b361d8774d0be03b8105b7" name="gnome-classic-session" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="9a2726266e03e74f3559fb8d2ad9be1a645b86307c0622f9aba4903193ae5ac8" name="gnome-clocks" arch="x86_64">
  <version epoch="0" ver="46.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 43.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 44~rc-1" date="1678449600">- Update to 44.rc</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 44.0-1" date="1679054400">- Update to 44.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 44.0-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0-1" date="1695124800">- Update to 45.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 45.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 45.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 46.1-1" date="1732190400">- Update to 46.0</changelog>
</package>
<package pkgid="4c04082c66107a8298c952c8e3384d7e2176010e7249472b1346b70b064561df" name="gnome-color-manager" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36.0-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36.0-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36.0-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36.0-12" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36.0-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36.0-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="13e59532b4b90ade717912e10232b5a0a7e0d8881fb56466554f52ce85b7ae8f" name="gnome-connections" arch="x86_64">
  <version epoch="0" ver="47.2.1" rel="3.el10"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 46.0-1" date="1711022400">- Update to 46.0
- Use FreeRDP 3</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 46.0-2" date="1715774400">- Fix a crash during disconnection
- Resolves: RHEL-30212</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 47.0-1" date="1729857600">- Update to 47.0
- Resolves: RHEL-64695</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 47.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 47.2.1-1" date="1738152000">- Update to 47.2.1
- Resolves: RHEL-72789, RHEL-36611</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 47.2.1-2" date="1768824000">- Add shortcuts window
- Resolves: RHEL-81195</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 47.2.1-3" date="1770206400">- Make requests for passwords more general
- Resolves: RHEL-80675</changelog>
</package>
<package pkgid="48e1f279cd28ac1d6cd9c05c8b5cd2f1adc0a8785919a9db13b28abf974c6a7d" name="gnome-control-center" arch="x86_64">
  <version epoch="0" ver="47.7" rel="7.el10"/>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.6-1" date="1748347200">- Update to 47.6</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.6-2" date="1748347201">- Add Access Point "Attach" setting to wwan connections</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.6-3" date="1749211200">- Add "Minimize and Maximize" window control settings</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.7-1" date="1751025600">- Update to 47.7</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.7-2" date="1762948800">- a11y: Add "Text Size" setting</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.7-3" date="1763121600">- Add rpminspect ignore list</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.7-4" date="1765368000">- Announce password change states to screen reader</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.7-5" date="1766145600">- Add compatibility patches with mutter/shell 49</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.7-6" date="1770206400">- Allow setting primary sim slot in Mobile Networks (WWAN) settings</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.7-7" date="1771416000">- Add HDR switch in display panel</changelog>
</package>
<package pkgid="463d04ffa52af09245e308a2700fa006be9269916a780d09d824ad110f78d54a" name="gnome-control-center-filesystem" arch="noarch">
  <version epoch="0" ver="47.7" rel="7.el10"/>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.6-1" date="1748347200">- Update to 47.6</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.6-2" date="1748347201">- Add Access Point "Attach" setting to wwan connections</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.6-3" date="1749211200">- Add "Minimize and Maximize" window control settings</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.7-1" date="1751025600">- Update to 47.7</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.7-2" date="1762948800">- a11y: Add "Text Size" setting</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.7-3" date="1763121600">- Add rpminspect ignore list</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.7-4" date="1765368000">- Announce password change states to screen reader</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.7-5" date="1766145600">- Add compatibility patches with mutter/shell 49</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.7-6" date="1770206400">- Allow setting primary sim slot in Mobile Networks (WWAN) settings</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.7-7" date="1771416000">- Add HDR switch in display panel</changelog>
</package>
<package pkgid="81dbd978d0a9287187e5f1211090d3701a03d447f7d9bc8dd6025345ead9b0b0" name="gnome-desktop-testing" arch="x86_64">
  <version epoch="0" ver="2018.1" rel="21.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2018.1-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2018.1-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2018.1-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2018.1-12" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 2018.1-16" date="1718107200">- Add CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 2018.1-17" date="1718280000">- Resolve RHELPLAN-170235 Fix OpenScanHub report
- Fix deprecated g_spawn_check_exit_status with -Wdeprecated-declarations
- Fix uninitialized n_failed with -Wanalyzer-use-of-uninitialized-value
- Fix to check return value of g_setenv() with CWE-252</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 2018.1-18" date="1718280001">- Resolve RHELPLAN-170235 Fix OpenScanHub report
- Fix typo</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2018.1-19" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2018.1-20" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 2018.1-21" date="1737028800">- Resolve RHEL-74223 Fix SPDX license</changelog>
</package>
<package pkgid="82c0a60a27174f230aa8f83940d6d8c9bdd39aa938fffed2d8638a3feca6ba79" name="gnome-desktop3" arch="x86_64">
  <version epoch="0" ver="44.1" rel="3.el10"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-12" date="1707480000">- License migrated to SPDX format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 44.0-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 44.0-14" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-15" date="1720612800">- Fix license tag so its validated by license-validate</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-16" date="1720612801">- Convert subpackages to SPDX license format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 44.0-17" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 44.0-18" date="1741953600">- Drop live user mode patchset</changelog>
  <changelog author="nmontero &lt;nmontero@redhat.com&gt; - 44.1-1" date="1744977600">- Update to 44.1</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-2" date="1768392000">- Add gnome-qr library used by passwordless GDM</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-3" date="1768824000">- tests submodule needs explicit Requires</changelog>
</package>
<package pkgid="3328f740e0b477413957b2f6a5a8b7f9072816fad97a99c50728cba00cd27f66" name="gnome-desktop3" arch="x86_64">
  <version epoch="0" ver="44.1" rel="5.el10_2"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 44.0-14" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-15" date="1720612800">- Fix license tag so its validated by license-validate</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-16" date="1720612801">- Convert subpackages to SPDX license format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 44.0-17" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 44.0-18" date="1741953600">- Drop live user mode patchset</changelog>
  <changelog author="nmontero &lt;nmontero@redhat.com&gt; - 44.1-1" date="1744977600">- Update to 44.1</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-2" date="1768392000">- Add gnome-qr library used by passwordless GDM</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-3" date="1768824000">- tests submodule needs explicit Requires</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-4" date="1777550400">- Get qrcodegen tar file from lookaside cache</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-5" date="1777550401">- Sync gnome-qr library patch series with upstream MR</changelog>
</package>
<package pkgid="c5b913f36c864ab7e3d390995c9390eba8bd2c3187feb8e33e0d53f38a6333b2" name="gnome-desktop3-devel" arch="x86_64">
  <version epoch="0" ver="44.1" rel="3.el10"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-12" date="1707480000">- License migrated to SPDX format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 44.0-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 44.0-14" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-15" date="1720612800">- Fix license tag so its validated by license-validate</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-16" date="1720612801">- Convert subpackages to SPDX license format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 44.0-17" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 44.0-18" date="1741953600">- Drop live user mode patchset</changelog>
  <changelog author="nmontero &lt;nmontero@redhat.com&gt; - 44.1-1" date="1744977600">- Update to 44.1</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-2" date="1768392000">- Add gnome-qr library used by passwordless GDM</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-3" date="1768824000">- tests submodule needs explicit Requires</changelog>
</package>
<package pkgid="f9806a98fd4e05920fce00f9861f646de5c92d5501c5fbfa18bc78aabb149ff0" name="gnome-desktop3-devel" arch="x86_64">
  <version epoch="0" ver="44.1" rel="5.el10_2"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 44.0-14" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-15" date="1720612800">- Fix license tag so its validated by license-validate</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-16" date="1720612801">- Convert subpackages to SPDX license format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 44.0-17" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 44.0-18" date="1741953600">- Drop live user mode patchset</changelog>
  <changelog author="nmontero &lt;nmontero@redhat.com&gt; - 44.1-1" date="1744977600">- Update to 44.1</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-2" date="1768392000">- Add gnome-qr library used by passwordless GDM</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-3" date="1768824000">- tests submodule needs explicit Requires</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-4" date="1777550400">- Get qrcodegen tar file from lookaside cache</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-5" date="1777550401">- Sync gnome-qr library patch series with upstream MR</changelog>
</package>
<package pkgid="058c38abd9b3aaf4e14b893fa0a72a42f5c1d4b256029cda0fa4a858f757bb1a" name="gnome-desktop3-tests" arch="x86_64">
  <version epoch="0" ver="44.1" rel="3.el10"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-12" date="1707480000">- License migrated to SPDX format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 44.0-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 44.0-14" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-15" date="1720612800">- Fix license tag so its validated by license-validate</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-16" date="1720612801">- Convert subpackages to SPDX license format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 44.0-17" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 44.0-18" date="1741953600">- Drop live user mode patchset</changelog>
  <changelog author="nmontero &lt;nmontero@redhat.com&gt; - 44.1-1" date="1744977600">- Update to 44.1</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-2" date="1768392000">- Add gnome-qr library used by passwordless GDM</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-3" date="1768824000">- tests submodule needs explicit Requires</changelog>
</package>
<package pkgid="545cb457f61238f4f3c31b8458d3224c4ba42453fc4c636646b3fe323d57b4d4" name="gnome-desktop3-tests" arch="x86_64">
  <version epoch="0" ver="44.1" rel="5.el10_2"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 44.0-14" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-15" date="1720612800">- Fix license tag so its validated by license-validate</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-16" date="1720612801">- Convert subpackages to SPDX license format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 44.0-17" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 44.0-18" date="1741953600">- Drop live user mode patchset</changelog>
  <changelog author="nmontero &lt;nmontero@redhat.com&gt; - 44.1-1" date="1744977600">- Update to 44.1</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-2" date="1768392000">- Add gnome-qr library used by passwordless GDM</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-3" date="1768824000">- tests submodule needs explicit Requires</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-4" date="1777550400">- Get qrcodegen tar file from lookaside cache</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-5" date="1777550401">- Sync gnome-qr library patch series with upstream MR</changelog>
</package>
<package pkgid="458ea0f548f345b31fe47ae8256c32684d94a8be8360ca8ba4b1021b55c36c66" name="gnome-desktop4" arch="x86_64">
  <version epoch="0" ver="44.1" rel="3.el10"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-12" date="1707480000">- License migrated to SPDX format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 44.0-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 44.0-14" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-15" date="1720612800">- Fix license tag so its validated by license-validate</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-16" date="1720612801">- Convert subpackages to SPDX license format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 44.0-17" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 44.0-18" date="1741953600">- Drop live user mode patchset</changelog>
  <changelog author="nmontero &lt;nmontero@redhat.com&gt; - 44.1-1" date="1744977600">- Update to 44.1</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-2" date="1768392000">- Add gnome-qr library used by passwordless GDM</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-3" date="1768824000">- tests submodule needs explicit Requires</changelog>
</package>
<package pkgid="38936ad7eef8796fcd166b11a00a1b5203d3e56b65edfaf3dd32cb1bf02527bf" name="gnome-desktop4" arch="x86_64">
  <version epoch="0" ver="44.1" rel="5.el10_2"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 44.0-14" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-15" date="1720612800">- Fix license tag so its validated by license-validate</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-16" date="1720612801">- Convert subpackages to SPDX license format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 44.0-17" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 44.0-18" date="1741953600">- Drop live user mode patchset</changelog>
  <changelog author="nmontero &lt;nmontero@redhat.com&gt; - 44.1-1" date="1744977600">- Update to 44.1</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-2" date="1768392000">- Add gnome-qr library used by passwordless GDM</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-3" date="1768824000">- tests submodule needs explicit Requires</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-4" date="1777550400">- Get qrcodegen tar file from lookaside cache</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-5" date="1777550401">- Sync gnome-qr library patch series with upstream MR</changelog>
</package>
<package pkgid="eea20127feef92ea380665615a3955db92df1a056b77ce11df2bc055848747a4" name="gnome-desktop4-devel" arch="x86_64">
  <version epoch="0" ver="44.1" rel="3.el10"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-12" date="1707480000">- License migrated to SPDX format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 44.0-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 44.0-14" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-15" date="1720612800">- Fix license tag so its validated by license-validate</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-16" date="1720612801">- Convert subpackages to SPDX license format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 44.0-17" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 44.0-18" date="1741953600">- Drop live user mode patchset</changelog>
  <changelog author="nmontero &lt;nmontero@redhat.com&gt; - 44.1-1" date="1744977600">- Update to 44.1</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-2" date="1768392000">- Add gnome-qr library used by passwordless GDM</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-3" date="1768824000">- tests submodule needs explicit Requires</changelog>
</package>
<package pkgid="b4fbfaa3f270a4313cbf21488626bff27c9c38ea56647e06fce69990989c2ba4" name="gnome-desktop4-devel" arch="x86_64">
  <version epoch="0" ver="44.1" rel="5.el10_2"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 44.0-14" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-15" date="1720612800">- Fix license tag so its validated by license-validate</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 44.0-16" date="1720612801">- Convert subpackages to SPDX license format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 44.0-17" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 44.0-18" date="1741953600">- Drop live user mode patchset</changelog>
  <changelog author="nmontero &lt;nmontero@redhat.com&gt; - 44.1-1" date="1744977600">- Update to 44.1</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-2" date="1768392000">- Add gnome-qr library used by passwordless GDM</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-3" date="1768824000">- tests submodule needs explicit Requires</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-4" date="1777550400">- Get qrcodegen tar file from lookaside cache</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 44.1-5" date="1777550401">- Sync gnome-qr library patch series with upstream MR</changelog>
</package>
<package pkgid="d024ce7d46c1adc15fff1aba8fe096152b37996cee1ff645d52480e473edc4a2" name="gnome-devel-docs" arch="noarch">
  <version epoch="0" ver="40.3" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 40.3-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 40.3-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 40.3-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 40.3-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 40.3-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 40.3-11" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 40.3-12" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="e4f46d51a733d9ebc7a67a5913b46e2cddfa18f2b0e8bef03808c16bd91800d6" name="gnome-disk-utility" arch="x86_64">
  <version epoch="0" ver="46~alpha" rel="3.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 44~rc-1" date="1677931200">- Update to 44.rc</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 44.0-1" date="1679054400">- Update to 44.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 44.0-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0-1" date="1695297600">- Update to 45.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.1-1" date="1701345600">- Update to 45.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 46~alpha-1" date="1707220800">- Update to 46.alpha</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46~alpha-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46~alpha-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5ddba2fb4a435b7c264af37a0822c9ebed72f483e9aa8905899412cd0219e016" name="gnome-extensions-app" arch="x86_64">
  <version epoch="0" ver="46.2" rel="4.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@gnome.org&gt; - 45.0-1" date="1694865600">- Update to 45.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@gnome.org&gt; - 46~alpha-1" date="1704628800">- Update to 46.alpha</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 46~alpha-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 46~alpha-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 46.0-1" date="1712836800">- Backport F40 changes</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 46.1-1" date="1714651200">- Update to 46.1</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 46.2-1" date="1716811200">- Update to 46.2</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 46.2-2" date="1716897600">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="417c14bf01135a451f14e3b466ce921ac8bf0704b1f2f93d623ab61b2281a0c4" name="gnome-font-viewer" arch="x86_64">
  <version epoch="0" ver="46.0" rel="1.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 44.0-1" date="1679400000">- Update to 44.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45~alpha-1" date="1688472000">- Update to 45.alpha</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45~alpha-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0-1" date="1695211200">- Update to 45.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 45.0-3" date="1705838400">- Fix C89 compatibility issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 45.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 45.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 46.0-1" date="1732190400">- Update to 46.0</changelog>
</package>
<package pkgid="402c1dc89a3e4f396dbcb2ac8dc508bc3652efbedb350f6a626d1c0dc567b0bf" name="gnome-initial-setup" arch="x86_64">
  <version epoch="0" ver="46.7" rel="3.el10.rocky.0.1"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 46.alpha-10" date="1724155200">- Use branded illustrations</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.alpha-11" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@gnome.org&gt; - 46.alpha-12" date="1741953600">- Adjust downstream patch</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 46.alpha-13" date="1741953601">- Drop live user mode patch: Change was deferred to F41</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 46.alpha-14" date="1741953602">- Update file list for dropping of live user mode patch</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 46.alpha-15" date="1741953603">- Revert vendor.conf for webui deferral</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 46.7-1" date="1742212800">- Update to 46.7</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 46.7-2" date="1756900800">- Use systemd sysusers config to create user and group</changelog>
  <changelog author="nmontero &lt;nmontero@redhat.com&gt; - 46.7-3" date="1768219200">- account: Don't draw the avatar button background</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 46.7-3.rocky.0.1" date="1768305600">- Remove Red Hat illustrations</changelog>
</package>
<package pkgid="0d05533dc79234bf67b44ccfb7ced42cb0318b0536c0e54f78b94a5fb0fd82fa" name="gnome-keyring" arch="x86_64">
  <version epoch="0" ver="42.1" rel="20.el10"/>
  <changelog author="Carl George &lt;carl@george.computer&gt; - 42.1-4" date="1681992000">- Switch dependency from /usr/libexec/gcr-ssh-askpass to gcr3
- Resolves: rhbz#2188431</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 42.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Dhanuka Warusadura &lt;dhanuka@gnome.org&gt; - 42.1-6" date="1697803200">- ssh-agent: update build instructions to disable ssh component
- Introduced conditional builds based on ssh component required or not</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 42.1-7" date="1700568000">- Re-enable ssh-agent support (#2250704)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 42.1-8" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 42.1-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 42.1-10" date="1706270400">- Fix C compatibility issue</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 42.1-18" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 42.1-19" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 42.1-20" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="ddbf32864909487acc364a8039bafa6857c64d905b8e4973e334fde44caf4604" name="gnome-keyring-pam" arch="x86_64">
  <version epoch="0" ver="42.1" rel="20.el10"/>
  <changelog author="Carl George &lt;carl@george.computer&gt; - 42.1-4" date="1681992000">- Switch dependency from /usr/libexec/gcr-ssh-askpass to gcr3
- Resolves: rhbz#2188431</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 42.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Dhanuka Warusadura &lt;dhanuka@gnome.org&gt; - 42.1-6" date="1697803200">- ssh-agent: update build instructions to disable ssh component
- Introduced conditional builds based on ssh component required or not</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 42.1-7" date="1700568000">- Re-enable ssh-agent support (#2250704)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 42.1-8" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 42.1-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 42.1-10" date="1706270400">- Fix C compatibility issue</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 42.1-18" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 42.1-19" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 42.1-20" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="80fc758aa3c9bfa96d29638a8b8626822aeb5fc763223b5a2ed8ba60a147cf01" name="gnome-kiosk" arch="x86_64">
  <version epoch="0" ver="49.0" rel="1.el10"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-5" date="1734609600">- Add dependency on flatpak</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-6" date="1734696000">- Copy and run the script from XDG_RUNTIME_DIR</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-7" date="1739448000">- Enable screenshots support</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-8" date="1741262400">- search-app: Add systemd session files</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-9" date="1742990400">- Fix crash on missing systemd files</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-10" date="1743681600">- Add window configurability</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-11" date="1752667200">- Enable remote sessions via GDM login</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-12" date="1753963200">- Enable the screen reader for accessibility</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-13" date="1759838400">- Add Xwayland and dbus-daemon as weak dependencies</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
</package>
<package pkgid="14aba14b183cda3e10d0f4457cdf88675efba7a8b4b6be63b5b62311b8ae2490" name="gnome-kiosk-script-session" arch="noarch">
  <version epoch="0" ver="49.0" rel="1.el10"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-5" date="1734609600">- Add dependency on flatpak</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-6" date="1734696000">- Copy and run the script from XDG_RUNTIME_DIR</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-7" date="1739448000">- Enable screenshots support</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-8" date="1741262400">- search-app: Add systemd session files</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-9" date="1742990400">- Fix crash on missing systemd files</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-10" date="1743681600">- Add window configurability</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-11" date="1752667200">- Enable remote sessions via GDM login</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-12" date="1753963200">- Enable the screen reader for accessibility</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-13" date="1759838400">- Add Xwayland and dbus-daemon as weak dependencies</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
</package>
<package pkgid="67a2058cd628f2363ab5999e9adfaeb56083f0d58c2156225b07c7554998feb0" name="gnome-kiosk-search-appliance" arch="noarch">
  <version epoch="0" ver="49.0" rel="1.el10"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-5" date="1734609600">- Add dependency on flatpak</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-6" date="1734696000">- Copy and run the script from XDG_RUNTIME_DIR</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-7" date="1739448000">- Enable screenshots support</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-8" date="1741262400">- search-app: Add systemd session files</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-9" date="1742990400">- Fix crash on missing systemd files</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-10" date="1743681600">- Add window configurability</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-11" date="1752667200">- Enable remote sessions via GDM login</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-12" date="1753963200">- Enable the screen reader for accessibility</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 47.0-13" date="1759838400">- Add Xwayland and dbus-daemon as weak dependencies</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
</package>
<package pkgid="cfef4d2b2d2c4cb9a990d400fc41bdf6707be2d68949a23ec083e0f8ffa162f0" name="gnome-menus" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36.0-9" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36.0-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36.0-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36.0-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36.0-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.36.0-14" date="1736596800">- Use autosetup
- Rename 14.patch to gnome-menus-01.patch
- Rearrange after design review
- Resolves: RHEL-65839</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.36.0-15" date="1736769600">- Incorporate review feedback
- Resolves: RHEL-65839</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.36.0-16" date="1738324800">- Fix Calculator to be presented
- Papers should be in Utilities and not in Graphics and Office
- Resolves: RHEL-65839</changelog>
</package>
<package pkgid="c0e09683e7b43ffac92a34c1f72426da5b4e8a5e0b83f3063c51dbb42109372d" name="gnome-menus-devel" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36.0-9" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36.0-10" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.36.0-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36.0-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.36.0-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.36.0-14" date="1736596800">- Use autosetup
- Rename 14.patch to gnome-menus-01.patch
- Rearrange after design review
- Resolves: RHEL-65839</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.36.0-15" date="1736769600">- Incorporate review feedback
- Resolves: RHEL-65839</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.36.0-16" date="1738324800">- Fix Calculator to be presented
- Papers should be in Utilities and not in Graphics and Office
- Resolves: RHEL-65839</changelog>
</package>
<package pkgid="272d0113b0f2bcec16da22bb3092e8ee43f4272b4da6f3ee7be32f7f7a46ded4" name="gnome-online-accounts" arch="x86_64">
  <version epoch="0" ver="3.52.8" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.50.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.50.2-3" date="1719403200">- Resolves: RHEL-45186 (Fix issues found by Coverity Scan)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.51.0-1" date="1721131200">- Related: RHEL-45844 (Update to 3.51.0)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.51.3-1" date="1725278400">- Resolves: RHEL-53973 (Update to 3.51.3)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.0-1" date="1727697600">- Resolves: RHEL-60879 (Update to 3.52.0)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.1-1" date="1729512000">- Resolves: RHEL-63179 (Update to 3.52.1)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.52.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.2-1" date="1733140800">- Resolves: RHEL-69591 (Update to 3.52.2)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.3.1-1" date="1737374400">- Resolves: RHEL-74840 (Update to 3.52.3.1)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.8-1" date="1752494400">- Resolves: RHEL-103392 (Update to 3.52.8)</changelog>
</package>
<package pkgid="a65308d76245cd0967cd07e213730548ed5dab872d2a3a8491aff445a52988db" name="gnome-online-accounts-devel" arch="x86_64">
  <version epoch="0" ver="3.52.8" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.50.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.50.2-3" date="1719403200">- Resolves: RHEL-45186 (Fix issues found by Coverity Scan)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.51.0-1" date="1721131200">- Related: RHEL-45844 (Update to 3.51.0)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.51.3-1" date="1725278400">- Resolves: RHEL-53973 (Update to 3.51.3)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.0-1" date="1727697600">- Resolves: RHEL-60879 (Update to 3.52.0)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.1-1" date="1729512000">- Resolves: RHEL-63179 (Update to 3.52.1)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.52.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.2-1" date="1733140800">- Resolves: RHEL-69591 (Update to 3.52.2)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.3.1-1" date="1737374400">- Resolves: RHEL-74840 (Update to 3.52.3.1)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.52.8-1" date="1752494400">- Resolves: RHEL-103392 (Update to 3.52.8)</changelog>
</package>
<package pkgid="de74447f94f221c011f24594c2a463c247c927ce3f892b810fa6921e472046e9" name="gnome-ponytail-daemon" arch="x86_64">
  <version epoch="0" ver="0.0.11" rel="5.el10"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 0.0.10-1" date="1704715200">- Add libei support
- Bug fixing</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 0.0.10-2" date="1706875200">- Fix requires in Python package</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 0.0.11-1" date="1716206400">- Version 0.0.11</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 0.0.11-2" date="1716206401">- Add gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.0.11-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.0.11-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 0.0.11-5" date="1748260800">- Fix abort when disconnecting from libei
- Fix restarting the daemon state after a client has disconnected
  Resolves: RHEL-89455</changelog>
</package>
<package pkgid="b3c3721021ad359d9b501ed3d9bb99e60a362e47fd124e51c400d849836a74d8" name="gnome-remote-desktop" arch="x86_64">
  <version epoch="0" ver="49.3" rel="1.el10"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 47.alpha-2" date="1722513600">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 47.alpha-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jiri Koten &lt;jkoten@redhat.com&gt; - 47.3-1" date="1738065600">- Update to 47.3</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 47.3-2" date="1751544000">- Backport connection throttling</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-3" date="1762862400">- Switch to %autorelease</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.1-1" date="1763121600">- Update to 49.1</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 49.1-2" date="1763121601">- Patch out multi touch support</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 49.1-3" date="1763121602">- Add missing build time dependencies</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 49.2-1" date="1770984000">- Update to 49.2</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 49.3-1" date="1771243200">- Update to 49.3</changelog>
</package>
<package pkgid="5164ee05903d725afe3f15b6b038163139d93ee2a88f9f08817bfd53f62603fb" name="gnome-remote-desktop" arch="x86_64">
  <version epoch="0" ver="49.3" rel="3.el10_2"/>
  <changelog author="Jiri Koten &lt;jkoten@redhat.com&gt; - 47.3-1" date="1738065600">- Update to 47.3</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 47.3-2" date="1751544000">- Backport connection throttling</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-3" date="1762862400">- Switch to %autorelease</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.1-1" date="1763121600">- Update to 49.1</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 49.1-2" date="1763121601">- Patch out multi touch support</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 49.1-3" date="1763121602">- Add missing build time dependencies</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 49.2-1" date="1770984000">- Update to 49.2</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 49.3-1" date="1771243200">- Update to 49.3</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 49.3-2" date="1778068800">- Update version requirements after rebase to 49</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 49.3-3" date="1778068801">- Support remote login to sessions from gnome-headless-session@.service</changelog>
</package>
<package pkgid="f5a5caec1cf60cfc70e657bc9e157612b2b03824f039fdb0545caa153b0da167" name="gnome-remote-desktop" arch="x86_64">
  <version epoch="0" ver="49.3" rel="4.el10_2"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 47.3-2" date="1751544000">- Backport connection throttling</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-3" date="1762862400">- Switch to %autorelease</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.1-1" date="1763121600">- Update to 49.1</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 49.1-2" date="1763121601">- Patch out multi touch support</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 49.1-3" date="1763121602">- Add missing build time dependencies</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 49.2-1" date="1770984000">- Update to 49.2</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 49.3-1" date="1771243200">- Update to 49.3</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 49.3-2" date="1778068800">- Update version requirements after rebase to 49</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 49.3-3" date="1778068801">- Support remote login to sessions from gnome-headless-session@.service</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 49.3-4" date="1786449600">- Backport connection throttling</changelog>
</package>
<package pkgid="adfbc3b4fff6aa8b22cafc932aa8269f6dbac3b47a2b47c48af39407cb563ba9" name="gnome-session" arch="x86_64">
  <version epoch="0" ver="46.0" rel="11.el10"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 46.0-2" date="1716206400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 46.0-4" date="1720699200">- Drop xsession subpackage</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 46.0-5" date="1720699201">- Add Obsoletes for removed subpackages</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 46.0-7" date="1739188800">- Reinstate Subscription Manager's autostart patch</changelog>
  <changelog author="Adrian Vovk &lt;adrianvovk@gmail.com&gt; - 46.0-8" date="1744632000">- Fix systemd v257+ inhibitors</changelog>
  <changelog author="Adrian Vovk &lt;adrianvovk@gmail.com&gt; - 46.0-9" date="1745582400">- Silence noisy GL-check warnings</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 46.0-10" date="1748433600">- Do not start gnome-settings-daemon subman plugin on CentOS</changelog>
  <changelog author="Adrian Vovk &lt;adrianvovk@gmail.com&gt; - 46.0-11" date="1771502400">- Ignore gnome-shell as gnome-session client</changelog>
</package>
<package pkgid="4ea7699b3c9dc95ef8e9d7a49b7390380cf9d8418442dcc8a5495167d5833f18" name="gnome-session-wayland-session" arch="x86_64">
  <version epoch="0" ver="46.0" rel="11.el10"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 46.0-2" date="1716206400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 46.0-4" date="1720699200">- Drop xsession subpackage</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 46.0-5" date="1720699201">- Add Obsoletes for removed subpackages</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 46.0-7" date="1739188800">- Reinstate Subscription Manager's autostart patch</changelog>
  <changelog author="Adrian Vovk &lt;adrianvovk@gmail.com&gt; - 46.0-8" date="1744632000">- Fix systemd v257+ inhibitors</changelog>
  <changelog author="Adrian Vovk &lt;adrianvovk@gmail.com&gt; - 46.0-9" date="1745582400">- Silence noisy GL-check warnings</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 46.0-10" date="1748433600">- Do not start gnome-settings-daemon subman plugin on CentOS</changelog>
  <changelog author="Adrian Vovk &lt;adrianvovk@gmail.com&gt; - 46.0-11" date="1771502400">- Ignore gnome-shell as gnome-session client</changelog>
</package>
<package pkgid="c48e71cef6afeda7035ad1b366d9cf9e88099d664d98f728a368484473775a44" name="gnome-settings-daemon" arch="x86_64">
  <version epoch="0" ver="47.2" rel="10.el10_2.rocky.0.2"/>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 47.2-2" date="1737374400">- Disambiguate mount points with same name on "Low Disk Space"
  notifications</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 47.2-3" date="1738324800">- Revert "Add downstream default suspend setting for servers"</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 47.2-4" date="1738584000">- Add g-s-d-server-defaults subpackage for "Server with GUI" overrides</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 47.2-5" date="1738929600">- Add subscription manager plugin</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.2-6" date="1762948800">- subman: Delay startup notification by 30 minutes</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.2-7" date="1763640000">- Use gnome-shell interface for brightness control</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.2-8" date="1770724800">- Fix auto-brightness with gnome-shell 49.x</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.2-9" date="1771416000">- Backport more auto-brightness related fixes</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 47.2-10" date="1776772800">- Consider special modules for smartcard detection</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 47.2-10.rocky.0.2" date="1779192000">- Disable subman dependencies</changelog>
</package>
<package pkgid="495820472844f5aea9dae48cee1c43ebe17adad4db72e89d70d7746322507051" name="gnome-settings-daemon-devel" arch="x86_64">
  <version epoch="0" ver="47.2" rel="10.el10_2.rocky.0.2"/>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 47.2-2" date="1737374400">- Disambiguate mount points with same name on "Low Disk Space"
  notifications</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 47.2-3" date="1738324800">- Revert "Add downstream default suspend setting for servers"</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 47.2-4" date="1738584000">- Add g-s-d-server-defaults subpackage for "Server with GUI" overrides</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 47.2-5" date="1738929600">- Add subscription manager plugin</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.2-6" date="1762948800">- subman: Delay startup notification by 30 minutes</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.2-7" date="1763640000">- Use gnome-shell interface for brightness control</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.2-8" date="1770724800">- Fix auto-brightness with gnome-shell 49.x</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.2-9" date="1771416000">- Backport more auto-brightness related fixes</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 47.2-10" date="1776772800">- Consider special modules for smartcard detection</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 47.2-10.rocky.0.2" date="1779192000">- Disable subman dependencies</changelog>
</package>
<package pkgid="c948df42fedd633b93d7735cbfa95525ed2bda31e4ef31c980c049704a206b23" name="gnome-settings-daemon-server-defaults" arch="x86_64">
  <version epoch="0" ver="47.2" rel="10.el10_2.rocky.0.2"/>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 47.2-2" date="1737374400">- Disambiguate mount points with same name on "Low Disk Space"
  notifications</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 47.2-3" date="1738324800">- Revert "Add downstream default suspend setting for servers"</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 47.2-4" date="1738584000">- Add g-s-d-server-defaults subpackage for "Server with GUI" overrides</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 47.2-5" date="1738929600">- Add subscription manager plugin</changelog>
  <changelog author="Felipe Borges &lt;felipeborges@gnome.org&gt; - 47.2-6" date="1762948800">- subman: Delay startup notification by 30 minutes</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.2-7" date="1763640000">- Use gnome-shell interface for brightness control</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.2-8" date="1770724800">- Fix auto-brightness with gnome-shell 49.x</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.2-9" date="1771416000">- Backport more auto-brightness related fixes</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 47.2-10" date="1776772800">- Consider special modules for smartcard detection</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 47.2-10.rocky.0.2" date="1779192000">- Disable subman dependencies</changelog>
</package>
<package pkgid="0f351a13f71a87fedce9b600cdda412bb92edac7615f2a1a884a95618cbfe1ac" name="gnome-shell" arch="x86_64">
  <version epoch="0" ver="49.4" rel="3.el10_2.rocky.0.2"/>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 49.1-4" date="1763121600">- Register session with GDM on startup</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 49.1-5" date="1768478400">- Add passwordless gdm patch series</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 49.1-6" date="1768478401">- Update styles for passwordless GDM</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 49.1-7" date="1768996800">- Update passwordless GDM patch series</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 49.1-8" date="1768996801">- Allow preemptive answer for 3 secs before locking text entry</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 49.1-9" date="1769688000">- Extend display time of messages interval</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.4-1" date="1770811200">- Update to 49.4</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 49.4-2" date="1771329600">- Update passwordless GDM implementation to match upstream</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 49.4-3" date="1776772800">- Ensure gdm hint text is cleraed</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 49.4-3.rocky.0.2" date="1779192000">- Remove Red Hat illustrations</changelog>
</package>
<package pkgid="c106dbc4f1dbded699a7fd86b5d50a7e273401def3927ea831d0b46e9b65746e" name="gnome-shell" arch="x86_64">
  <version epoch="0" ver="49.4" rel="8.el10_2.rocky.0.2"/>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 49.1-9" date="1769688000">- Extend display time of messages interval</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.4-1" date="1770811200">- Update to 49.4</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 49.4-2" date="1771329600">- Update passwordless GDM implementation to match upstream</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 49.4-3" date="1776772800">- Ensure gdm hint text is cleraed</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 49.4-4" date="1779883200">- Update fix of registering session</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 49.4-5" date="1779883201">- triggering new build</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 49.4-6" date="1779969600">- Resolves: https://redhat.atlassian.net/browse/RHEL-178662</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.4-7" date="1781006400">- rpminspect: Use correct paths in runpath exception</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 49.4-8" date="1781006401">- Update passwordless GDM work to be in sync with upstream MR</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 49.4-8.rocky.0.2" date="1782302400">- Remove Red Hat illustrations</changelog>
</package>
<package pkgid="24c28d3744e9c5f3dc6451542824e6df91cc4f53cbcc05f15ae42317cf7fa432" name="gnome-shell-extension-apps-menu" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="775109b9f66946a57408962f9489a536aae5ad5faf04e2de6581baee7f445bb9" name="gnome-shell-extension-auto-move-windows" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="6ecde9ee6779527ef6dcd5e5f17707ea19a7c07eee89adba2a492c8a0c61df41" name="gnome-shell-extension-background-logo" arch="noarch">
  <version epoch="0" ver="49.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45~beta-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45~beta-5" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@gnome.org&gt; - 46.0-1" date="1712836800">- Backport changes from F40</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 46.0-3" date="1719403200">- Add gating.yaml via API</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47~alpha-1" date="1721736000">- Update to 47.alpha</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.0-1" date="1726488000">- Update to 47.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 47.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.0-3" date="1762948800">- Use api version to require gnome-shell</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762948801">- Update to 49.0</changelog>
</package>
<package pkgid="130fd1c72a649cac1a1b7d317069be4ef655dfe676616e02c40f71b06a1466a2" name="gnome-shell-extension-classification-banner" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="afc56b477a7cf6be3adee86c92f04d352396c3663d5c99700a4316511f4796ea" name="gnome-shell-extension-common" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="d037784f1975bce0fc1689d500e3b106574b63d5719223f6d32b972ca55543e2" name="gnome-shell-extension-custom-menu" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="07960384a5db336c9d57996b5b4dbee8ec97770e4fc9536e4aef7d77666852eb" name="gnome-shell-extension-dash-to-dock" arch="noarch">
  <version epoch="0" ver="102" rel="1.el10"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 92-2" date="1716379200">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 92-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 92-4" date="1721736000">- Ensure compatibility with 47.alpha</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 92-5" date="1724673600">- Move pre-generated stylesheet to separate source</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 94-1" date="1724673601">- Update to version 94</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 96-1" date="1726488000">- dash-to-dock 96</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 99-1" date="1728907200">- Update to 99</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 99-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 100-1" date="1746446400">- Update to 100</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 102-1" date="1762516800">- Update to 102</changelog>
</package>
<package pkgid="fe1d8548f013af9747bbfab4d0d41603602c12c099241ebd4065c9e4ff6542ad" name="gnome-shell-extension-dash-to-panel" arch="noarch">
  <version epoch="0" ver="70" rel="1.el10"/>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 60-2" date="1709812800">- apply upstream PR for GNOME Shell 46 support (#2267061)</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 61-1" date="1711281600">- update to 61 (#2271317)</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 62-1" date="1712318400">- update to 62 (#2272810)</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 62-2" date="1716465600">- rebuild without unused clutter dependency</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 62-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 63-1" date="1728302400">- Update to 63
  Resolves: RHEL-61623</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 63-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 64-1" date="1730894400">- Update to 64
  Resolves: RHEL-65151</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 65-1" date="1746446400">- Update to 65
  Resolves: RHEL-80432</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 70-1" date="1762516800">- Update to 70
  Resolves: RHEL-127138</changelog>
</package>
<package pkgid="b6b36e418ac272dfc496bcc85fef353819d4cc4691b40123a6946f79066e4b97" name="gnome-shell-extension-desktop-icons" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="1d1c9b1a02457a278bfff3a20d059fb2aa7932a557b05a6d588b44e3ab2a1f67" name="gnome-shell-extension-drive-menu" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="9a39515294716380fc1deb208882144ffef4c2616b2331dc635d37161701be12" name="gnome-shell-extension-gesture-inhibitor" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="805879d90e625eb12a3ecccdbcb27532c55f7e5ef46cdaa8d1380e935e48256d" name="gnome-shell-extension-heads-up-display" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="2ab7ad952adaf38c8ca6638f1b1aa67ca59b9cee7770f077983f2b092ce178d5" name="gnome-shell-extension-launch-new-instance" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="7e27d6cb658bc8fd0cacf6a3e4debfbce4a74cb5f74023cc9795030f36a7a805" name="gnome-shell-extension-light-style" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="1175ffebb99f3b07d0c164cd06acf0ce68e0c9f07b16811682ffbfcd4ed96080" name="gnome-shell-extension-native-window-placement" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="300698263d5a3bb2925256e387ee162e1579f29a0dc038d25019f4de0fc8b66e" name="gnome-shell-extension-no-overview" arch="noarch">
  <version epoch="0" ver="47" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 16-4" date="1709121600">- Add gnome-shell-46</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 46-1" date="1716379200">- Bump to 46</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 46-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 46-3" date="1725624000">- Impelemt CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 46-4" date="1726488000">- Add gnome-shell-47</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 46-6" date="1726488001">- Add gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 47-1" date="1730980800">- Bump to 47</changelog>
</package>
<package pkgid="4b7403123759859fe1453ba5d1422435801f81d02ec09f76f87fa75f1a8f3aa8" name="gnome-shell-extension-places-menu" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="a4608a6acee3048ea519bc7338faf3efe1629f146148e6f84da6f210bf17c669" name="gnome-shell-extension-screenshot-window-sizer" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="992e8eba6f97e80936d7aed5cf8b5e69fdaed5a4ffbce29f6710bb256011ef50" name="gnome-shell-extension-status-icons" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="7970f9fdef26cdd2c29deeb087f775012361db53735daf958e6a21aa23044e8d" name="gnome-shell-extension-system-monitor" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="7d0b9b56c1207fa7732b4f2e30a37a2ed092c5f99cffd75ba99e48ecfa21982e" name="gnome-shell-extension-user-theme" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="def84987909370c861c86c413189d484a4309d1e30bc08dfa4a287d1917fcf18" name="gnome-shell-extension-window-list" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="c93096d540452b6be19af3e842faac567c61da66e1ac76070410bdeaf972a0ca" name="gnome-shell-extension-windowsNavigator" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="319aa62462e649206821dd92564743de951d7f3bb44653361b2b675082d0aedb" name="gnome-shell-extension-workspace-indicator" arch="noarch">
  <version epoch="0" ver="49.0" rel="2.el10"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-1" date="1737547200">- Update to 47.3</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.3-2" date="1737547201">- Fix regression in chrome tracking</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-1" date="1739448000">- Update to 47.4</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-2" date="1747051200">- Support setting heads-up-display message from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.4-3" date="1747224000">- Trim heads-up display message read from file</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-1" date="1748865600">- Update to 47.5</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.5-2" date="1750161600">- Make workspace names more prominent</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.6-1" date="1752580800">- Update to 47.6</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-1" date="1762862400">- Update to 49.0</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 49.0-2" date="1763726400">- Adjust gesture-inhibitor for GNOME 49</changelog>
</package>
<package pkgid="0542ff0ff420434a42ac6047cd98b883ed4c0510a793757e054347b9aea6834d" name="gnome-software" arch="x86_64">
  <version epoch="0" ver="47.5" rel="2.el10"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 46.3-1" date="1719835200">- Resolves: RHEL-45603 (Update to 46.3)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 46.3-2" date="1720440000">- Resolves: RHEL-39680 (Re-enable build of the fedora-langpacks subpackage in RHEL)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 46.4-1" date="1724068800">- Resolves: RHEL-52807 (Update to 46.4)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 47.0-1" date="1726488000">- Resolves: RHEL-58962 (Rebase to 47.0)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 47.1-1" date="1728907200">- Resolves: RHEL-62353 (Update to 47.1)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 47.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 47.2-1" date="1733140800">- Resolves: RHEL-69592 (Update to 47.2)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 47.4-1" date="1736942400">- Resolves: RHEL-73685 (Update to 47.4)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 47.5-1" date="1742817600">- Resolves: RHEL-84652 (Update to 47.5)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 47.5-2" date="1762171200">- Resolves: RHEL-123944 (Carousel does not respect the "enable-animations" a11y setting)</changelog>
</package>
<package pkgid="40990388bf3867d5d90b01aa2b62ebfd34ff06a20ca1d9761296316537f5d92c" name="gnome-software-devel" arch="x86_64">
  <version epoch="0" ver="47.5" rel="2.el10"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 46.3-1" date="1719835200">- Resolves: RHEL-45603 (Update to 46.3)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 46.3-2" date="1720440000">- Resolves: RHEL-39680 (Re-enable build of the fedora-langpacks subpackage in RHEL)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 46.4-1" date="1724068800">- Resolves: RHEL-52807 (Update to 46.4)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 47.0-1" date="1726488000">- Resolves: RHEL-58962 (Rebase to 47.0)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 47.1-1" date="1728907200">- Resolves: RHEL-62353 (Update to 47.1)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 47.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 47.2-1" date="1733140800">- Resolves: RHEL-69592 (Update to 47.2)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 47.4-1" date="1736942400">- Resolves: RHEL-73685 (Update to 47.4)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 47.5-1" date="1742817600">- Resolves: RHEL-84652 (Update to 47.5)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 47.5-2" date="1762171200">- Resolves: RHEL-123944 (Carousel does not respect the "enable-animations" a11y setting)</changelog>
</package>
<package pkgid="bc4cdbc156903e9d31ced24d038445c3d42c3152cb5607b54c6194a4d9985de6" name="gnome-software-fedora-langpacks" arch="x86_64">
  <version epoch="0" ver="47.5" rel="2.el10"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 46.3-1" date="1719835200">- Resolves: RHEL-45603 (Update to 46.3)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 46.3-2" date="1720440000">- Resolves: RHEL-39680 (Re-enable build of the fedora-langpacks subpackage in RHEL)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 46.4-1" date="1724068800">- Resolves: RHEL-52807 (Update to 46.4)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 47.0-1" date="1726488000">- Resolves: RHEL-58962 (Rebase to 47.0)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 47.1-1" date="1728907200">- Resolves: RHEL-62353 (Update to 47.1)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 47.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 47.2-1" date="1733140800">- Resolves: RHEL-69592 (Update to 47.2)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 47.4-1" date="1736942400">- Resolves: RHEL-73685 (Update to 47.4)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 47.5-1" date="1742817600">- Resolves: RHEL-84652 (Update to 47.5)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 47.5-2" date="1762171200">- Resolves: RHEL-123944 (Carousel does not respect the "enable-animations" a11y setting)</changelog>
</package>
<package pkgid="dfc599754af93be4bfdc7d174c29930f0d1af3c284075684aa524554d23748ec" name="gnome-system-monitor" arch="x86_64">
  <version epoch="0" ver="46.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45~alpha-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45~beta-1" date="1691064000">- Update to 45.beta</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0-1" date="1692273600">- Update to 45.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0.1-1" date="1693915200">- Update to 45.0.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0.2-1" date="1695124800">- Update to 45.0.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.0.2-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 46~alpha-1" date="1705924800">- Update to 46.alpha</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46~alpha-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46~alpha-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 46.0-1" date="1732190400">- Update to 46.0</changelog>
</package>
<package pkgid="da52fde93dcf2f421ff01c871c2ed24ebcd3cda644bc69cd2668ae7c27d82a27" name="gnome-text-editor" arch="x86_64">
  <version epoch="0" ver="47.4" rel="2.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 46~alpha-3" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 46.0-1" date="1712750400">- backport changes from Fedora 40</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 46.1-1" date="1714046400">- Update to 46.1</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 46.1-2" date="1714392000">- gating enabled</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 46.3-1" date="1717156800">- Update to 46.3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.3-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 47.3-1" date="1738152000">- Update to 47.3</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 47.4-1" date="1742817600">- Update to 47.4</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 47.4-2" date="1742990400">- Add fix for resource leak</changelog>
</package>
<package pkgid="2ea1dd1216612d6ed7b6c86870c15693f686e072990b64665305d6d14d3a2936" name="gnome-tour" arch="x86_64">
  <version epoch="0" ver="46.0" rel="4.el10.rocky.0.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 45.0-4" date="1706788800">- Update Rust macro usage</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0-5" date="1707307200">- Drop downstream patch that downgraded pretty_env_logger dep to 0.4
- Don't use both meson and cargo for building
- Migrate to SPDX license</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 45.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 46.0-1" date="1724155200">- Add RHEL illustrations and rebase to 46.0</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 46.0-2" date="1727956800">- Update illustrations for the final version</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 46.0-4" date="1738843200">- Drop the mention of Help applications as Yelp is not part of RHEL 10
- Resolves: RHEL-65819</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 46.0-4.rocky.0.1" date="1747742400">- Use default gnome-tour illustrations</changelog>
</package>
<package pkgid="843b41292434c3ea4e7e9c8cc0d7fe522903eccd13c7f56075d5b095e631810b" name="gnome-user-docs" arch="noarch">
  <version epoch="0" ver="46.1" rel="2.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 44.1-1" date="1682337600">- Update to 44.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 44.3-1" date="1688212800">- Update to 44.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 44.3-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.0-1" date="1695124800">- Update to 45.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 45.1-1" date="1697976000">- Update to 45.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 45.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 45.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 46.1-1" date="1721390400">- Update to 46.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="584916bd93dacfa9a82cc0c41d7e47486d09e84f83d20ab786c3d5ef532130ab" name="gnu-efi" arch="x86_64">
  <version epoch="1" ver="3.0.18" rel="4.el10.rocky.0.1"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1:3.0.18-1" date="1717416000">- Rebase to newer upstream version and remove a lot of downstream patches</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1:3.0.18-2" date="1717588800">- Add a gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:3.0.18-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:3.0.18-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 1:3.0.18-4.rocky.0.1" date="1773576000">- Fix riscv64 for 10.2</changelog>
</package>
<package pkgid="037419f8bc41235f71db691e0039c5ddfc0a7f0352e538a3bcdbedb0cdbf407e" name="gnu-efi-devel" arch="x86_64">
  <version epoch="1" ver="3.0.18" rel="4.el10.rocky.0.1"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1:3.0.18-1" date="1717416000">- Rebase to newer upstream version and remove a lot of downstream patches</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1:3.0.18-2" date="1717588800">- Add a gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:3.0.18-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:3.0.18-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 1:3.0.18-4.rocky.0.1" date="1773576000">- Fix riscv64 for 10.2</changelog>
</package>
<package pkgid="6a0ea9e7a7ec07e31b6b183ece34178b2d509e347428c247d001a066bc5623d5" name="gnu-efi-utils" arch="x86_64">
  <version epoch="1" ver="3.0.18" rel="4.el10.rocky.0.1"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1:3.0.18-1" date="1717416000">- Rebase to newer upstream version and remove a lot of downstream patches</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1:3.0.18-2" date="1717588800">- Add a gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:3.0.18-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:3.0.18-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 1:3.0.18-4.rocky.0.1" date="1773576000">- Fix riscv64 for 10.2</changelog>
</package>
<package pkgid="0a1906a6f3c078b709367f238d7fd2718c2888b69593082064f62de4532df5bd" name="gnupg2" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="4.el10_1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.4-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.4.5-1" date="1720094400">- New upstream release (#2268461)
- Set GPG_TTY in profile.d (#2264985)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.5-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.4.5-3" date="1768305600">- Fix CVE-2025-68973 (gpg.fail/memcpy)
- Avoid weak dependencies</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.4.5-4" date="1770379200">- Fix CVE-2026-24882 (tpm2daemon buffer overflow)</changelog>
</package>
<package pkgid="3abad974f1bc25ed6d47893333bede8bfe590819783ee0b72d0e2a2b52a092d5" name="gnupg2-smime" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="4.el10_1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.4-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.4.5-1" date="1720094400">- New upstream release (#2268461)
- Set GPG_TTY in profile.d (#2264985)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.5-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.4.5-3" date="1768305600">- Fix CVE-2025-68973 (gpg.fail/memcpy)
- Avoid weak dependencies</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.4.5-4" date="1770379200">- Fix CVE-2026-24882 (tpm2daemon buffer overflow)</changelog>
</package>
<package pkgid="9f642551a9c53a3032e6c1327e469ba504c0ea7d6f98e702582122107b210542" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="3.el10_1"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-13" date="1745323200">- Update gnutls-3.8.9-cli-earlydata.patch to the upstream version</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-14" date="1745496000">- tests: make pqc-hybrid-kx.sh work when system time set beyond 2038</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-15" date="1746619200">- Disable assembly on aarch64 as a stopgap measure</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-16" date="1746705600">- Preserve ARM registers, reenable ARM assembly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-17" date="1750334400">- Enable ML-DSA at TLS 1.3 level</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-18" date="1750852800">- nettle/pk: mark ML-DSA as FIPS-unapproved</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-19" date="1751630400">- algorithms: assign hash strength to ML-DSA signature algorithms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-1" date="1752148800">- Update to 3.8.10 upstream release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-2" date="1754049600">- key_update: rework the rekeying logic</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770724800">- Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)
- Drop unused patches</changelog>
</package>
<package pkgid="6c6cdde9762ee644bd58aeaaaad60b7ae11658c9618ba349309695d5083b9ed2" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="4.el10_2"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-14" date="1745496000">- tests: make pqc-hybrid-kx.sh work when system time set beyond 2038</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-15" date="1746619200">- Disable assembly on aarch64 as a stopgap measure</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-16" date="1746705600">- Preserve ARM registers, reenable ARM assembly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-17" date="1750334400">- Enable ML-DSA at TLS 1.3 level</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-18" date="1750852800">- nettle/pk: mark ML-DSA as FIPS-unapproved</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-19" date="1751630400">- algorithms: assign hash strength to ML-DSA signature algorithms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-1" date="1752148800">- Update to 3.8.10 upstream release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-2" date="1754049600">- key_update: rework the rekeying logic</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770724800">- Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)
- Drop unused patches</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-4" date="1777550400">- Fix 3.8.13 CVEs and security issues, update Makefile.in
- Fix CVE-2026-33846
- Fix CVE-2026-42009
- Fix CVE-2026-33845
- Fix CVE-2026-42010
- Fix CVE-2026-3833
- Fix CVE-2026-42011
- Fix CVE-2026-42012
- Fix CVE-2026-42013
- Fix CVE-2026-42014
- Fix CVE-2026-5260
- Fix CVE-2026-42015
- Fix CVE-2026-3832
- Fix CVE-2026-5419
- Fix upstream security issue #1808
- Fix upstream security issue #1810
- Fix upstream security issue #1813
- Fix upstream security issue #1818
- Fix upstream security issue #1818
- Fix upstream security issue #1819
- Fix upstream security issue #1822
- Fix upstream security issue #1841
- Fix upstream security issue #1823
- Fix upstream security issue #1817
- Fix upstream security issue #1820
- gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in</changelog>
</package>
<package pkgid="fbb72de75879d38d54b506007cf8802714601bcd4c7b2993ca2729b6059f81c9" name="gnutls-c++" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="3.el10_1"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-13" date="1745323200">- Update gnutls-3.8.9-cli-earlydata.patch to the upstream version</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-14" date="1745496000">- tests: make pqc-hybrid-kx.sh work when system time set beyond 2038</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-15" date="1746619200">- Disable assembly on aarch64 as a stopgap measure</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-16" date="1746705600">- Preserve ARM registers, reenable ARM assembly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-17" date="1750334400">- Enable ML-DSA at TLS 1.3 level</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-18" date="1750852800">- nettle/pk: mark ML-DSA as FIPS-unapproved</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-19" date="1751630400">- algorithms: assign hash strength to ML-DSA signature algorithms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-1" date="1752148800">- Update to 3.8.10 upstream release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-2" date="1754049600">- key_update: rework the rekeying logic</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770724800">- Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)
- Drop unused patches</changelog>
</package>
<package pkgid="a28203a95317d1dccbaac9aa1cd897f0ab9a22da157c302310d586aaa313740e" name="gnutls-c++" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="4.el10_2"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-14" date="1745496000">- tests: make pqc-hybrid-kx.sh work when system time set beyond 2038</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-15" date="1746619200">- Disable assembly on aarch64 as a stopgap measure</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-16" date="1746705600">- Preserve ARM registers, reenable ARM assembly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-17" date="1750334400">- Enable ML-DSA at TLS 1.3 level</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-18" date="1750852800">- nettle/pk: mark ML-DSA as FIPS-unapproved</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-19" date="1751630400">- algorithms: assign hash strength to ML-DSA signature algorithms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-1" date="1752148800">- Update to 3.8.10 upstream release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-2" date="1754049600">- key_update: rework the rekeying logic</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770724800">- Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)
- Drop unused patches</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-4" date="1777550400">- Fix 3.8.13 CVEs and security issues, update Makefile.in
- Fix CVE-2026-33846
- Fix CVE-2026-42009
- Fix CVE-2026-33845
- Fix CVE-2026-42010
- Fix CVE-2026-3833
- Fix CVE-2026-42011
- Fix CVE-2026-42012
- Fix CVE-2026-42013
- Fix CVE-2026-42014
- Fix CVE-2026-5260
- Fix CVE-2026-42015
- Fix CVE-2026-3832
- Fix CVE-2026-5419
- Fix upstream security issue #1808
- Fix upstream security issue #1810
- Fix upstream security issue #1813
- Fix upstream security issue #1818
- Fix upstream security issue #1818
- Fix upstream security issue #1819
- Fix upstream security issue #1822
- Fix upstream security issue #1841
- Fix upstream security issue #1823
- Fix upstream security issue #1817
- Fix upstream security issue #1820
- gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in</changelog>
</package>
<package pkgid="86c93158b4231097543f56f2f0f76b6a8b82dd5058a54ae044f7a09e797ade74" name="gnutls-dane" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="3.el10_1"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-13" date="1745323200">- Update gnutls-3.8.9-cli-earlydata.patch to the upstream version</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-14" date="1745496000">- tests: make pqc-hybrid-kx.sh work when system time set beyond 2038</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-15" date="1746619200">- Disable assembly on aarch64 as a stopgap measure</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-16" date="1746705600">- Preserve ARM registers, reenable ARM assembly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-17" date="1750334400">- Enable ML-DSA at TLS 1.3 level</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-18" date="1750852800">- nettle/pk: mark ML-DSA as FIPS-unapproved</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-19" date="1751630400">- algorithms: assign hash strength to ML-DSA signature algorithms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-1" date="1752148800">- Update to 3.8.10 upstream release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-2" date="1754049600">- key_update: rework the rekeying logic</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770724800">- Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)
- Drop unused patches</changelog>
</package>
<package pkgid="1986e665a7cb9dd8e802c5a42e339c3b524134c4247ea1dbacacad1c0ae372c8" name="gnutls-dane" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="4.el10_2"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-14" date="1745496000">- tests: make pqc-hybrid-kx.sh work when system time set beyond 2038</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-15" date="1746619200">- Disable assembly on aarch64 as a stopgap measure</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-16" date="1746705600">- Preserve ARM registers, reenable ARM assembly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-17" date="1750334400">- Enable ML-DSA at TLS 1.3 level</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-18" date="1750852800">- nettle/pk: mark ML-DSA as FIPS-unapproved</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-19" date="1751630400">- algorithms: assign hash strength to ML-DSA signature algorithms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-1" date="1752148800">- Update to 3.8.10 upstream release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-2" date="1754049600">- key_update: rework the rekeying logic</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770724800">- Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)
- Drop unused patches</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-4" date="1777550400">- Fix 3.8.13 CVEs and security issues, update Makefile.in
- Fix CVE-2026-33846
- Fix CVE-2026-42009
- Fix CVE-2026-33845
- Fix CVE-2026-42010
- Fix CVE-2026-3833
- Fix CVE-2026-42011
- Fix CVE-2026-42012
- Fix CVE-2026-42013
- Fix CVE-2026-42014
- Fix CVE-2026-5260
- Fix CVE-2026-42015
- Fix CVE-2026-3832
- Fix CVE-2026-5419
- Fix upstream security issue #1808
- Fix upstream security issue #1810
- Fix upstream security issue #1813
- Fix upstream security issue #1818
- Fix upstream security issue #1818
- Fix upstream security issue #1819
- Fix upstream security issue #1822
- Fix upstream security issue #1841
- Fix upstream security issue #1823
- Fix upstream security issue #1817
- Fix upstream security issue #1820
- gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in</changelog>
</package>
<package pkgid="699e42fd66edcbca5f666764dec1e2870e614a6b2041dae41a332c7f4efae0ae" name="gnutls-devel" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="3.el10_1"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-13" date="1745323200">- Update gnutls-3.8.9-cli-earlydata.patch to the upstream version</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-14" date="1745496000">- tests: make pqc-hybrid-kx.sh work when system time set beyond 2038</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-15" date="1746619200">- Disable assembly on aarch64 as a stopgap measure</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-16" date="1746705600">- Preserve ARM registers, reenable ARM assembly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-17" date="1750334400">- Enable ML-DSA at TLS 1.3 level</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-18" date="1750852800">- nettle/pk: mark ML-DSA as FIPS-unapproved</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-19" date="1751630400">- algorithms: assign hash strength to ML-DSA signature algorithms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-1" date="1752148800">- Update to 3.8.10 upstream release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-2" date="1754049600">- key_update: rework the rekeying logic</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770724800">- Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)
- Drop unused patches</changelog>
</package>
<package pkgid="21edbaa58767fe32e33e2afb83e79086d5c01d0092b91aa14d239d6620932cd2" name="gnutls-devel" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="4.el10_2"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-14" date="1745496000">- tests: make pqc-hybrid-kx.sh work when system time set beyond 2038</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-15" date="1746619200">- Disable assembly on aarch64 as a stopgap measure</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-16" date="1746705600">- Preserve ARM registers, reenable ARM assembly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-17" date="1750334400">- Enable ML-DSA at TLS 1.3 level</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-18" date="1750852800">- nettle/pk: mark ML-DSA as FIPS-unapproved</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-19" date="1751630400">- algorithms: assign hash strength to ML-DSA signature algorithms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-1" date="1752148800">- Update to 3.8.10 upstream release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-2" date="1754049600">- key_update: rework the rekeying logic</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770724800">- Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)
- Drop unused patches</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-4" date="1777550400">- Fix 3.8.13 CVEs and security issues, update Makefile.in
- Fix CVE-2026-33846
- Fix CVE-2026-42009
- Fix CVE-2026-33845
- Fix CVE-2026-42010
- Fix CVE-2026-3833
- Fix CVE-2026-42011
- Fix CVE-2026-42012
- Fix CVE-2026-42013
- Fix CVE-2026-42014
- Fix CVE-2026-5260
- Fix CVE-2026-42015
- Fix CVE-2026-3832
- Fix CVE-2026-5419
- Fix upstream security issue #1808
- Fix upstream security issue #1810
- Fix upstream security issue #1813
- Fix upstream security issue #1818
- Fix upstream security issue #1818
- Fix upstream security issue #1819
- Fix upstream security issue #1822
- Fix upstream security issue #1841
- Fix upstream security issue #1823
- Fix upstream security issue #1817
- Fix upstream security issue #1820
- gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in</changelog>
</package>
<package pkgid="2423379c49d934b9127a3430cd0ed1f1054925a30cda8d7bf0b0fee3d254ac29" name="gnutls-fips" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="3.el10_1"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-13" date="1745323200">- Update gnutls-3.8.9-cli-earlydata.patch to the upstream version</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-14" date="1745496000">- tests: make pqc-hybrid-kx.sh work when system time set beyond 2038</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-15" date="1746619200">- Disable assembly on aarch64 as a stopgap measure</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-16" date="1746705600">- Preserve ARM registers, reenable ARM assembly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-17" date="1750334400">- Enable ML-DSA at TLS 1.3 level</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-18" date="1750852800">- nettle/pk: mark ML-DSA as FIPS-unapproved</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-19" date="1751630400">- algorithms: assign hash strength to ML-DSA signature algorithms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-1" date="1752148800">- Update to 3.8.10 upstream release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-2" date="1754049600">- key_update: rework the rekeying logic</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770724800">- Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)
- Drop unused patches</changelog>
</package>
<package pkgid="609713189cd0230044c31e58ad46bcaf90a332ac4066065c3e00a03739204df5" name="gnutls-fips" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="4.el10_2"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-14" date="1745496000">- tests: make pqc-hybrid-kx.sh work when system time set beyond 2038</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-15" date="1746619200">- Disable assembly on aarch64 as a stopgap measure</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-16" date="1746705600">- Preserve ARM registers, reenable ARM assembly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-17" date="1750334400">- Enable ML-DSA at TLS 1.3 level</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-18" date="1750852800">- nettle/pk: mark ML-DSA as FIPS-unapproved</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-19" date="1751630400">- algorithms: assign hash strength to ML-DSA signature algorithms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-1" date="1752148800">- Update to 3.8.10 upstream release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-2" date="1754049600">- key_update: rework the rekeying logic</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770724800">- Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)
- Drop unused patches</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-4" date="1777550400">- Fix 3.8.13 CVEs and security issues, update Makefile.in
- Fix CVE-2026-33846
- Fix CVE-2026-42009
- Fix CVE-2026-33845
- Fix CVE-2026-42010
- Fix CVE-2026-3833
- Fix CVE-2026-42011
- Fix CVE-2026-42012
- Fix CVE-2026-42013
- Fix CVE-2026-42014
- Fix CVE-2026-5260
- Fix CVE-2026-42015
- Fix CVE-2026-3832
- Fix CVE-2026-5419
- Fix upstream security issue #1808
- Fix upstream security issue #1810
- Fix upstream security issue #1813
- Fix upstream security issue #1818
- Fix upstream security issue #1818
- Fix upstream security issue #1819
- Fix upstream security issue #1822
- Fix upstream security issue #1841
- Fix upstream security issue #1823
- Fix upstream security issue #1817
- Fix upstream security issue #1820
- gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in</changelog>
</package>
<package pkgid="b1121838629e73eefed359bd2ce8aea46d1d73e579a7b0baeafa0671572dda26" name="gnutls-utils" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="3.el10_1"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-13" date="1745323200">- Update gnutls-3.8.9-cli-earlydata.patch to the upstream version</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-14" date="1745496000">- tests: make pqc-hybrid-kx.sh work when system time set beyond 2038</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-15" date="1746619200">- Disable assembly on aarch64 as a stopgap measure</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-16" date="1746705600">- Preserve ARM registers, reenable ARM assembly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-17" date="1750334400">- Enable ML-DSA at TLS 1.3 level</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-18" date="1750852800">- nettle/pk: mark ML-DSA as FIPS-unapproved</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-19" date="1751630400">- algorithms: assign hash strength to ML-DSA signature algorithms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-1" date="1752148800">- Update to 3.8.10 upstream release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-2" date="1754049600">- key_update: rework the rekeying logic</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770724800">- Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)
- Drop unused patches</changelog>
</package>
<package pkgid="0f2a16f3035ab618fa33073d8b31c99e3204744bffc5f2a52d686e12ea456a84" name="gnutls-utils" arch="x86_64">
  <version epoch="0" ver="3.8.10" rel="4.el10_2"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-14" date="1745496000">- tests: make pqc-hybrid-kx.sh work when system time set beyond 2038</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-15" date="1746619200">- Disable assembly on aarch64 as a stopgap measure</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.9-16" date="1746705600">- Preserve ARM registers, reenable ARM assembly</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-17" date="1750334400">- Enable ML-DSA at TLS 1.3 level</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-18" date="1750852800">- nettle/pk: mark ML-DSA as FIPS-unapproved</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.9-19" date="1751630400">- algorithms: assign hash strength to ML-DSA signature algorithms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-1" date="1752148800">- Update to 3.8.10 upstream release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.8.10-2" date="1754049600">- key_update: rework the rekeying logic</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-3" date="1770724800">- Fix CVE-2025-9820, CVE-2025-14831, drop unused patches
- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)
- Fix name constraint processing performance issue (CVE-2025-14831)
- Drop unused patches</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.8.10-4" date="1777550400">- Fix 3.8.13 CVEs and security issues, update Makefile.in
- Fix CVE-2026-33846
- Fix CVE-2026-42009
- Fix CVE-2026-33845
- Fix CVE-2026-42010
- Fix CVE-2026-3833
- Fix CVE-2026-42011
- Fix CVE-2026-42012
- Fix CVE-2026-42013
- Fix CVE-2026-42014
- Fix CVE-2026-5260
- Fix CVE-2026-42015
- Fix CVE-2026-3832
- Fix CVE-2026-5419
- Fix upstream security issue #1808
- Fix upstream security issue #1810
- Fix upstream security issue #1813
- Fix upstream security issue #1818
- Fix upstream security issue #1818
- Fix upstream security issue #1819
- Fix upstream security issue #1822
- Fix upstream security issue #1841
- Fix upstream security issue #1823
- Fix upstream security issue #1817
- Fix upstream security issue #1820
- gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in</changelog>
</package>
<package pkgid="bfe02315c6e2d912454e7fc71094fd900f94d3f55f29dd22d78b005a1362c124" name="go-fdo-client" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="3.el10_2"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.3-1" date="1770033600">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.3-2" date="1770033601">- Add gating test for cs10</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.0-1" date="1771502400">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
</package>
<package pkgid="12595b9a9082bed1b8fcda56df470b6990cad7bdc7837ccfb58e3cf14534e3a4" name="go-fdo-client" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="4.el10_2.5"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.3-1" date="1770033600">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.3-2" date="1770033601">- Add gating test for cs10</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.0-1" date="1771502400">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.0-4" date="1779278400">- Rebuild to fix CVE-2026-32282 and CVE-2025-68121</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.0.0-5" date="1782820800">- Rebuild against updated golang</changelog>
</package>
<package pkgid="7cd984f89fdfb1eb34fe674c2b2eadc4c20967ceb6903377c4f85267ddd8101e" name="go-fdo-client" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="4.el10_2.7"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.3-1" date="1770033600">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.3-2" date="1770033601">- Add gating test for cs10</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.0-1" date="1771502400">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.0-4" date="1779278400">- Rebuild to fix CVE-2026-32282 and CVE-2025-68121</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.0.0-5" date="1782820800">- Rebuild against updated golang</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.0.0-6" date="1787054400">- Rebuild go-fdo-client against updated golang</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.0.0-7" date="1787745600">- Rebuild go-fdo-client against updated golang</changelog>
</package>
<package pkgid="5f9734c8593a2eef5ab71cdedaca86effd5b112072b90d7412e41403b252b61c" name="go-fdo-client" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="4.el10_2"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.3-1" date="1770033600">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.3-2" date="1770033601">- Add gating test for cs10</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.0-1" date="1771502400">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.0-4" date="1779278400">- Rebuild to fix CVE-2026-32282 and CVE-2025-68121</changelog>
</package>
<package pkgid="e4d733a2644f510bac6203d20a46d38d32f9d78075a81897fbcd8159d2cd8a67" name="go-fdo-server" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="1.el10_2"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-1" date="1768910400">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-2" date="1769515200">- Add gating test for cs10</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-1" date="1771329600">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.1-1" date="1777982400">- Update to 1.0.1 upstream release
- Resolves: RHEL-165475</changelog>
</package>
<package pkgid="30bca8263bb57801c6481e61a557da9672c4ddee8600470d7ae83a1e8b5ac0ca" name="go-fdo-server" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="2.el10_2.3"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-1" date="1768910400">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-2" date="1769515200">- Add gating test for cs10</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-1" date="1771329600">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.1-1" date="1777982400">- Update to 1.0.1 upstream release
- Resolves: RHEL-165475</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.1-2" date="1779278400">- Rebuild to fix CVE-2026-32282 and CVE-2025-68121</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.0.1-3" date="1783944000">- Rebuild against updated golang</changelog>
</package>
<package pkgid="ee52723d5e1458f1171586ce63f5cb80086110702e5f429fd11532d46429963e" name="go-fdo-server" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="2.el10_2.4"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-1" date="1768910400">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-2" date="1769515200">- Add gating test for cs10</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-1" date="1771329600">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.1-1" date="1777982400">- Update to 1.0.1 upstream release
- Resolves: RHEL-165475</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.1-2" date="1779278400">- Rebuild to fix CVE-2026-32282 and CVE-2025-68121</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.0.1-3" date="1783944000">- Rebuild against updated golang</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.0.1-4" date="1787140800">- Rebuild go-fdo-server against updated golang</changelog>
</package>
<package pkgid="333b2e7be8b61ec8fd8a51b11075895867d1e341380ec6618e7a5742ca883217" name="go-fdo-server" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="2.el10_2"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-1" date="1768910400">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-2" date="1769515200">- Add gating test for cs10</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-1" date="1771329600">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.1-1" date="1777982400">- Update to 1.0.1 upstream release
- Resolves: RHEL-165475</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.1-2" date="1779278400">- Rebuild to fix CVE-2026-32282 and CVE-2025-68121</changelog>
</package>
<package pkgid="e96f54ca7abcda1e02fcb3f7c4282cf6748696902730abed8513027ad6218bc7" name="go-fdo-server-manufacturer" arch="noarch">
  <version epoch="0" ver="1.0.1" rel="1.el10_2"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-1" date="1768910400">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-2" date="1769515200">- Add gating test for cs10</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-1" date="1771329600">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.1-1" date="1777982400">- Update to 1.0.1 upstream release
- Resolves: RHEL-165475</changelog>
</package>
<package pkgid="018550336438f7d4d90d37e5ef21073c50fea342d879e0e0f460f7293c9fa28b" name="go-fdo-server-manufacturer" arch="noarch">
  <version epoch="0" ver="1.0.1" rel="2.el10_2.3"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-1" date="1768910400">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-2" date="1769515200">- Add gating test for cs10</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-1" date="1771329600">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.1-1" date="1777982400">- Update to 1.0.1 upstream release
- Resolves: RHEL-165475</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.1-2" date="1779278400">- Rebuild to fix CVE-2026-32282 and CVE-2025-68121</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.0.1-3" date="1783944000">- Rebuild against updated golang</changelog>
</package>
<package pkgid="f278f3cb32060c9049d83865104e85a844ba5a2bcef810b0857c1f05464203cc" name="go-fdo-server-manufacturer" arch="noarch">
  <version epoch="0" ver="1.0.1" rel="2.el10_2.4"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-1" date="1768910400">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-2" date="1769515200">- Add gating test for cs10</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-1" date="1771329600">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.1-1" date="1777982400">- Update to 1.0.1 upstream release
- Resolves: RHEL-165475</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.1-2" date="1779278400">- Rebuild to fix CVE-2026-32282 and CVE-2025-68121</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.0.1-3" date="1783944000">- Rebuild against updated golang</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.0.1-4" date="1787140800">- Rebuild go-fdo-server against updated golang</changelog>
</package>
<package pkgid="5ccda77fae009861babf98ed74294b8b0972a70e6e0137b7cbfcbe98a9a33d71" name="go-fdo-server-manufacturer" arch="noarch">
  <version epoch="0" ver="1.0.1" rel="2.el10_2"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-1" date="1768910400">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-2" date="1769515200">- Add gating test for cs10</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-1" date="1771329600">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.1-1" date="1777982400">- Update to 1.0.1 upstream release
- Resolves: RHEL-165475</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.1-2" date="1779278400">- Rebuild to fix CVE-2026-32282 and CVE-2025-68121</changelog>
</package>
<package pkgid="d7b6a4b8e44383771a8b9dcdd5015773c1565d780d2db22f0b840b56fa733fe9" name="go-fdo-server-owner" arch="noarch">
  <version epoch="0" ver="1.0.1" rel="1.el10_2"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-1" date="1768910400">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-2" date="1769515200">- Add gating test for cs10</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-1" date="1771329600">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.1-1" date="1777982400">- Update to 1.0.1 upstream release
- Resolves: RHEL-165475</changelog>
</package>
<package pkgid="2461623b94eb15a8039c49fba5ab066bad81310c3f9e3a981af81404c9613a57" name="go-fdo-server-owner" arch="noarch">
  <version epoch="0" ver="1.0.1" rel="2.el10_2.3"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-1" date="1768910400">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-2" date="1769515200">- Add gating test for cs10</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-1" date="1771329600">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.1-1" date="1777982400">- Update to 1.0.1 upstream release
- Resolves: RHEL-165475</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.1-2" date="1779278400">- Rebuild to fix CVE-2026-32282 and CVE-2025-68121</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.0.1-3" date="1783944000">- Rebuild against updated golang</changelog>
</package>
<package pkgid="cff0c907acd635fd64aee39a1936b4cfbdbbfb896e5640954e3a39cd5cd5aabf" name="go-fdo-server-owner" arch="noarch">
  <version epoch="0" ver="1.0.1" rel="2.el10_2.4"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-1" date="1768910400">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-2" date="1769515200">- Add gating test for cs10</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-1" date="1771329600">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.1-1" date="1777982400">- Update to 1.0.1 upstream release
- Resolves: RHEL-165475</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.1-2" date="1779278400">- Rebuild to fix CVE-2026-32282 and CVE-2025-68121</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.0.1-3" date="1783944000">- Rebuild against updated golang</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.0.1-4" date="1787140800">- Rebuild go-fdo-server against updated golang</changelog>
</package>
<package pkgid="5a79bbadc989598ed366bad7891eaac725b61f2de54f5892714727c3b480f6c0" name="go-fdo-server-owner" arch="noarch">
  <version epoch="0" ver="1.0.1" rel="2.el10_2"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-1" date="1768910400">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-2" date="1769515200">- Add gating test for cs10</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-1" date="1771329600">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.1-1" date="1777982400">- Update to 1.0.1 upstream release
- Resolves: RHEL-165475</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.1-2" date="1779278400">- Rebuild to fix CVE-2026-32282 and CVE-2025-68121</changelog>
</package>
<package pkgid="1c12d91cf1a66cecad349cf5cd56929fcaad8b9040c2e3bcd1bcec0e1280da9e" name="go-fdo-server-rendezvous" arch="noarch">
  <version epoch="0" ver="1.0.1" rel="1.el10_2"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-1" date="1768910400">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-2" date="1769515200">- Add gating test for cs10</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-1" date="1771329600">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.1-1" date="1777982400">- Update to 1.0.1 upstream release
- Resolves: RHEL-165475</changelog>
</package>
<package pkgid="c33473628033f5e1d049e4f304ac27bdf94f9521323418caf19010c657ba8063" name="go-fdo-server-rendezvous" arch="noarch">
  <version epoch="0" ver="1.0.1" rel="2.el10_2.3"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-1" date="1768910400">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-2" date="1769515200">- Add gating test for cs10</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-1" date="1771329600">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.1-1" date="1777982400">- Update to 1.0.1 upstream release
- Resolves: RHEL-165475</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.1-2" date="1779278400">- Rebuild to fix CVE-2026-32282 and CVE-2025-68121</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.0.1-3" date="1783944000">- Rebuild against updated golang</changelog>
</package>
<package pkgid="c1a67a3a13e75eb1836d988a04c1799e7f84f5dc4411a8863f81610f330953fe" name="go-fdo-server-rendezvous" arch="noarch">
  <version epoch="0" ver="1.0.1" rel="2.el10_2.4"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-1" date="1768910400">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-2" date="1769515200">- Add gating test for cs10</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-1" date="1771329600">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.1-1" date="1777982400">- Update to 1.0.1 upstream release
- Resolves: RHEL-165475</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.1-2" date="1779278400">- Rebuild to fix CVE-2026-32282 and CVE-2025-68121</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.0.1-3" date="1783944000">- Rebuild against updated golang</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.0.1-4" date="1787140800">- Rebuild go-fdo-server against updated golang</changelog>
</package>
<package pkgid="0de29160e7a14baffc3b6c08b83ec8bdc85d745f0739374ea66ae9cff5630789" name="go-fdo-server-rendezvous" arch="noarch">
  <version epoch="0" ver="1.0.1" rel="2.el10_2"/>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-1" date="1768910400">- Initial commit on c10s</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.0.4-2" date="1769515200">- Add gating test for cs10</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-1" date="1771329600">- Update to 1.0.0 upstream release</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-2" date="1775131200">- Rebuild to fix CVE-2026-25679 and CVE-2026-27137</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.0-3" date="1777464000">- Rebuild to fix CVE-2026-32283</changelog>
  <changelog author="Antonio Murdaca &lt;antoniomurdaca@gmail.com&gt; - 1.0.1-1" date="1777982400">- Update to 1.0.1 upstream release
- Resolves: RHEL-165475</changelog>
  <changelog author="Sarita Mahajan &lt;sarmahaj@redhat.com&gt; - 1.0.1-2" date="1779278400">- Rebuild to fix CVE-2026-32282 and CVE-2025-68121</changelog>
</package>
<package pkgid="3424e166960ae2d34bb107ee75664fe4d65ee063a95b7ba2b801db4c5e758839" name="go-filesystem" arch="x86_64">
  <version epoch="0" ver="3.8.0" rel="1.el10"/>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 3.3.0-3" date="1716465600">- Remove explicit dependency of forge-srpm-macros</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 3.3.0-5" date="1719403200">- Add rpminspect.yaml</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 3.6.0-1" date="1721822400">- Update to 3.6.0</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.6.0-2" date="1727438400">- Enable debuginfo</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 3.6.0-3" date="1727438401">- Delete rpminspect.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.6.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 3.6.0-5" date="1741867200">- Add riscv64 to golang_arches for RHEL 10+</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 3.6.0-6" date="1743681600">- Update CI support</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 3.8.0-1" date="1757678400">- Update to 3.8.0</changelog>
</package>
<package pkgid="f3060d19239247650ab5181076fb1259ac3daf70cad300963432806032c49728" name="go-rpm-macros" arch="x86_64">
  <version epoch="0" ver="3.8.0" rel="1.el10"/>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 3.3.0-3" date="1716465600">- Remove explicit dependency of forge-srpm-macros</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 3.3.0-5" date="1719403200">- Add rpminspect.yaml</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 3.6.0-1" date="1721822400">- Update to 3.6.0</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.6.0-2" date="1727438400">- Enable debuginfo</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 3.6.0-3" date="1727438401">- Delete rpminspect.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.6.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 3.6.0-5" date="1741867200">- Add riscv64 to golang_arches for RHEL 10+</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 3.6.0-6" date="1743681600">- Update CI support</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 3.8.0-1" date="1757678400">- Update to 3.8.0</changelog>
</package>
<package pkgid="aa2d26e65e921f6cc443b3ba763fa8a14b2ba1824e08e6ca52712417d9a7633c" name="go-rpm-templates" arch="x86_64">
  <version epoch="0" ver="3.8.0" rel="1.el10"/>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 3.3.0-3" date="1716465600">- Remove explicit dependency of forge-srpm-macros</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 3.3.0-5" date="1719403200">- Add rpminspect.yaml</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 3.6.0-1" date="1721822400">- Update to 3.6.0</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.6.0-2" date="1727438400">- Enable debuginfo</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 3.6.0-3" date="1727438401">- Delete rpminspect.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.6.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 3.6.0-5" date="1741867200">- Add riscv64 to golang_arches for RHEL 10+</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 3.6.0-6" date="1743681600">- Update CI support</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 3.8.0-1" date="1757678400">- Update to 3.8.0</changelog>
</package>
<package pkgid="5f36f52813f16849f6c2fa1d629c873359ab5cb96682f1a576dde681010999ee" name="go-srpm-macros" arch="noarch">
  <version epoch="0" ver="3.8.0" rel="1.el10"/>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 3.3.0-3" date="1716465600">- Remove explicit dependency of forge-srpm-macros</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 3.3.0-5" date="1719403200">- Add rpminspect.yaml</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 3.6.0-1" date="1721822400">- Update to 3.6.0</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.6.0-2" date="1727438400">- Enable debuginfo</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 3.6.0-3" date="1727438401">- Delete rpminspect.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.6.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 3.6.0-5" date="1741867200">- Add riscv64 to golang_arches for RHEL 10+</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 3.6.0-6" date="1743681600">- Update CI support</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 3.8.0-1" date="1757678400">- Update to 3.8.0</changelog>
</package>
<package pkgid="8b0d91c6ac754cced84665d5a598f7d2e811bc244c50d06fbc6db1bce9423bee" name="go-toolset" arch="x86_64">
  <version epoch="0" ver="1.26.2" rel="2.el10_2"/>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
</package>
<package pkgid="98b9e6766e8e1d8d148375464bf3aaa40cfb2c5fae9ac7d2cb94816dc2c6fccb" name="go-toolset" arch="x86_64">
  <version epoch="0" ver="1.26.3" rel="4.el10_2"/>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-1" date="1778587200">- Update to Go 1.26.3 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-2" date="1778846400">- Remove ld.bfd patch for aarch64</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-3" date="1778846401">- Conditionalize baseline ISA</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-4" date="1778846402">- Set conditional ISA for bootstrap</changelog>
</package>
<package pkgid="6749cbae37074c4af15178e23e1cdc36c8fa35ca2922d1e923e6838a5a88b7a4" name="go-toolset" arch="x86_64">
  <version epoch="0" ver="1.26.4" rel="1.el10_2"/>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-1" date="1778587200">- Update to Go 1.26.3 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-2" date="1778846400">- Remove ld.bfd patch for aarch64</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-3" date="1778846401">- Conditionalize baseline ISA</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-4" date="1778846402">- Set conditional ISA for bootstrap</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.4-1" date="1781092800">- Update to Go 1.26.4 (fips-1)</changelog>
</package>
<package pkgid="00b4257c30ee87304ad85d917da758ff94b70f6269937a1c1939c40797cb747e" name="go-toolset" arch="x86_64">
  <version epoch="0" ver="1.26.5" rel="1.el10_2"/>
  <changelog author="Louis Abel &lt;label@rockylinux.org&gt; - 1.25.0-5" date="1757592000">- Disable race for risv64</changelog>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.25.1-1" date="1759233600">- Update to Go1.25.1 -Resolves: RHEL-116849</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.5-1" date="1783512000">- Update to Go 1.26.5 (fips-1)</changelog>
</package>
<package pkgid="a682cd88e106b5e302dc6ab91a3bc8535c1153917afc2d00705551ad4eb4fb33" name="go-toolset" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="1.el10_2"/>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.25.1-1" date="1759233600">- Update to Go1.25.1 -Resolves: RHEL-116849</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.5-1" date="1783512000">- Update to Go 1.26.5 (fips-1)</changelog>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.26.7-1" date="1787313600">- Update to Go 1.26.7 (fips-1)</changelog>
</package>
<package pkgid="21f9e767c373380feb4d6c6d553be0b1c31dc7b2c07cc577a06e8ba626b65492" name="gobject-introspection" arch="x86_64">
  <version epoch="0" ver="1.79.1" rel="6.el10"/>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 1.76.1-3" date="1686312000">- Add workaround patch for compatibility with Python 3.12</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.76.1-4" date="1686830400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.76.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.78.1-1" date="1695038400">- Update to 1.78.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.79.1-1" date="1704974400">- Update to 1.79.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.79.1-2" date="1704974401">- Backport a patch to avoid loading mismatching GIRepository versions</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.79.1-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.79.1-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.79.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.79.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="775397fe674b4d42464bc2e6820b8785394aa6746cb188c71c43e07a3558b0a8" name="gobject-introspection-devel" arch="x86_64">
  <version epoch="0" ver="1.79.1" rel="6.el10"/>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 1.76.1-3" date="1686312000">- Add workaround patch for compatibility with Python 3.12</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.76.1-4" date="1686830400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.76.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.78.1-1" date="1695038400">- Update to 1.78.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.79.1-1" date="1704974400">- Update to 1.79.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.79.1-2" date="1704974401">- Backport a patch to avoid loading mismatching GIRepository versions</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.79.1-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.79.1-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.79.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.79.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0939ca0a87cb8bf03f14bc813f8ca78344e936dfa86355100c2ae3ba09579cf5" name="golang" arch="x86_64">
  <version epoch="0" ver="1.26.2" rel="2.el10_2"/>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
</package>
<package pkgid="6ad8fb114b0760c2d2d2843ad862c194557327aa2e94cca12a4d377994281c9a" name="golang" arch="x86_64">
  <version epoch="0" ver="1.26.3" rel="4.el10_2"/>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-1" date="1778587200">- Update to Go 1.26.3 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-2" date="1778846400">- Remove ld.bfd patch for aarch64</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-3" date="1778846401">- Conditionalize baseline ISA</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-4" date="1778846402">- Set conditional ISA for bootstrap</changelog>
</package>
<package pkgid="5c65f4f402eae3bac64bc33a0d4becce064ab2fa0b9db81ad0a561c2b4170a0c" name="golang" arch="x86_64">
  <version epoch="0" ver="1.26.4" rel="1.el10_2"/>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-1" date="1778587200">- Update to Go 1.26.3 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-2" date="1778846400">- Remove ld.bfd patch for aarch64</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-3" date="1778846401">- Conditionalize baseline ISA</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-4" date="1778846402">- Set conditional ISA for bootstrap</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.4-1" date="1781092800">- Update to Go 1.26.4 (fips-1)</changelog>
</package>
<package pkgid="d7261a66d495174fb6ef5d2057d17d026c5c8b370f6a0a74dfefd41d3bb8c0a3" name="golang" arch="x86_64">
  <version epoch="0" ver="1.26.5" rel="1.el10_2"/>
  <changelog author="Louis Abel &lt;label@rockylinux.org&gt; - 1.25.0-5" date="1757592000">- Disable race for risv64</changelog>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.25.1-1" date="1759233600">- Update to Go1.25.1 -Resolves: RHEL-116849</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.5-1" date="1783512000">- Update to Go 1.26.5 (fips-1)</changelog>
</package>
<package pkgid="a524e8ef2a6dce97422631c3baf425783f9465a6469b2ae7a268becd55946d46" name="golang" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="1.el10_2"/>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.25.1-1" date="1759233600">- Update to Go1.25.1 -Resolves: RHEL-116849</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.5-1" date="1783512000">- Update to Go 1.26.5 (fips-1)</changelog>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.26.7-1" date="1787313600">- Update to Go 1.26.7 (fips-1)</changelog>
</package>
<package pkgid="16183f9bf1432c77964a722cb90e42500d25504dd660ce4d2e7364585029e13e" name="golang-bin" arch="x86_64">
  <version epoch="0" ver="1.26.2" rel="2.el10_2"/>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
</package>
<package pkgid="bbfbfe5f423aa36cf83db63c08125638aed97fa677bd91e9326efab2a473ffa6" name="golang-bin" arch="x86_64">
  <version epoch="0" ver="1.26.3" rel="4.el10_2"/>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-1" date="1778587200">- Update to Go 1.26.3 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-2" date="1778846400">- Remove ld.bfd patch for aarch64</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-3" date="1778846401">- Conditionalize baseline ISA</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-4" date="1778846402">- Set conditional ISA for bootstrap</changelog>
</package>
<package pkgid="abfcb18334efacbae10052a21b4cf97ca2dd98cbfd710384ccbfdcd28ab61eeb" name="golang-bin" arch="x86_64">
  <version epoch="0" ver="1.26.4" rel="1.el10_2"/>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-1" date="1778587200">- Update to Go 1.26.3 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-2" date="1778846400">- Remove ld.bfd patch for aarch64</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-3" date="1778846401">- Conditionalize baseline ISA</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-4" date="1778846402">- Set conditional ISA for bootstrap</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.4-1" date="1781092800">- Update to Go 1.26.4 (fips-1)</changelog>
</package>
<package pkgid="5f521d46d341215e7ff9a8d388c900a9fb4495a4aaa1aef1dc030e35bdac561a" name="golang-bin" arch="x86_64">
  <version epoch="0" ver="1.26.5" rel="1.el10_2"/>
  <changelog author="Louis Abel &lt;label@rockylinux.org&gt; - 1.25.0-5" date="1757592000">- Disable race for risv64</changelog>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.25.1-1" date="1759233600">- Update to Go1.25.1 -Resolves: RHEL-116849</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.5-1" date="1783512000">- Update to Go 1.26.5 (fips-1)</changelog>
</package>
<package pkgid="c1f222a2b577f69a648d0d9e81a9bef2afcbf0d540fd9e85b302a8e2b375b519" name="golang-bin" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="1.el10_2"/>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.25.1-1" date="1759233600">- Update to Go1.25.1 -Resolves: RHEL-116849</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.5-1" date="1783512000">- Update to Go 1.26.5 (fips-1)</changelog>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.26.7-1" date="1787313600">- Update to Go 1.26.7 (fips-1)</changelog>
</package>
<package pkgid="7e30150120c2135156d2364875a3a176c856d990acd0b29685648e3ee2635b7e" name="golang-docs" arch="noarch">
  <version epoch="0" ver="1.26.2" rel="2.el10_2"/>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
</package>
<package pkgid="8f6ed112485b6660020d77ed0c0116c50d2336013fe2ad4bafd1211c1ebbe4ad" name="golang-docs" arch="noarch">
  <version epoch="0" ver="1.26.3" rel="4.el10_2"/>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-1" date="1778587200">- Update to Go 1.26.3 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-2" date="1778846400">- Remove ld.bfd patch for aarch64</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-3" date="1778846401">- Conditionalize baseline ISA</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-4" date="1778846402">- Set conditional ISA for bootstrap</changelog>
</package>
<package pkgid="6cfeb977b32a146facd7a47b0b6167099e6683169d11d8749b0c868d8b1fb406" name="golang-docs" arch="noarch">
  <version epoch="0" ver="1.26.4" rel="1.el10_2"/>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-1" date="1778587200">- Update to Go 1.26.3 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-2" date="1778846400">- Remove ld.bfd patch for aarch64</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-3" date="1778846401">- Conditionalize baseline ISA</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-4" date="1778846402">- Set conditional ISA for bootstrap</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.4-1" date="1781092800">- Update to Go 1.26.4 (fips-1)</changelog>
</package>
<package pkgid="7d56c4705f41f8059b8525e5e10532b7577793818d96eba3ba9c7a4c2fb42bc8" name="golang-docs" arch="noarch">
  <version epoch="0" ver="1.26.5" rel="1.el10_2"/>
  <changelog author="Louis Abel &lt;label@rockylinux.org&gt; - 1.25.0-5" date="1757592000">- Disable race for risv64</changelog>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.25.1-1" date="1759233600">- Update to Go1.25.1 -Resolves: RHEL-116849</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.5-1" date="1783512000">- Update to Go 1.26.5 (fips-1)</changelog>
</package>
<package pkgid="f21699f1e3057fe1c6799c980badf82cf29126a5613849b3dcf1925e2e8a6236" name="golang-docs" arch="noarch">
  <version epoch="0" ver="1.26.7" rel="1.el10_2"/>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.25.1-1" date="1759233600">- Update to Go1.25.1 -Resolves: RHEL-116849</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.5-1" date="1783512000">- Update to Go 1.26.5 (fips-1)</changelog>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.26.7-1" date="1787313600">- Update to Go 1.26.7 (fips-1)</changelog>
</package>
<package pkgid="3d5ca0b9eb16d22be51c9681c7b1a2f63f8ac3b5d886519851958f1da38bcdd5" name="golang-github-cpuguy83-md2man" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="9.el10"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2.0.3-7" date="1730289600">- don't build devel and compat packages
- Resolves: RHEL-65307</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2.0.3-8" date="1730980800">- re-add -devel and compat
- Resolves: RHEL-65351</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2.0.3-9" date="1744027200">- add Provides: golang(github.com/russross/blackfriday/v2)
- Resolves: RHEL-86199</changelog>
</package>
<package pkgid="cabef47a9424fdfa711b358f037053cff2c7ee2e207959313012e162838b3b20" name="golang-github-cpuguy83-md2man-devel" arch="noarch">
  <version epoch="0" ver="2.0.3" rel="9.el10"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2.0.3-7" date="1730289600">- don't build devel and compat packages
- Resolves: RHEL-65307</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2.0.3-8" date="1730980800">- re-add -devel and compat
- Resolves: RHEL-65351</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2.0.3-9" date="1744027200">- add Provides: golang(github.com/russross/blackfriday/v2)
- Resolves: RHEL-86199</changelog>
</package>
<package pkgid="8e6cb0149945c38d23d1a741449e9456c7d771dcc8deed819a0d301186cedf51" name="golang-github-openprinting-goipp-devel" arch="noarch">
  <version epoch="0" ver="1.1.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.0-8" date="1690372800">- SPDX migration</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.0-9" date="1700740800">- Rebuild for any CVE fixes in golang</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.1.0-1" date="1704974400">- 2253306 - golang-github-openprinting-goipp-1.1.0 is available</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.1.0-5" date="1721649600">- RHEL-49443 Revert change in goipp regarding IPP standard breaking change</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="77b95c900908c2f12e2cbcc763eaa5360966acdd5a87e2248f4fde5533286136" name="golang-github-openprinting-ipp-usb-devel" arch="noarch">
  <version epoch="0" ver="0.9.27" rel="7.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.24-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.26-1" date="1721649600">- RHEL-49445 Rebase ipp-usb to 0.9.26</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-1" date="1721908800">- RHEL-49445 Rebase ipp-usb to 0.9.27</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.27-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-3" date="1749470400">- rebuild to fix CVE-2025-22871</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-4" date="1770811200">- rebuilt to fix CVE-2025-61729</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-5" date="1772020800">- rebuilt to fix CVE-2025-68121 and CVE-2025-61726</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 0.9.27-6" date="1775563200">- rebuilt to fix CVE-2026-27137, CVE-2026-25679
- fixed rebuild problem with redundant condition check in quirks.empty()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7" date="1777982400">- rebuilt to fix CVE-2026-32280, CVE-2026-32282, CVE-2026-32283,
  CVE-2026-33810</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7.1" date="1780401600">- rebuilt with golang-1.26.3-4.el10_2 to fix CVE-2026-32281</changelog>
</package>
<package pkgid="2690fe5ee36bb8eecd8d5213f4d9945d3860e16f667047b5771b3cbdb347a0e6" name="golang-github-openprinting-ipp-usb-devel" arch="noarch">
  <version epoch="0" ver="0.9.27" rel="7.el10_2.2"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.26-1" date="1721649600">- RHEL-49445 Rebase ipp-usb to 0.9.26</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-1" date="1721908800">- RHEL-49445 Rebase ipp-usb to 0.9.27</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.27-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-3" date="1749470400">- rebuild to fix CVE-2025-22871</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-4" date="1770811200">- rebuilt to fix CVE-2025-61729</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-5" date="1772020800">- rebuilt to fix CVE-2025-68121 and CVE-2025-61726</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 0.9.27-6" date="1775563200">- rebuilt to fix CVE-2026-27137, CVE-2026-25679
- fixed rebuild problem with redundant condition check in quirks.empty()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7" date="1777982400">- rebuilt to fix CVE-2026-32280, CVE-2026-32282, CVE-2026-32283,
  CVE-2026-33810</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7.1" date="1780401600">- rebuilt with golang-1.26.3-4.el10_2 to fix CVE-2026-32281</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7.2" date="1782734400">- rebuilt with golang-1.26.4-1.el10_2 to fix CVE-2026-33811, CVE-2026-27145</changelog>
</package>
<package pkgid="39bed961c73a6c0b03813a68af2406783a0a5395c39e3e3f72e77e77ac7efe17" name="golang-github-openprinting-ipp-usb-devel" arch="noarch">
  <version epoch="0" ver="0.9.27" rel="7.el10_2.3"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.27-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-3" date="1749470400">- rebuild to fix CVE-2025-22871</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-4" date="1770811200">- rebuilt to fix CVE-2025-61729</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-5" date="1772020800">- rebuilt to fix CVE-2025-68121 and CVE-2025-61726</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 0.9.27-6" date="1775563200">- rebuilt to fix CVE-2026-27137, CVE-2026-25679
- fixed rebuild problem with redundant condition check in quirks.empty()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7" date="1777982400">- rebuilt to fix CVE-2026-32280, CVE-2026-32282, CVE-2026-32283,
  CVE-2026-33810</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7.1" date="1780401600">- rebuilt with golang-1.26.3-4.el10_2 to fix CVE-2026-32281</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7.2" date="1782734400">- rebuilt with golang-1.26.4-1.el10_2 to fix CVE-2026-33811, CVE-2026-27145</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7.3" date="1788177600">- Rebuilt with golang-1.26.7-1.el10_2 to fix
  CVE-2026-42504,CVE-2026-33818,CVE-2026-56853,CVE-2026-56859,CVE-2026-56860,CVE-2026-56862</changelog>
</package>
<package pkgid="4321fad9eb8f22cdd9b6c628699e2a46411c48857296a4d11a0a7e9c5678bc9d" name="golang-github-openprinting-ipp-usb-devel" arch="noarch">
  <version epoch="0" ver="0.9.27" rel="7.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.24-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.26-1" date="1721649600">- RHEL-49445 Rebase ipp-usb to 0.9.26</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-1" date="1721908800">- RHEL-49445 Rebase ipp-usb to 0.9.27</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.27-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-3" date="1749470400">- rebuild to fix CVE-2025-22871</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-4" date="1770811200">- rebuilt to fix CVE-2025-61729</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-5" date="1772020800">- rebuilt to fix CVE-2025-68121 and CVE-2025-61726</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 0.9.27-6" date="1775563200">- rebuilt to fix CVE-2026-27137, CVE-2026-25679
- fixed rebuild problem with redundant condition check in quirks.empty()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7" date="1777982400">- rebuilt to fix CVE-2026-32280, CVE-2026-32282, CVE-2026-32283,
  CVE-2026-33810</changelog>
</package>
<package pkgid="62336b8ca69aae9f5aac73ab7bf27c2cf1c64cd361080ac3b82c9ec9c6861ae4" name="golang-misc" arch="noarch">
  <version epoch="0" ver="1.26.2" rel="2.el10_2"/>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
</package>
<package pkgid="1ee570427bb147095657c1c2ab705512252433c3eb239c78d63a1030876988fe" name="golang-misc" arch="noarch">
  <version epoch="0" ver="1.26.3" rel="4.el10_2"/>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-1" date="1778587200">- Update to Go 1.26.3 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-2" date="1778846400">- Remove ld.bfd patch for aarch64</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-3" date="1778846401">- Conditionalize baseline ISA</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-4" date="1778846402">- Set conditional ISA for bootstrap</changelog>
</package>
<package pkgid="5d408d5055e58997f7813b82104cc826daf5b1e3ac7e46d0dd58c4e13b6aa41c" name="golang-misc" arch="noarch">
  <version epoch="0" ver="1.26.4" rel="1.el10_2"/>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-1" date="1778587200">- Update to Go 1.26.3 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-2" date="1778846400">- Remove ld.bfd patch for aarch64</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-3" date="1778846401">- Conditionalize baseline ISA</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-4" date="1778846402">- Set conditional ISA for bootstrap</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.4-1" date="1781092800">- Update to Go 1.26.4 (fips-1)</changelog>
</package>
<package pkgid="82bc692b6e16e8b7b28594c167a923d1e43ae243e17ffa884f4e79dce6ba07eb" name="golang-misc" arch="noarch">
  <version epoch="0" ver="1.26.5" rel="1.el10_2"/>
  <changelog author="Louis Abel &lt;label@rockylinux.org&gt; - 1.25.0-5" date="1757592000">- Disable race for risv64</changelog>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.25.1-1" date="1759233600">- Update to Go1.25.1 -Resolves: RHEL-116849</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.5-1" date="1783512000">- Update to Go 1.26.5 (fips-1)</changelog>
</package>
<package pkgid="b44708e469614108d1ced2e4aa2973b3401a04a5e96e6bc829066e79c32d954f" name="golang-misc" arch="noarch">
  <version epoch="0" ver="1.26.7" rel="1.el10_2"/>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.25.1-1" date="1759233600">- Update to Go1.25.1 -Resolves: RHEL-116849</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.5-1" date="1783512000">- Update to Go 1.26.5 (fips-1)</changelog>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.26.7-1" date="1787313600">- Update to Go 1.26.7 (fips-1)</changelog>
</package>
<package pkgid="cd206280ad17f069658a5e6f168f6cfbd190216aac99417bd666cbe399508902" name="golang-race" arch="x86_64">
  <version epoch="0" ver="1.26.2" rel="2.el10_2"/>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
</package>
<package pkgid="bea3f7839e38c9ef8f0e4a38d1a8ac068d4326293441d2b4b8fd62328abbe7ef" name="golang-race" arch="x86_64">
  <version epoch="0" ver="1.26.3" rel="4.el10_2"/>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-1" date="1778587200">- Update to Go 1.26.3 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-2" date="1778846400">- Remove ld.bfd patch for aarch64</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-3" date="1778846401">- Conditionalize baseline ISA</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-4" date="1778846402">- Set conditional ISA for bootstrap</changelog>
</package>
<package pkgid="e1171de26b6349f600b2d5caedf39d22a219a103cd17615808bfd9705952aaf9" name="golang-race" arch="x86_64">
  <version epoch="0" ver="1.26.4" rel="1.el10_2"/>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-1" date="1778587200">- Update to Go 1.26.3 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-2" date="1778846400">- Remove ld.bfd patch for aarch64</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-3" date="1778846401">- Conditionalize baseline ISA</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-4" date="1778846402">- Set conditional ISA for bootstrap</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.4-1" date="1781092800">- Update to Go 1.26.4 (fips-1)</changelog>
</package>
<package pkgid="6cc1fbd7e20012b7c82dfd1ccc33e457cc75f6987eb9ba8412bf4d6ebc1f9567" name="golang-race" arch="x86_64">
  <version epoch="0" ver="1.26.5" rel="1.el10_2"/>
  <changelog author="Louis Abel &lt;label@rockylinux.org&gt; - 1.25.0-5" date="1757592000">- Disable race for risv64</changelog>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.25.1-1" date="1759233600">- Update to Go1.25.1 -Resolves: RHEL-116849</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.5-1" date="1783512000">- Update to Go 1.26.5 (fips-1)</changelog>
</package>
<package pkgid="6a77298ecee2b9b859b9808b2d33266e36e5ec76880cb4023f48e3b46429df3f" name="golang-race" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="1.el10_2"/>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.25.1-1" date="1759233600">- Update to Go1.25.1 -Resolves: RHEL-116849</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.5-1" date="1783512000">- Update to Go 1.26.5 (fips-1)</changelog>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.26.7-1" date="1787313600">- Update to Go 1.26.7 (fips-1)</changelog>
</package>
<package pkgid="a586737a229c2a9e6d75979830228853d74741a45951c3ea388bde3c7f577996" name="golang-src" arch="noarch">
  <version epoch="0" ver="1.26.2" rel="2.el10_2"/>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
</package>
<package pkgid="153cd60eadf02f5dfc1f18c705ee535ea0ecc6b1c1cdad07cb433c3cbaef6174" name="golang-src" arch="noarch">
  <version epoch="0" ver="1.26.3" rel="4.el10_2"/>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-1" date="1778587200">- Update to Go 1.26.3 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-2" date="1778846400">- Remove ld.bfd patch for aarch64</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-3" date="1778846401">- Conditionalize baseline ISA</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-4" date="1778846402">- Set conditional ISA for bootstrap</changelog>
</package>
<package pkgid="c6c199afd97140748f0c99c1ad6f048f5fa41f602f09ee7c5487cfd1c6cc6466" name="golang-src" arch="noarch">
  <version epoch="0" ver="1.26.4" rel="1.el10_2"/>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-1" date="1778587200">- Update to Go 1.26.3 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-2" date="1778846400">- Remove ld.bfd patch for aarch64</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-3" date="1778846401">- Conditionalize baseline ISA</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-4" date="1778846402">- Set conditional ISA for bootstrap</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.4-1" date="1781092800">- Update to Go 1.26.4 (fips-1)</changelog>
</package>
<package pkgid="b3bfb3baac45cbf187f91e77ed16fa051677bf158c828d9185978236579d0f5c" name="golang-src" arch="noarch">
  <version epoch="0" ver="1.26.5" rel="1.el10_2"/>
  <changelog author="Louis Abel &lt;label@rockylinux.org&gt; - 1.25.0-5" date="1757592000">- Disable race for risv64</changelog>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.25.1-1" date="1759233600">- Update to Go1.25.1 -Resolves: RHEL-116849</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.5-1" date="1783512000">- Update to Go 1.26.5 (fips-1)</changelog>
</package>
<package pkgid="27e1f17fab89581973cd3420071917b1145e13f778353d404d3cc255169ae176" name="golang-src" arch="noarch">
  <version epoch="0" ver="1.26.7" rel="1.el10_2"/>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.25.1-1" date="1759233600">- Update to Go1.25.1 -Resolves: RHEL-116849</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.5-1" date="1783512000">- Update to Go 1.26.5 (fips-1)</changelog>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.26.7-1" date="1787313600">- Update to Go 1.26.7 (fips-1)</changelog>
</package>
<package pkgid="5be63adb0380d54c1bb05aeb4182f89325f9cec23b22a4a0b77f3a726749a5bf" name="golang-tests" arch="noarch">
  <version epoch="0" ver="1.26.2" rel="2.el10_2"/>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
</package>
<package pkgid="fec5206501bc9387df09477db267b570a94f3e0564dd66f95c54a949e6463d72" name="golang-tests" arch="noarch">
  <version epoch="0" ver="1.26.3" rel="4.el10_2"/>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-1" date="1778587200">- Update to Go 1.26.3 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-2" date="1778846400">- Remove ld.bfd patch for aarch64</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-3" date="1778846401">- Conditionalize baseline ISA</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-4" date="1778846402">- Set conditional ISA for bootstrap</changelog>
</package>
<package pkgid="a8847313447ef5a94ea6f8a08caf0d330e0ddd4a3157f4f98c72728b30face69" name="golang-tests" arch="noarch">
  <version epoch="0" ver="1.26.4" rel="1.el10_2"/>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.26.1-1" date="1774440000">- Update to Go 1.26.1</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-1" date="1776859200">- Update to Go 1.26.2 (fips-2)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.2-2" date="1776859201">- Do not ignore any tests in check</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-1" date="1778587200">- Update to Go 1.26.3 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-2" date="1778846400">- Remove ld.bfd patch for aarch64</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-3" date="1778846401">- Conditionalize baseline ISA</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.3-4" date="1778846402">- Set conditional ISA for bootstrap</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.4-1" date="1781092800">- Update to Go 1.26.4 (fips-1)</changelog>
</package>
<package pkgid="03bd96c9c35146d54fce39675a2984a11d3f60d11ddc5677d5c0caa292c7a802" name="golang-tests" arch="noarch">
  <version epoch="0" ver="1.26.5" rel="1.el10_2"/>
  <changelog author="Louis Abel &lt;label@rockylinux.org&gt; - 1.25.0-5" date="1757592000">- Disable race for risv64</changelog>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.25.1-1" date="1759233600">- Update to Go1.25.1 -Resolves: RHEL-116849</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.5-1" date="1783512000">- Update to Go 1.26.5 (fips-1)</changelog>
</package>
<package pkgid="926e66f5e6adbeff4c0ce353874e5b93b257111f9c134d600f038bec7dd8420b" name="golang-tests" arch="noarch">
  <version epoch="0" ver="1.26.7" rel="1.el10_2"/>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.25.1-1" date="1759233600">- Update to Go1.25.1 -Resolves: RHEL-116849</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-1" date="1761739200">- Update to Go 1.25.3</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-2" date="1765281600">- rpminspect.yaml: Add testdata to annocheck ignore</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-3" date="1765281601">- plans/tier0.fmf: Import plan</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.25.3-4" date="1765368000">- Cleanup lib/ ownership
- Remove legacy logic forcing lib/ into golang-tests
- Move lib/wasm, lib/fips140, and lib/time to main golang package
- Fixes go_js_wasm_exec availability</changelog>
  <changelog author="Edjunior Machado &lt;emachado@redhat.com&gt; - 1.25.3-5" date="1765972800">- gating.yaml: Add tier1 s390x tests</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.5-1" date="1768824000">- Update to Go 1.25.5 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.25.7-1" date="1770897600">- Update to Go 1.25.7 (fips-1)</changelog>
  <changelog author="dbenoit &lt;dbenoit@redhat.com&gt; - 1.26.5-1" date="1783512000">- Update to Go 1.26.5 (fips-1)</changelog>
  <changelog author="Archana &lt;aravinda@redhat.com&gt; - 1.26.7-1" date="1787313600">- Update to Go 1.26.7 (fips-1)</changelog>
</package>
<package pkgid="7df86beb02312d2e7f370f6b834f0690b0bd84e2efd01b7543f1489a7d5bbfc5" name="google-carlito-fonts" arch="noarch">
  <version epoch="0" ver="1.103" rel="0.26.20130920.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.103-0.20.20130920" date="1669896000">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.103-0.21.20130920" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.103-0.22.20130920" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.103-0.23.20130920" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.103-0.24.20130920" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.103-0.25.20130920" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.103-0.26.20130920" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b53c507e7fd4a62ea8a703a103ba868bd94b17539911537117fcb5e2b34d306c" name="google-crosextra-caladea-fonts" arch="noarch">
  <version epoch="1" ver="1.002" rel="0.20.20130214.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:1.002-0.15.20130214" date="1675684800">- Un-retire this package in F38+ (#2162532)
- Update as per suggestions given in rename package review (#2166813)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.002-0.16.20130214" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.002-0.17.20130214" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.002-0.18.20130214" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.002-0.19.20130214" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.002-0.20.20130214" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1051c86f94e2f712768cd4698760bcf2a409c272f817034f69fafa78454e6253" name="google-droid-fonts-all" arch="noarch">
  <version epoch="0" ver="20200215" rel="22.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200215-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20200215-15" date="1683720000">- Drop the font unification which causes a lot of problems.
  Resolves: rhbz#2186711, rhbz#2144373, rhbz#2096153, rhbz#517789</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20200215-16" date="1690545600">- Convert License tag to SPDX.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200215-17" date="1692619200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200215-18" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200215-19" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20200215-20" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20200215-21" date="1720699200">- Fix missing config files
  Resolves: RHEL-47276</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20200215-22" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d32e369c96741984638ace2c251bb16a6ae30ba68cf5942ad57465e19a539b45" name="google-droid-sans-fonts" arch="noarch">
  <version epoch="0" ver="20200215" rel="22.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200215-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20200215-15" date="1683720000">- Drop the font unification which causes a lot of problems.
  Resolves: rhbz#2186711, rhbz#2144373, rhbz#2096153, rhbz#517789</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20200215-16" date="1690545600">- Convert License tag to SPDX.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200215-17" date="1692619200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200215-18" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200215-19" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20200215-20" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20200215-21" date="1720699200">- Fix missing config files
  Resolves: RHEL-47276</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20200215-22" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="409fc9d7f9fb3dc46b0ce233a099ead2fd55c1f4f6038c1be812db06d999fff3" name="google-droid-sans-mono-fonts" arch="noarch">
  <version epoch="0" ver="20200215" rel="22.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200215-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20200215-15" date="1683720000">- Drop the font unification which causes a lot of problems.
  Resolves: rhbz#2186711, rhbz#2144373, rhbz#2096153, rhbz#517789</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20200215-16" date="1690545600">- Convert License tag to SPDX.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200215-17" date="1692619200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200215-18" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200215-19" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20200215-20" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20200215-21" date="1720699200">- Fix missing config files
  Resolves: RHEL-47276</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20200215-22" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b915ec247db491763322478d6476cec480e4a9d8f295f9ace768f24cefd120bc" name="google-droid-serif-fonts" arch="noarch">
  <version epoch="0" ver="20200215" rel="22.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200215-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20200215-15" date="1683720000">- Drop the font unification which causes a lot of problems.
  Resolves: rhbz#2186711, rhbz#2144373, rhbz#2096153, rhbz#517789</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20200215-16" date="1690545600">- Convert License tag to SPDX.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200215-17" date="1692619200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200215-18" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200215-19" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20200215-20" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20200215-21" date="1720699200">- Fix missing config files
  Resolves: RHEL-47276</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20200215-22" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0a673e1140477b4005e1a158b51ab390a8507da0cdf89fbd525c2f8cca7a9497" name="google-guice" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-4" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-11" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="655bb0b869d03ed9f0530aa74a46d7ad99acaf2a65425fbed6a1a2715028c21b" name="google-guice-javadoc" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-4" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-11" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1595fba1f4f197b6938d5fb806d2fbc65af360cca4505bbf4db98157758866c7" name="google-noto-color-emoji-fonts" arch="noarch">
  <version epoch="0" ver="20231130" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220916-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20220916-4" date="1678968000">- Use metainfodir macro for metainfo files</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20220916-5" date="1684756800">- Migrate to SPDX license</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20220916-6" date="1685016000">- Update to follow New Fonts Packaging Guidelines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220916-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220916-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220916-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20231130-1" date="1706184000">- Update to v2.042</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20231130-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20231130-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e1e76203a36dde0ba9df311cec6138ad994dd282ff8a02a0c64b09f8287942c4" name="google-noto-emoji-fonts" arch="noarch">
  <version epoch="0" ver="20231130" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220916-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20220916-4" date="1678968000">- Use metainfodir macro for metainfo files</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20220916-5" date="1684756800">- Migrate to SPDX license</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20220916-6" date="1685016000">- Update to follow New Fonts Packaging Guidelines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220916-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220916-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220916-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20231130-1" date="1706184000">- Update to v2.042</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20231130-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20231130-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9ba2b6598296fbb840bfe7eb52257bfe9e3e068a613786328e1fa88184891b13" name="google-noto-fangsong-kss-rotated-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="23404425e8793a646f429e4feb1c507bea27e19ae80b1ca97b1cf9561045605d" name="google-noto-fangsong-kss-vertical-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8e2868de50ea3292c474d09c345e44affe9a906a9b40ccc133bdccdb71da9b86" name="google-noto-fonts-all" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c9ddee4050f0ec3db5ccde6de88dc9f8f6fdf57fd6e7743b24600b0229df2125" name="google-noto-fonts-all-static" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="44be4637da774b6b26c882f399784877cd8d42d6f759989d001c39ea8c8f46c1" name="google-noto-fonts-all-vf" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9941d741c4206c32a7278114551149d4df85eada6c17d2afcd8d76c28ae9c596" name="google-noto-fonts-common" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="382cc300d0cbdb461e849e323a5f5823c44326e6fa65d98f467bad4e54bce59e" name="google-noto-kufi-arabic-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e6ebf032a1b2437263717e06e06407eebf2c30ff5859a6b7cb16e7002a9f34a6" name="google-noto-kufi-arabic-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a4688381e980f5cac953fb16d5aa076759b4b45ae1b8e6e8c5f33578187f05c8" name="google-noto-music-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b5d2cb1c7ab6581bd1c8686fa4fea737107fa3e97d05f207428fc8d120615805" name="google-noto-naskh-arabic-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="485c15d834e8d3cdbef85ac55938bfaf191716b696c3dd0d21b94f5dfcee8839" name="google-noto-naskh-arabic-ui-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="49a53df54cd693ec239122a4a74e9ece8501375aa06aaa6cda922bcfa20e38b9" name="google-noto-naskh-arabic-ui-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a9e807b51b3936cce9f4afd8fa59f4002f57926e49a2d9e170877af571d16ae2" name="google-noto-naskh-arabic-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="15595c1047ebd4f25fac500112265df68a41ca9f38f37d1ea0dfff6e434ee4cd" name="google-noto-nastaliq-urdu-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7e6e0560ce6710457b089f9b3cd3fcb58a48c9034100cadcc13151d82221b867" name="google-noto-nastaliq-urdu-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="642dabed6c6b15b3f2fbea03c461f69e9bc95198eb4e3718ee8f4127eed3402d" name="google-noto-rashi-hebrew-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="667a7e6e98985de577d4103bdcf11c720a57576976fd8dba7653685c4a7c2b04" name="google-noto-rashi-hebrew-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9298d172875c134c769cef5d73aea8a7d6cbe16070b945c037a1215002c12f2e" name="google-noto-sans-adlam-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="69764c91a5ef5135abe006c2edd7153733c7f477e89f63944a0f071dd0f0a17a" name="google-noto-sans-adlam-unjoined-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b79766bb42ca54e8bfd76711eb6b550eb24056ba10540d43262982408af29443" name="google-noto-sans-adlam-unjoined-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9ea56e7de1d389f802ad8b24da6d96d94068888612ac0e54b2bbad14206963fb" name="google-noto-sans-adlam-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="789b1a61f227d4fed7e2c8b811807093d419a5471c1966fe637b161904ed9dbd" name="google-noto-sans-anatolian-hieroglyphs-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8ca73b41c08ae4982fe976c74377127b3b758f6012f656d9a41f2099d24e7663" name="google-noto-sans-arabic-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b86bf4e5990d64af6e4343d975de52a7402e73cb502629f86e8861bcf0dc6809" name="google-noto-sans-arabic-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bb99aa16ac8d620fb4be2158900c2e91c754b9acf27b3bf09ffe7f53d9096ce9" name="google-noto-sans-armenian-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="09aad1ac0a10887e41b0fd3698c84e1fee2b02bb0ab40267462d4b37f4c1cdcf" name="google-noto-sans-armenian-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d9e82cd0ae8053b64f2c0d24cb84f37e014f66843594b61ecb6ead1a62fe082a" name="google-noto-sans-avestan-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="681333d8cb52f63eb97e7277ffa5b63c8460fb6859236c0a208b9b8c6f84f355" name="google-noto-sans-balinese-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="561bf016542c2858d25d33a11b579dd6f4656eb342887644476653cfcc8f073a" name="google-noto-sans-balinese-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c88b8bb8c98be94e9fe786d96e7f47dc8f477c5afc847ac38da2ab72592a1a10" name="google-noto-sans-bamum-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b848a5ec70df83e6e903928c6e9c19f1c1235f0c2d48bf78e15db9e0fda4c3b0" name="google-noto-sans-bamum-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d0c3afc42e9dc9590c858b6d942241f27f713de3da5c9c9c050bad0e1c745703" name="google-noto-sans-bassa-vah-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="44847f38f5d34177e2bb306b504ad0395661e8c4975ce9406ce42739d966a5f0" name="google-noto-sans-bassa-vah-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2979edd47ddc405654da06e2d53a6ee4b6a2541fd9c887c60fa9eda11aa1d35e" name="google-noto-sans-batak-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="07cf17cd96c088bbdd0c5b8ee21a9edec0f3c4ecb7d80a52e86c72c3a9e6adfa" name="google-noto-sans-bengali-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c51557ac89110b7c91b3ac7acdcba084b17d91da1e821985749efe374ec88eb3" name="google-noto-sans-bengali-ui-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5e827fc0aa7f03442f46d075ae9238d86eb5e522ba1d677668f105fffc16fd3e" name="google-noto-sans-bengali-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d173db7f8365fc364a09421316f3c9d66a0d65d21e636e5faec95036f3542ef0" name="google-noto-sans-bhaiksuki-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d47eb1b80c2afff84afcbf374d756f92f28e877bb834b5015aa06f5e855f14c1" name="google-noto-sans-brahmi-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b45f86a0036aaed3c532bc3860ad5fd12d5b89f7406aed5e1368f36523282157" name="google-noto-sans-buginese-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6ceb836e69a5a46b41df5bff88c758dc5fcdec2d811ac93f757b0ccebb1a724e" name="google-noto-sans-buhid-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3c3312b8e8a6987c6e8b001f2728d0c8d5630c7184a835ae2dedc60c0fa05ca3" name="google-noto-sans-canadian-aboriginal-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fda9b81796ec5222d53825ee93464a7158d3bf3f6b70b053c6058ac8e9759bb3" name="google-noto-sans-canadian-aboriginal-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b3d778864d58b24613c9c1554fc081f886c45fba79787ceaa2c3704eb6f70d43" name="google-noto-sans-carian-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="776a6c37ef304da45c45705b3cdd078517f0248a8f89b7a020f60a91ef2cd642" name="google-noto-sans-caucasian-albanian-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dbe8edd0697379434febf03b0c246d032ba7fcf96c94f40e1403d629b3df3f74" name="google-noto-sans-chakma-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e04ac0f2df58b173bd5671928413574421993c4b6b7d558bd04df379fce9a78a" name="google-noto-sans-cham-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8e0a582c212d67c147250e32d06c502afb0b409c6da081078957ce685eb670d6" name="google-noto-sans-cham-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1ff8896f2343c919bf2d6f3eb2de2e7e76e326de6ff587a56bd380b23d799861" name="google-noto-sans-cherokee-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4d683b3c6fe22b9aab5b4b07213766eb50fe20fa097d86065f2567a843bdd371" name="google-noto-sans-cherokee-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="709191b8381953e3202da7fc65fd942c3414ca26d36c60589168aa1f9ce9638e" name="google-noto-sans-chorasmian-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fee8043b26b386da6218f4bc58442ff82ed0921dcc696614701b59409ffb61bc" name="google-noto-sans-cjk-fonts" arch="noarch">
  <version epoch="1" ver="2.004" rel="9.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1:2.004-1" date="1675425600">- Initial Packaging
- Migrate to SPDX license</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1:2.004-2" date="1678968000">- Update the spec file with some Obsoletes and Provides</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1:2.004-3" date="1679659200">- Fix dnf upgrade issue
- Resolves: RHBZ#2181349</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.004-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.004-5" date="1696593600">- Drop Conflict: google-noto-sans-cjk-vf-fonts to get them installed together.
  fontconfig basically estimate same score for both but static font still has
  a priority because of path name. This works as a workaround for some issues
  related to variable fonts.
  Resolves: rhbz #2240646</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.004-6" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.004-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.004-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.004-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="20222468fdce88d54d56cbdf7230c58b394f71e3f14330346d6f64ad04218878" name="google-noto-sans-cjk-vf-fonts" arch="noarch">
  <version epoch="1" ver="2.004" rel="9.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1:2.004-1" date="1675425600">- Initial Packaging
- Migrate to SPDX license</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1:2.004-2" date="1683201600">- Fix obsoletes_sans macro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.004-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1:2.004-4" date="1690372800">- Add google-noto-sans-mono-cjk-vf-fonts sub package
- Resolves: RHBZ#2215475</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.004-5" date="1696593600">- Drop Conflict: google-noto-sans-cjk-fonts to get them installed together.
  fontconfig basically estimate same score for both but static font still has
  a priority because of path name. This works as a workaround for some issues
  related to variable fonts.
  Resolves: rhbz #2240646</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.004-6" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.004-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.004-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.004-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dbca02fc54a32e1c8e9207176f6e36bd0a15d2cf102809b7ef49709ab1fdeb6e" name="google-noto-sans-coptic-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="992d35247459fa2061b9dce736cc1078335cd13d5bb64e64bf32b2773724655f" name="google-noto-sans-cuneiform-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="829626288238f6264192c82c1c99aac2698b244ecaabe58fcf20a859a156f682" name="google-noto-sans-cypriot-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="370e667fd388e0c36a371b80cb201c00617f0caa9c325ea964c81c1429662eca" name="google-noto-sans-cypro-minoan-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="20e24bc8e5621827e96ba4726b0b023eea90c196070d81b5529118609aed2f62" name="google-noto-sans-deseret-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="45f5b373262540327cdd4114cd63952a9c28e0b42c214338f294bf1a6d5b42d3" name="google-noto-sans-devanagari-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="65871d6fa95c85795fcb469010475c26dc7d402de0c9c531d192139ae1ee38e6" name="google-noto-sans-devanagari-ui-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b1279083e0c3b56bf20428e7ff8c6363c6a7e459046929250d45623cd722e3dc" name="google-noto-sans-devanagari-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9a460065eb313e47a4e143a86db00c141f5145830bac2db398c75cb52e73b8a6" name="google-noto-sans-duployan-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7b2c77e1662200803d74a209843c9327ffb656d83a9ae87acbb174b55bc3c675" name="google-noto-sans-egyptian-hieroglyphs-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7c9bfa1e8ef234f93abcfd901ba1d80f3104809ee75f3ebdb92e8d8bf539893a" name="google-noto-sans-elbasan-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b7eb05fc41515aa4e2f6f9942dc22d8f78df7ddcb47d5d3db5e8eac123f7df73" name="google-noto-sans-elymaic-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bca25f65e6ae082614d0f416840046fe00a40ee4c7f10857bf1bc3d40638e426" name="google-noto-sans-ethiopic-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="215348b98e4d8f3be972cbe698667883e3864fe9d90a8598435330afa1e4a0d9" name="google-noto-sans-ethiopic-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b8550df01ed2798f734815f6fd423974aeb34568c79bf4743df4ebcdc8142e31" name="google-noto-sans-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="80fffa3cfe68ced5051b18ed928731ec8eef65cbc4f69cb669f88620fc324f8b" name="google-noto-sans-georgian-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="034a6775755469bd43afb90a5ebfabb4b761369ac57c2d677f1605d3067cefd8" name="google-noto-sans-georgian-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7c5ad191fae535eecebeb6b008f8054b0b394ea38b9b24191b732de56f5bbf9d" name="google-noto-sans-glagolitic-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e9c0b052cb4fc2c9cf8f453ea38f411d0f7746de5c011b6a4724decef283f134" name="google-noto-sans-gothic-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="28c7b479232e2f9fcacd1a46017db041f6a9fa21de1fb16f808bd3ce5149fccc" name="google-noto-sans-grantha-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="88ad901b88e7b1ff2fdc8c6f6ce45d926cbb03ff1c9e36063d202665b84913b4" name="google-noto-sans-gujarati-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="466381a50f309534b3797d746e44d9736cc44f97ed229f833eebff5317c4f135" name="google-noto-sans-gujarati-ui-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3ea5e9c4245f18baa39406051d4ecd2dc37a490514edeef0e1d3b83b150be6bb" name="google-noto-sans-gujarati-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="845a818b6571068dcad889bbb49a4789e49c826bb62661bb9770e33c9e665e8d" name="google-noto-sans-gunjala-gondi-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6428b65d00a2c00ef22c1099198b36199f888fd8d4e55a800a36cb4cb9e0032d" name="google-noto-sans-gunjala-gondi-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cf0a723c4c25c3e143a81e4f51ac1ed387cab45c78fdc226842a21acd2b2b2b4" name="google-noto-sans-gurmukhi-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a753446cb8663c8afd069103200d4ab51d5531fb9c358aa1ff4ca901387e2f86" name="google-noto-sans-gurmukhi-ui-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="968012ba9e961e6d7ea076e34fcf22dd62408f07117a3baf0f63f29e0187f2de" name="google-noto-sans-gurmukhi-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="94b659058a9e34609b54a11561317912c18a28c0a35b1a4fbca73153880cf750" name="google-noto-sans-hanifi-rohingya-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="91c7229e20b7fee05259a702899b5a4f8a1ef8be27019fe5eea0ecb87b859c28" name="google-noto-sans-hanifi-rohingya-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="14ce7abe1c6fef465985c1662da7a378df01765a3badbc9d9d32d5db4f51d484" name="google-noto-sans-hanunoo-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3ea9ab986cc76b92dcf23b9cfbe0cd3d6653b355f4be218b47eb765bc7903a27" name="google-noto-sans-hatran-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="33ed6850ea159011ef7a84bd9acc1dabfe8c9eef7b9292a0cf6dfef8cc7bcde2" name="google-noto-sans-hebrew-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6b28a3ad09a2e2288a605dda69b0f577a9d9270484138b182d741be2bc485be5" name="google-noto-sans-hebrew-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fcd4e136091e0d3f71c9bfcf7f576d52a858c1a59cabae0a431605d5982bd9ab" name="google-noto-sans-imperial-aramaic-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dbad5f982f15fc092d01427d6325363d1764e65e50f2b12ddcc32e88c2ddabf5" name="google-noto-sans-indic-siyaq-numbers-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7eb254cd1f3037255f1036622a12e021537d2aae51aa2efe98229f95c253b191" name="google-noto-sans-inscriptional-pahlavi-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1ac0139cd7906291e5e15e17653a05895d05fe49e624172c04891cb261e523e1" name="google-noto-sans-inscriptional-parthian-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3e20375fb6377fcab157b4636662965c14a30cba41ec162dc112379f8d97362d" name="google-noto-sans-javanese-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="14210fb8c95527f7f3bca6bb7b2feb32b4a1179934c8009ed287ed83bb247653" name="google-noto-sans-javanese-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="247479c74053a42eb61d3a4b419e5d9af8c6d0cf408fd00dd730507299136eda" name="google-noto-sans-kaithi-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8505ceb28ec8ea17976fc2c25fe8b117f815240ca05212706813bb3cb7bd5c1e" name="google-noto-sans-kannada-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b53bfd21d55ef17a9a2313c6d253a812d734ef95c17cbdab2e8aba1b31295931" name="google-noto-sans-kannada-ui-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="29fa929ad225e2a165ac1eec06541932f000ae0d67fdd6aaa4d16dc3e471f7ca" name="google-noto-sans-kannada-ui-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1da6e87787b40d73fa816f744ab2a2328cde0673a7457c5e02860bd9bda758ee" name="google-noto-sans-kannada-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="233bec8af4fd10cca7a49f18f5931a46d0491bcc515d87151ae7940cb72cd8a8" name="google-noto-sans-kawi-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e8a315530575d74d963a96989e65fb038b8868aa87342e852bbf7576b947daad" name="google-noto-sans-kawi-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="46876e2fee70ae22d248e836bf93eeb36444ca982bfc25f58aafb1e24f36480b" name="google-noto-sans-kayah-li-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5bbded9ae6b3e4b0957ccda70f0751df07de6ebebfa7224e0bee69c226509e58" name="google-noto-sans-kayah-li-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f377619f8317a0a2836146b6ab885f805e68ac0798baae26c993dd00c913b96a" name="google-noto-sans-kharoshthi-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a37d2d3582e18ff7a8f3fedca7943d3b616e80230a59ee7c06fa2437db90e179" name="google-noto-sans-khmer-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="41b1353c0123bcb7f8db4c1e9ed7b52be10007ce9f28ff5039c65ccf910fcd44" name="google-noto-sans-khmer-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="56d437976035b34e8ebcfe00b78ea8b672471d8dffa37143f3f155bf2bf41158" name="google-noto-sans-khojki-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fac48d1a1f7fb9d63d66c94e2d6c4b9acaa97e55e5b410f39f271aa7b76e93ce" name="google-noto-sans-khudawadi-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="708bcaa82aed2c4388b3f8025b2e6e21ec1ed9ead9a4f5691aad040d73556d26" name="google-noto-sans-lao-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ea98cd134f046cdc94b9bee86de235db9ca35d8fdc6108c881393fbe1a399758" name="google-noto-sans-lao-looped-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1601d334bb00f776e9afb54541a7353304e8927f1166002e3cd153860a902fab" name="google-noto-sans-lao-looped-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="06a3f6fdd74a74b7b07be3bfbd48bcdb178f12d158427f3eded4b6cbe6004ed0" name="google-noto-sans-lao-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4faabeba8a2a2a0b38fcff46b4bc48c6b28c99b1a58ae2387ca4567c8c3c2efc" name="google-noto-sans-lepcha-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ac592aec54bb9ed3f3d82d562f217d6d9d2ab4ecb560e4de981bea700bde7994" name="google-noto-sans-limbu-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0b3da3892af7a67a92b61370a63be7bf6eae17a1558208994cac55d1b8f056e7" name="google-noto-sans-linear-a-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9daa9ed1e5e356134c3bdee4ca0c6444cb8d33f6931f6436d7ad4fbf596e532b" name="google-noto-sans-linear-b-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="85fd10e1af3aec32a91c0eaa79ef8888b76a1038d19ba8c71343d81cd6b7447f" name="google-noto-sans-lisu-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a324524501bf20e2676975e60796a67dd0ac8b4bd6610c21f5df0eb141d67d4b" name="google-noto-sans-lisu-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="94a6ed0ff30de34a44a6a3aac410b2423b45ac95befce71f4c0266a68cdf1aaa" name="google-noto-sans-lycian-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c2ff5ad077efc0ec4c62c3e05f717f84dc11283e4531e3699dfa7c03117ab1a3" name="google-noto-sans-lydian-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="70eb253621bea598fe8206588c8f71461e47df107d4b475a2995ca5a0635ca06" name="google-noto-sans-mahajani-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8672c1e2284271cd71a54b804c2a8a4090d951c64fb9f107a9f68de969c699bf" name="google-noto-sans-malayalam-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="697fa3c33082fb3c796b394c9c11d02d8a8130b50adb4faaec1cd4bc50af2920" name="google-noto-sans-malayalam-ui-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7e0721c124fbf830dfdac4d7dd4e894de63b530a0bfa639134e6ec619f2c5225" name="google-noto-sans-malayalam-ui-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6735e464a9fc5e827d45c904b0c8c9c56589c0098a817a6d09b48b8d7a5f4e60" name="google-noto-sans-malayalam-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="98d34965949eb9a59f586818bb199720d4e3802695ec53bce87b98a6b488c691" name="google-noto-sans-mandaic-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b89792f889d43922d258a951f10de6a6fc0da37d9d1422c048aaca9112120572" name="google-noto-sans-manichaean-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="44dc3bbb8db7db84b23e88e0ac2acb76f0833c95b29d9e1452492a62858c459d" name="google-noto-sans-marchen-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f4e1c6afc17afa714d1ed443843287b173a88890803de83fb99ee3c07e314968" name="google-noto-sans-masaram-gondi-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d6c8ecedce02440e58daed4d86200aafba564375505e67cb94228d32df69ebe7" name="google-noto-sans-math-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7de848fb37705b0a4135871ba23fe8b129e981d81cca4c31e2778fc737658310" name="google-noto-sans-mayan-numerals-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ee430081982c24cf2ed019196ec2977cc1b1e4474e8e51935bc740f7ab5b009f" name="google-noto-sans-medefaidrin-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1e8e808e194c14cce6c6df2dae84a819ba01f90aa68c7d84cdee92a067ea063d" name="google-noto-sans-medefaidrin-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ece990ecb4c015f6f2222c5a8285dbc1c7ce661b267e1dfde84dfc3552c306dd" name="google-noto-sans-meetei-mayek-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e356a2570126e9905c79fa7073d3e7dbd844a3dfeb02af805b610cf5cc20dae5" name="google-noto-sans-meetei-mayek-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ce003ff5558abde54b025c7fa4aaa046f6551c31d335ffb327ef0bf1c2f2612c" name="google-noto-sans-mende-kikakui-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a71b06453c882877df01c81251d7d8ded3881a6f03e8b6d2c62f4a00e42d661d" name="google-noto-sans-meroitic-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ccb72b2bcf511678e43271209e31a4edbbcd5e16565c8b0a4c9f66f88768b6d6" name="google-noto-sans-miao-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f74e060fba2642d158e6a3c12c69858d840e20e716ebb6fa6320850b311321d6" name="google-noto-sans-modi-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1deaa84c0cdc1c41b5f0ce0d6f170c981ccccc4f559a86882616f14c9e2aadec" name="google-noto-sans-mongolian-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b7979402b7e2527c522b4950c6f731772ee11012b79a60c543b99133488ba6c1" name="google-noto-sans-mono-cjk-vf-fonts" arch="noarch">
  <version epoch="1" ver="2.004" rel="9.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1:2.004-1" date="1675425600">- Initial Packaging
- Migrate to SPDX license</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1:2.004-2" date="1683201600">- Fix obsoletes_sans macro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.004-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1:2.004-4" date="1690372800">- Add google-noto-sans-mono-cjk-vf-fonts sub package
- Resolves: RHBZ#2215475</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.004-5" date="1696593600">- Drop Conflict: google-noto-sans-cjk-fonts to get them installed together.
  fontconfig basically estimate same score for both but static font still has
  a priority because of path name. This works as a workaround for some issues
  related to variable fonts.
  Resolves: rhbz #2240646</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.004-6" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.004-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.004-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.004-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="33a2a35e941ae299f8031dad3ff817fa749d923ae24eb4c4f5b04a2ff78337c3" name="google-noto-sans-mono-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="95b7aa6ddb20cb68e1437171e3979918ff0e35530a1e68e73e1769fc3479008a" name="google-noto-sans-mono-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7ca6ce519f50fbc2513633b757bc6ff04e5a27b3584a48b3ca7359f9ad657d2e" name="google-noto-sans-mro-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c81bcd686e3fab4720b2fd61a546e1e0c20e4aa2c2b4d838ff61d7873d1e6c84" name="google-noto-sans-multani-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="afb7aa988d86d54fa165bf094ca64d10b7b2cc1642485e5f98f30abfce6e1e78" name="google-noto-sans-myanmar-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b2734d8af2331923197f1136a2b6ed6dc0f2da785e23788377b69ca8c8801108" name="google-noto-sans-myanmar-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="191829e651b9c562b141889be44845329e8caea41dafd7ab24a0b6f67ddd8ea7" name="google-noto-sans-nabataean-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c2a74c1eaf8c85b04368b64c68a5867c4c39050fe47897dc5c1f82ea40effd58" name="google-noto-sans-nag-mundari-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1de405038cfaf763cdab9878a53ca3ed17efab34d2eb7c11a5bf1e1f508858ef" name="google-noto-sans-nag-mundari-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2257988d2aa41f2c2a7334eef405dc4f4467b2725c8c2c4cfa81da8db4c6b6a6" name="google-noto-sans-nandinagari-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0f01e19d195157a994797a7db4b3c81a2c992d57c56b82db21cdd7e3fb480c5c" name="google-noto-sans-new-tai-lue-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="77322c06ba5042a5bdfda6d48c908aaf701e2dfbd8fefddf113486a77c025397" name="google-noto-sans-new-tai-lue-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="aec3f7bd51ceb40fecfd6e1b5b212f9b23f3946651d1aef6f71f820f65b410c4" name="google-noto-sans-newa-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6700d66c79c665feec94362d56ac655d7d6597cc793c8f115f52d385a51d5aaa" name="google-noto-sans-nko-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8c1efa419e7d58d56413b7a74e3c490e0c9590dbd40c13215fe31573b0708bb7" name="google-noto-sans-nko-unjoined-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d7c59d47bf697f27dcc5cd3ae63a815431826922dbc9a39e359b78a39fc0263d" name="google-noto-sans-nko-unjoined-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="439b1eb83b763bdbc9a45478c1a01e40b7e9d71cdfe95a70199165520240d7fa" name="google-noto-sans-nushu-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a8748728682cebfda4fef685680c9546249963b3a39ead9c1e01766aac4e93bd" name="google-noto-sans-ogham-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9bfc3014bbe0f25624d82e7a9c0eece3493cd0de1b2bcb5633a161e356f246d2" name="google-noto-sans-ol-chiki-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bdfadffd43ba653af4529707f617fec13745e645c79eb1749461440184cccd46" name="google-noto-sans-ol-chiki-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0d53ed6e81f0c1ce1a9afa53d6acab7e13d27b0b3eb0315d1829e7ade2d3e526" name="google-noto-sans-old-hungarian-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="46484b3a9b0b2b79dc3b8238578e038495b2d0428cd5d7cf28efe7a5d2d11298" name="google-noto-sans-old-italic-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ef7c8413036e3fc1641bd317d6023c4f9db4391a1c29c0598451737fc916fdcf" name="google-noto-sans-old-north-arabian-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="85e14ada66e8f71bc145297922ca098e2da02c4bc652be2a50c8f8d6f1c948ad" name="google-noto-sans-old-permic-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6fd6ba64ca85e63d3ca1cafa540b1b99d5e16213a0a6f4a8bf2bf0fa039a1f39" name="google-noto-sans-old-persian-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="30bdbd76cb8266ff0b0f4e6e7366044d4d4275cd37a10ee232422c8d11953d78" name="google-noto-sans-old-sogdian-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="97982b07e86f70bc4a03a3b63a96f61c9d0ebc9e3088dc991bcff3e795478ee8" name="google-noto-sans-old-south-arabian-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="954d07c6efd2abb38abb7183d8c4b52eb455dd51caa8d3c65afa9c6fe76521ff" name="google-noto-sans-old-turkic-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="82d72d1e45aad8720c07e43332799d75c1cf30d112c6be24c584b26598a255c2" name="google-noto-sans-oriya-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2c4c2a650ad289fcc36a67e214c0c27a2b36a72a5a58de320544bfd646291c9f" name="google-noto-sans-oriya-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d4e272b29098762007ce8b51cd96112f81766f65ad6699f2387db7dff4dec918" name="google-noto-sans-osage-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3b049f413edf60a3c1bcc8b0ffd270278d46eb387bcffffaa637b1376c7e869d" name="google-noto-sans-osmanya-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1fccfe9c2d8d0adf4afd4d2a046d636fe1f1df8470bb38a640d30933c58c859e" name="google-noto-sans-pahawh-hmong-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="51edd0afaedc08fcc9d076fb6ae814fb18fe6b6dc1ba25faf0a9cd694a2f2483" name="google-noto-sans-palmyrene-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4620b0671b88616ff9995a1705c083d9b505b199b2b7daa8f39bcca440859f82" name="google-noto-sans-pau-cin-hau-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="99cf992a03e7437a5fe942f669dd2fe69316f6eec51de0d28bc5f381c667b9e6" name="google-noto-sans-phagspa-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="875b023b71afb2d0ca1df7e68672e02d9fe3813064b69b0d8d85fe583602c455" name="google-noto-sans-phoenician-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6db44f86b86004407a12b47dca07c4af532782ca93f90ad9571f705ec3920d17" name="google-noto-sans-psalter-pahlavi-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fdd2b049dea26d59b925b1d788514cd2a259a4dd8ade1c00d35632d2febb975f" name="google-noto-sans-rejang-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="edca62195f68e68bea0c065462376736f7935f59380ea348f8722b8ccf0cb26e" name="google-noto-sans-runic-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bcc957351e11c6ad79cf96d18608dadd02b66a7ae1bd9e90c6bb05b74bcadf7e" name="google-noto-sans-samaritan-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="160bc1c47ae9898ac5bcd2dbe650210bb478d60512de29e4afc1c924b2f1b3aa" name="google-noto-sans-saurashtra-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="31bf9c29438de3caa8497bdbe3355b103574d9522e835e5d9d790886bab46e37" name="google-noto-sans-sharada-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="228767d569294c2b459fbdac8ec4d5516573fb4e89d2c34fdf1d0e1afde1b91d" name="google-noto-sans-shavian-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="99519df70a9b2a881e830b393df243873bc9ebe787829a1daec50295560cb4a5" name="google-noto-sans-siddham-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="eaf98f51b87e4d03df34861f80d5ac18ecd4fe3b6dfe89238ce1638efa193f03" name="google-noto-sans-signwriting-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="44d25581af68d2a1154f56344013ba3cb61797888275a063ed3ae34d783df39b" name="google-noto-sans-sinhala-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="29f5c30762df1dd3d12c612a7620dbcd8db945fd7b3a827d24f773f7e1034323" name="google-noto-sans-sinhala-ui-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="021a617d059a36e055c1a702c06006ef3a5b4d4c20ef5597ab2b30ad9e441048" name="google-noto-sans-sinhala-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="553d33000117e28df2395230fe3645c429f3780815ddefb49392d95861189bc2" name="google-noto-sans-sogdian-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2441f28329e493d74fc9a641541f3884032eca8e3a3ace169e96146aef423dad" name="google-noto-sans-sora-sompeng-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a016a6f67ba92364216080ff2bffeeace05dc3d25c2b8ef23690f2615adb5c20" name="google-noto-sans-sora-sompeng-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="73585e0ce2b363ce1c87c254b18dc38896c3d41ea46e93e2908f80f0e34114e3" name="google-noto-sans-soyombo-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="510ad1ef1b5a9bc218428e66b56de659d5526a56b66ad3511caed61b0763d845" name="google-noto-sans-sundanese-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="48a76608f364f77b1ceeadf7361e96ebf4e62a0b03fef1c9b41dbb04de2ef622" name="google-noto-sans-sundanese-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="de201d49751796cf6ad3d0c8dfcdfc5af12659da8d556e77e87ba7f27e168263" name="google-noto-sans-syloti-nagri-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="002e2a45665638be4d7f21948efa4e97df449945735e13d1ec05bfd3bd7a84f6" name="google-noto-sans-symbols-2-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="82e82561ee6b328b2c64ef7f4b37ca68ac840de98081388a400dc02fd5d5c21d" name="google-noto-sans-symbols-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3f6c4a18b293f27ecb7cf306fe38517c81b9af9a17884e160680172b92da413b" name="google-noto-sans-symbols-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e67489bab0b37da294345fba83aa0cbcb28d9ccbc5dc6d91a62e8a27376401cc" name="google-noto-sans-syriac-eastern-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5a2f2430534985b05cfadeeedd4989bbfb9c8ffa8c2fc956d5591657fa35cb59" name="google-noto-sans-syriac-eastern-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f39bab5c8d6ca4602396c17f95fb68e38440e710ab8bbb3e7e7ad24414da0c6e" name="google-noto-sans-syriac-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f261177ef636d59471aa01f99da6346b5f265ed40f16f2964ce539f79829db2f" name="google-noto-sans-syriac-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7beb25256d958f8543e19a05f020e53ce8539cf9fd30c7f0c18f69e5c403a5fb" name="google-noto-sans-syriac-western-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3fcdff34d169dc1f51df25c07e5fb75876bfdca499aacd6f51934d48b649bd85" name="google-noto-sans-syriac-western-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c86da1cdc53aefd21aed55479de4a4bee7f20bf5d720548bafe944400670af22" name="google-noto-sans-tagalog-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9a3cefdb3c4f25ef28803403864b6f7a14d3f57bfba97b011931219f8e636d67" name="google-noto-sans-tagbanwa-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b32cab7fb7116e9d620afcb87cbbf3b1a31402c538f8656b6f3cd7632cbe75b9" name="google-noto-sans-tai-le-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8c3686d01afcd659900b82e58054cf3ed43499e10501214cb775945dcf5cf649" name="google-noto-sans-tai-tham-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dac893ce11c9259ebf6103412782f6c9c0caac494cdc79da6f85bb748eb010f0" name="google-noto-sans-tai-tham-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="494a97cacdb98e23816b58e2abe61bd13d5e964fc29e2572ea1088b129a78fd5" name="google-noto-sans-tai-viet-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="10194c320e37423dbf567a3eb1d42fec8dd2c46275693fbaba233de6158cf591" name="google-noto-sans-takri-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="98bc6d61a4af2644ab7b1dc28abdf502334417d2430600918bb7e02ba46512d7" name="google-noto-sans-tamil-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="11f9f021c1cc6cc16f8a21e0d4649686edffcdb21f39dc6e6e277ba59985af7c" name="google-noto-sans-tamil-supplement-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="792338bf1d0aed7e5dec0b0ea8af204f49c587f1c5dbf8ae49652c9b1d5b6967" name="google-noto-sans-tamil-ui-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="df02b4ea23f2de753d0301bbf785e765856df84ca7f1e359d42e099cdc8169de" name="google-noto-sans-tamil-ui-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dfcf36b0d858d797ce4b0b5e9650119e4e2ef43ce58b764d2e30db89884c2418" name="google-noto-sans-tamil-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bbc82c3c4013cdc49854a7dbc7242ddaabcb42bc48fa3019ded10806b785d3ec" name="google-noto-sans-tangsa-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="04fe3bbacdebe3e7b20487ffd54572794f10737e34a07ddba35a85abc0e5aa3b" name="google-noto-sans-tangsa-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3db2dd4cc5b1eeb6bb86bf671217cf1db6a670022f40b28c790992f1c5a87c08" name="google-noto-sans-telugu-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="132b52092bca03de7e78512d108c2989678402a6c50659b40319ae80deeeb6a8" name="google-noto-sans-telugu-ui-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d2f00ed25207a9e29668c86830644ef2cf16bf10524f64f29c63c2bef50d6f7b" name="google-noto-sans-telugu-ui-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ef1ea6932126ffdbdebb1f8198a739795a6b9112aed1ede33008dbf466b2decf" name="google-noto-sans-telugu-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2096ca9483f201ba57103c7ebc264496e52cc81b39c6f3ad0a4a6b8f89b5da79" name="google-noto-sans-thaana-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1444f6dfc83d5913226998aa53e3119619af3fa991a3e0b229db57630dd4ed71" name="google-noto-sans-thaana-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="11300ddbbb9c5c877dcf7b579fff0d30799318c000bd84685b0b82eed959be5b" name="google-noto-sans-thai-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="023af62d6b18eb1db4de65063f0977b3a151968aa5cd200149a6bf11ca107bd3" name="google-noto-sans-thai-looped-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d37e5f88e567494b8df696b6ab1b30143626f2fb7d5352ba8a1ab8bb6b211070" name="google-noto-sans-thai-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2a5660b0a608acafc0ca1f2d7e06df0364c06d8592bbff39ce825eb05e257c5f" name="google-noto-sans-tifinagh-adrar-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4854be5a83cdf97678fcab87486ebbed90dabffc6032cddd5b56f81776ff0c58" name="google-noto-sans-tifinagh-agraw-imazighen-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9c2fc4d9615e4918b67eef7f4759f73118e5740921fdeffc0d9fc4ec57c1b2e2" name="google-noto-sans-tifinagh-ahaggar-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0f010a301839115977121a2d4ca626e2015b55e2b8352f1c01074eac0533229d" name="google-noto-sans-tifinagh-air-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c5f8789409b14427170a54c75d46c4f93c99b94c124398a6d27c6a678552866d" name="google-noto-sans-tifinagh-apt-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="912533cab19ac64c1f1465125dfe7ea34dd31227cfdf60d2935bada863405423" name="google-noto-sans-tifinagh-azawagh-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="253b8db4de2e6af43921570100e369ddf31c1fab8eaa3d7f73130861fece39b5" name="google-noto-sans-tifinagh-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2d25040c8fe24116e5d853d7be71f7ce0a92d986f9136fe455012c334c57a3bf" name="google-noto-sans-tifinagh-ghat-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ca98e7565503c709e06404d697b781dac4b11db4763d7fba0883b9dd9efe3f6c" name="google-noto-sans-tifinagh-hawad-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5b8fa412cb7e6804858841d7c4b79b1dfbb887d142142f9708e2b3a25da36b86" name="google-noto-sans-tifinagh-rhissa-ixa-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="94e21334f056cec39cee0a3f4e0992a7766bfc6cd8ba9fafb67894546e69a45b" name="google-noto-sans-tifinagh-sil-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a9fdec72e6832c00846b5f4c4bc13f12f8ff428e08ee720c5e84821950c274b5" name="google-noto-sans-tifinagh-tawellemmet-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="43199b0eacbd68b07ecc045606f8be4a6bd19ead14fde0638770b69c97dfa261" name="google-noto-sans-tirhuta-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c6a041b5b09a5d1c0071e0273d82a011af9adcc497ea62051c158538c2023e45" name="google-noto-sans-ugaritic-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ffd81114f93229926e3251dad8f724d093efd90e9ada5df900249d6311ddfdb9" name="google-noto-sans-vai-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="865a82c575a9c3a9a18522524c05aefd1981bfe558930dcb0102dc1665fc4723" name="google-noto-sans-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="600bb89b42d2480e53a6fc4cee28c6ddc1b930b7f9740194c9b86b7dffdfef54" name="google-noto-sans-vithkuqi-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3129d39026d64982fa6c71598a66558c287de4c26e0568691db42044ec6903bf" name="google-noto-sans-vithkuqi-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="82c08e6e6ca5a4a01891d0f143708bea561127246110fcdd2c03d48039857717" name="google-noto-sans-wancho-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="51778b645c4b92ef434148c607ea34d5f7a6e5d03b6d1cd9c32b4ba242fb7d18" name="google-noto-sans-warang-citi-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="90312dde5534306d623c4555083e517b88c1057612d58eeb0c8006228f4dcc0e" name="google-noto-sans-yi-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4047f34ba1c33e719d9c2c007c804385b98df71cf05da70fcae446fc467e1db1" name="google-noto-sans-zanabazar-square-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c493225ecfb81edbd60cbf30528da4558ee49e267dc16a94a90b5617fcfdad46" name="google-noto-serif-ahom-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4ec8735cc26f21274e6fe2bd70283bfff96921dc262c79488bdc8fbb0e3f38f4" name="google-noto-serif-armenian-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="24e09bdf77e06dc06797f0c91ea5e03d83d8c72c4d2ca66b9a433c7bb4e9918c" name="google-noto-serif-armenian-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="61db6977bfd931ebdd0638466a6b0c86260869c23a142cf70cb28552527cacad" name="google-noto-serif-balinese-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6ebff5610b10b766ce99bae1735dad55593daa8bdc2e5c688785d93e09c5b820" name="google-noto-serif-bengali-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="68d26f816f236f50e949be1472556888ec2fe8ee4ff176a213c7dacf91f551cc" name="google-noto-serif-bengali-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7a256ae369d1e82d60e6b927df9a330e18c18c3d95026446f332ee4669b29378" name="google-noto-serif-cjk-vf-fonts" arch="noarch">
  <version epoch="1" ver="2.002" rel="6.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1:2.001-1" date="1675425600">- Initial Packaging
- Migrate to SPDX license</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1:2.001-2" date="1683201600">- Fix obsoletes_serif macro (rhbz #2190290)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.001-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1:2.002-1" date="1692705600">- Update to 2.002</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1:2.002-2" date="1696939200">- Drop some Conflicts from the Noto Serif CJK fonts</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.002-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.002-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.002-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.002-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cacc8bbfc0c5da8c0863bb0637c6ea918f502395f4d6a5bfadc9526fefadd4c6" name="google-noto-serif-devanagari-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="179663d520e2792a551526f556ee7bb9e510d37808b517115ec2114ffcaa974a" name="google-noto-serif-devanagari-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="59cbb53f4d0a3ee705ebd759235ef73bc85a333597dfb2d17817fb3bbef44e01" name="google-noto-serif-dives-akuru-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="94b9da250e333a6b44da537783ebafeedb7b6ba01875cb29e610874e63ed3cdc" name="google-noto-serif-dogra-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7dfb24e620def8674b32596083e97da59009d7019991f60b7f1a177f06fc413b" name="google-noto-serif-ethiopic-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="08e8d8c9859228f3045f20d7f0a459ca4c88abd831224aedaa79638d51e9afb9" name="google-noto-serif-ethiopic-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="682ce964937e7f301c3e810be16f9c4a44de8bbeb56cb1d06ee083d7ed111079" name="google-noto-serif-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c9d7325a28fe3317713878f1ef1d7f6c6087ed7e4fb2557bbda519a1672bcd4d" name="google-noto-serif-georgian-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="33dea8c7b76290d1f1338828f6aed1b707fee9e4b7cd63408ef9806e68457b59" name="google-noto-serif-georgian-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9ba6bd1d1dc1f1baafb282514d99bab4c475daf92a62bf5bd78db63287b271f9" name="google-noto-serif-grantha-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5b21350bc048631dd4998026e8c433b4a84f132cd5ffc4229249124d7356b5c4" name="google-noto-serif-gujarati-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8f6c595d3e7f2e9512b18b070ffb83efe32943eaa66dd4456d9ed1c9f0346ecd" name="google-noto-serif-gujarati-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7f8fa4ceda07e6b8838f3b0f15e42af81475a8c7d53ba9f4ecad1ee576aa05f0" name="google-noto-serif-gurmukhi-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="04d5dd0a61cf2adbec568f7bcf9ca233cff0b37f9077d7a4eeea4bec5031f8e8" name="google-noto-serif-gurmukhi-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="019c2774310c941367fcfe7b1e25ec3e20eec675f0ca3ceee98bccc82359b823" name="google-noto-serif-hebrew-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="69b4f9030e6b3686004b59d3c88dc058b53c080f1a63f1f718a52f679b193c31" name="google-noto-serif-hebrew-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d06b45574e3b14b787b9901a6bcf62f57043a67e894e69e5c60891eb29dcb2fd" name="google-noto-serif-kannada-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="69f779e70617634ca8bf31b8bee10450c576e8de8cc43f60088fd7c8b4a2e9b3" name="google-noto-serif-kannada-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cd4db7a3e6cc1a6e20f79b9f8307c99db2291fdeda94cf426257a55abcbe98ec" name="google-noto-serif-khitan-small-script-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2f497be13c1f93b11b0c7298d7c246ce0c4e3f5ca5f7cb083f25e20b028375b3" name="google-noto-serif-khmer-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c97089e17928718912292676283980bf7eb1ac291c66c64f6056915c97bd6398" name="google-noto-serif-khmer-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4a63df96813790a35ab697a5405f5184533198b5dcbea9befd70bb6b98c12c43" name="google-noto-serif-khojki-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e2f2135b4cd1474b5843f3c89e6448a4762f9f49a661b48565829850a350d851" name="google-noto-serif-khojki-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="71ef027615b9743e35439a014cc06d32212ab0092218f66a495ed55f09f79318" name="google-noto-serif-lao-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4ccbd7a1e165e50779e8bb713df28c121e0684c7ff4b75b5d387b51430dd4185" name="google-noto-serif-lao-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7feca1c2137d26a7fd3bfb28cf8652cd6e4f3bec443ca36e1cd3585f294d2d5e" name="google-noto-serif-makasar-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1ec3beea8eace77a6d35232a4749b2b65bf3a5a56f7db6e705fcf52e1d5b9b4e" name="google-noto-serif-malayalam-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="758b8ea319bf5fcbbf2a47cd472b8e074f11f59956cb6040e8643d211b2b179d" name="google-noto-serif-malayalam-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="19cdbdfe957488b985188e8a7278884b5bc33a1913afbd7645620f7ebe5868c9" name="google-noto-serif-myanmar-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="da200fe908a051197b8b9d42f08f49a2d8b5ba723c57f661515334b703fc8b71" name="google-noto-serif-myanmar-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f7a41dfdb1f805710d4471932b66cd953b9e567f62ede1f3b792e13993da591b" name="google-noto-serif-np-hmong-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a332739a9381ceadc6a5d55844a5e15248e2bcfe71f1d1395d782bae8cc362e7" name="google-noto-serif-np-hmong-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9bd6b6ebc9b5e26c7223299898ddf1b6a1b3ba9071d02275f6884b66828fa9b1" name="google-noto-serif-old-uyghur-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="43872f9ade06059642f633b86c5c06743bbc394a6cc512a4d576ce42f027d4ae" name="google-noto-serif-oriya-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c69a671a9bd919ce4b1278ffda874eb76650bd396aca9e25fdc2d93a991128f7" name="google-noto-serif-oriya-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2885e10b2d072f83ddd34a4d133520bbc7ef79578d2d1588533521e59dbd1fb5" name="google-noto-serif-ottoman-siyaq-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3820d451639354c2f1cb59c89bf123c6fcd867879dad6b61c95f0b77968ff8d4" name="google-noto-serif-sinhala-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1aa611f70042ae76f54747176019fe0c7cacacb35fe235826665850c83ced8a3" name="google-noto-serif-sinhala-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6fcb021238afb5cae75f630e5326114913a96f4c72b7c7b13e8db172ff3c8da4" name="google-noto-serif-tamil-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ad46f2072d919e50de2b3fc77229ca4978b43097b654fff5caf21a62b42d5ae5" name="google-noto-serif-tamil-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="be00f422b2d8385a9c5d83f1ae56a12ccbecade14b9f527d1b673dd62e47e4c6" name="google-noto-serif-tangut-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b28f99c29598d62e186f6e3ce5616e8c39017ba4b64c9dc4b2a6950389e84e41" name="google-noto-serif-telugu-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="203a13429137650e011ae9f96b74238269b2af4c5691d34d5472a9119b2ca175" name="google-noto-serif-telugu-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="938cc30e4d7f0f8d113a0d283383e0042227b6b7ef66226ff49d80bb4ae11894" name="google-noto-serif-thai-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ac9f5c2eabba8b7e63cad181de9082c881d5298b0656bd95aa9a68ed36582d0e" name="google-noto-serif-thai-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5025b93f8b22d9e3f2c1aa457526e1a9bfbe5b2ecb31ef3d39afcaa1f2310529" name="google-noto-serif-tibetan-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5206921561cc6681b9cddffb9d61a21455300e452e513b4295f853111af0bd86" name="google-noto-serif-tibetan-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="52cb9a5ba5d66384999f2d3fb3fd599e2d10dca56e02a438889f643e9aba3473" name="google-noto-serif-toto-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="547bb34a9e448571cab8951da916031c00083c3badf62e048ff26c2723d3f6d8" name="google-noto-serif-toto-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="312eac38532ae46b220c7627d2a44a6d2bfc55c546fcd93d48b1709d65657e2b" name="google-noto-serif-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e47fbf885e286a3ea9530e458557afdaabfc799f3ca23d5fc223f84a4e50bb08" name="google-noto-serif-vithkuqi-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="01f3cc484e059ec2ed1d7d37316a63d3d8edb40db09db97756199bc6578d41d5" name="google-noto-serif-vithkuqi-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0db397255a1e9c2f328e0e2aa3e6639aeac590552ed39b343f2c4934f2b5f68c" name="google-noto-serif-yezidi-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a6f65ca36fb3615ed9b50163f8224bd412b093c7c046fb2ea40127880233021b" name="google-noto-serif-yezidi-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="af17dd57bb41235fd37a351646aab554cf8de18dec4fff6c43c85758b1432980" name="google-noto-traditional-nushu-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bb9c123bf0b306e34499816cec4643d935e26a66ca64a83fa62cca308f7d53b7" name="google-noto-traditional-nushu-vf-fonts" arch="noarch">
  <version epoch="0" ver="20240401" rel="5.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240101-4" date="1706702400">- Updates to monthly release of 24.1.1
- Remove substitute config for Symbol.
  Resolves: rhbz#2259962</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-1" date="1707480000">- Updates to monthly release of 24.2.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240201-2" date="1708516800">- Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
  Resolves: rhbz#2265259</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-1" date="1709899200">- Updates to monthly release of 24.3.1</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-2" date="1710158400">- Add Obsoletes: google-noto-looped-thai-fonts in google-noto-sans-thai-looped-fonts.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240301-3" date="1711022400">- Add google-noto-fonts-all, google-noto-fonts-all-vf, and
  google-noto-fonts-all-static meta packages.</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20240401-1" date="1712232000">- Updates to monthly release of 24.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOh &lt;tagoh@redhat.com&gt; - 20240401-4" date="1723809600">- Fix a typo in config.
- Rename google-noto-sans-symbols2-fonts to google-noto-sans-symbols-2-fonts
- Rename google-noto-sans-meeteimayek-vf-fonts to google-noto-sans-meetei-mayek-vf-fonts
  Resolves: RHEL-47289</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt;" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ee265e62b8a2fecf77808c20b93d881f014ae7061bf97415860427f081e96002" name="google-roboto-slab-fonts" arch="noarch">
  <version epoch="0" ver="1.100263" rel="0.25.20150923git.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.100263-0.19.20150923git" date="1669896000">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.100263-0.20.20150923git" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.100263-0.21.20150923git" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.100263-0.22.20150923git" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.100263-0.23.20150923git" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.100263-0.24.20150923git" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.100263-0.25.20150923git" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9478f548f51c1f1cb70c4831c647edc5c9752cd8e91be3791e591184bcfe319c" name="gperf" arch="x86_64">
  <version epoch="0" ver="3.1" rel="21.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-15" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 3.1-16" date="1681300800">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-17" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-18" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-19" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1-20" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fe605aae10673133e5f8bec68309db6dade4429547b7e6940ac1e6f80e7881d8" name="gpgme" arch="x86_64">
  <version epoch="0" ver="1.23.2" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.22.0-1" date="1696939200">- updated to 1.22.0</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.22.0-2" date="1697025600">- add tarball signature verification</changelog>
  <changelog author="Marie Loise Nolden &lt;loise@kde.org&gt; - 1.23.2-1" date="1705147200">- Update to 1.23.2</changelog>
  <changelog author="Marie Loise Nolden &lt;loise@kde.org&gt; - 1.23.2-2" date="1705147201">- add signature file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Evgeny Fedin &lt;efedin@redhat.com&gt; - 1.23.2-5" date="1721995200">- Related: RHELMISC-3914 - add gating.yaml file</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.23.2-6" date="1722859200">- fix static analysis findings (RHEL-44568)</changelog>
  <changelog author="Evgeny Fedin &lt;efedin@redhat.com&gt; - 1.23.2-7" date="1723118400">- Related: RHELMISC-3914 - fix plan definition</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.2-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="ed3548195cfaa37804333a45dedc975e1c7e595c3f6c744dd7b77b6e1c4e9dc6" name="gpgme-devel" arch="x86_64">
  <version epoch="0" ver="1.23.2" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.22.0-1" date="1696939200">- updated to 1.22.0</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.22.0-2" date="1697025600">- add tarball signature verification</changelog>
  <changelog author="Marie Loise Nolden &lt;loise@kde.org&gt; - 1.23.2-1" date="1705147200">- Update to 1.23.2</changelog>
  <changelog author="Marie Loise Nolden &lt;loise@kde.org&gt; - 1.23.2-2" date="1705147201">- add signature file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Evgeny Fedin &lt;efedin@redhat.com&gt; - 1.23.2-5" date="1721995200">- Related: RHELMISC-3914 - add gating.yaml file</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.23.2-6" date="1722859200">- fix static analysis findings (RHEL-44568)</changelog>
  <changelog author="Evgeny Fedin &lt;efedin@redhat.com&gt; - 1.23.2-7" date="1723118400">- Related: RHELMISC-3914 - fix plan definition</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.2-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="0c760bcca8a16e1bb1df668c7db51d49fa43756c01d3dcf08c090ac53dca5964" name="gpgmepp" arch="x86_64">
  <version epoch="0" ver="1.23.2" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.22.0-1" date="1696939200">- updated to 1.22.0</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.22.0-2" date="1697025600">- add tarball signature verification</changelog>
  <changelog author="Marie Loise Nolden &lt;loise@kde.org&gt; - 1.23.2-1" date="1705147200">- Update to 1.23.2</changelog>
  <changelog author="Marie Loise Nolden &lt;loise@kde.org&gt; - 1.23.2-2" date="1705147201">- add signature file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Evgeny Fedin &lt;efedin@redhat.com&gt; - 1.23.2-5" date="1721995200">- Related: RHELMISC-3914 - add gating.yaml file</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.23.2-6" date="1722859200">- fix static analysis findings (RHEL-44568)</changelog>
  <changelog author="Evgeny Fedin &lt;efedin@redhat.com&gt; - 1.23.2-7" date="1723118400">- Related: RHELMISC-3914 - fix plan definition</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.2-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="2d08e0d4bc635819e45062bfe8b3cba1fe394f57b0493ea3d6237cd9b957bc6f" name="gpgmepp-devel" arch="x86_64">
  <version epoch="0" ver="1.23.2" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.22.0-1" date="1696939200">- updated to 1.22.0</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.22.0-2" date="1697025600">- add tarball signature verification</changelog>
  <changelog author="Marie Loise Nolden &lt;loise@kde.org&gt; - 1.23.2-1" date="1705147200">- Update to 1.23.2</changelog>
  <changelog author="Marie Loise Nolden &lt;loise@kde.org&gt; - 1.23.2-2" date="1705147201">- add signature file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Evgeny Fedin &lt;efedin@redhat.com&gt; - 1.23.2-5" date="1721995200">- Related: RHELMISC-3914 - add gating.yaml file</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.23.2-6" date="1722859200">- fix static analysis findings (RHEL-44568)</changelog>
  <changelog author="Evgeny Fedin &lt;efedin@redhat.com&gt; - 1.23.2-7" date="1723118400">- Related: RHELMISC-3914 - fix plan definition</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.2-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="124104c2ad8403810d67a6a9bfcb08491989713d81a4941b2913bfe4cf088352" name="gpsd" arch="x86_64">
  <version epoch="1" ver="3.26.1" rel="3.el10"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.25-11" date="1708430400">- internalize scons (RHEL-14750)
- add missing IPv6 support
- add note about limited Red Hat support
- drop unneeded API-compatibility patch
- fix busy wait when reading from gpsd socket
- fix some issues reported by coverity and shellcheck</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.25-12" date="1713182400">- rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.25-13" date="1713268800">- fix dependencies for build without libs</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.25-14" date="1713873600">- fix annobin coverage (RHEL-33496)
- add conflicts for gpsd-minimal (RHEL-33651)
- drop compat subpackage (RHEL-33651)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.25-15" date="1714046400">- fix icon path in desktop files (RHEL-34158)
- replace gpsd-minimal conflicts with obsoletes (RHEL-33651)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:3.25-16" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:3.25-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-1" date="1748520000">- update to 3.26.1 (RHEL-94234)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-2" date="1759320000">- add support note to package descriptions (RHEL-113507)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-3" date="1768824000">- fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
- fix integer underflow in handling of Navcom packets (CVE-2025-67269)</changelog>
</package>
<package pkgid="b49eafe49626f673ea84b9eed60eff7468c85613ca527d5ff5de63de8ca68fe5" name="gpsd" arch="x86_64">
  <version epoch="1" ver="3.26.1" rel="3.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:3.25-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-1" date="1748520000">- update to 3.26.1 (RHEL-94234)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-2" date="1759320000">- add support note to package descriptions (RHEL-113507)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-3" date="1768824000">- fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
- fix integer underflow in handling of Navcom packets (CVE-2025-67269)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-3.el10_2.1" date="1783944000">- fix command injection in gpsprof (CVE-2026-58459)</changelog>
</package>
<package pkgid="3f27ee4cb6ab53459b10368dfff87a135e92a9086b1796905b5a4e8e0db9be86" name="gpsd-clients" arch="x86_64">
  <version epoch="1" ver="3.26.1" rel="3.el10"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.25-11" date="1708430400">- internalize scons (RHEL-14750)
- add missing IPv6 support
- add note about limited Red Hat support
- drop unneeded API-compatibility patch
- fix busy wait when reading from gpsd socket
- fix some issues reported by coverity and shellcheck</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.25-12" date="1713182400">- rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.25-13" date="1713268800">- fix dependencies for build without libs</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.25-14" date="1713873600">- fix annobin coverage (RHEL-33496)
- add conflicts for gpsd-minimal (RHEL-33651)
- drop compat subpackage (RHEL-33651)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.25-15" date="1714046400">- fix icon path in desktop files (RHEL-34158)
- replace gpsd-minimal conflicts with obsoletes (RHEL-33651)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:3.25-16" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:3.25-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-1" date="1748520000">- update to 3.26.1 (RHEL-94234)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-2" date="1759320000">- add support note to package descriptions (RHEL-113507)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-3" date="1768824000">- fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
- fix integer underflow in handling of Navcom packets (CVE-2025-67269)</changelog>
</package>
<package pkgid="f4e8d9b53818a9a3c29ba5c434845c8f44f7db2ec40a751a7e5ce1c3ad98ca33" name="gpsd-clients" arch="x86_64">
  <version epoch="1" ver="3.26.1" rel="3.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:3.25-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-1" date="1748520000">- update to 3.26.1 (RHEL-94234)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-2" date="1759320000">- add support note to package descriptions (RHEL-113507)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-3" date="1768824000">- fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
- fix integer underflow in handling of Navcom packets (CVE-2025-67269)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-3.el10_2.1" date="1783944000">- fix command injection in gpsprof (CVE-2026-58459)</changelog>
</package>
<package pkgid="f97e09958c2ef030745c161637f70748c80ad8e808bae9ad88872dd7fa9b035a" name="gpsd-xclients" arch="x86_64">
  <version epoch="1" ver="3.26.1" rel="3.el10"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.25-11" date="1708430400">- internalize scons (RHEL-14750)
- add missing IPv6 support
- add note about limited Red Hat support
- drop unneeded API-compatibility patch
- fix busy wait when reading from gpsd socket
- fix some issues reported by coverity and shellcheck</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.25-12" date="1713182400">- rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.25-13" date="1713268800">- fix dependencies for build without libs</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.25-14" date="1713873600">- fix annobin coverage (RHEL-33496)
- add conflicts for gpsd-minimal (RHEL-33651)
- drop compat subpackage (RHEL-33651)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.25-15" date="1714046400">- fix icon path in desktop files (RHEL-34158)
- replace gpsd-minimal conflicts with obsoletes (RHEL-33651)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:3.25-16" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:3.25-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-1" date="1748520000">- update to 3.26.1 (RHEL-94234)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-2" date="1759320000">- add support note to package descriptions (RHEL-113507)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-3" date="1768824000">- fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
- fix integer underflow in handling of Navcom packets (CVE-2025-67269)</changelog>
</package>
<package pkgid="04c43972f9b47b5fc38eefbdc71d04d467f12886251fc2b7666eb513acf9b5c1" name="gpsd-xclients" arch="x86_64">
  <version epoch="1" ver="3.26.1" rel="3.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:3.25-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-1" date="1748520000">- update to 3.26.1 (RHEL-94234)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-2" date="1759320000">- add support note to package descriptions (RHEL-113507)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-3" date="1768824000">- fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
- fix integer underflow in handling of Navcom packets (CVE-2025-67269)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1:3.26.1-3.el10_2.1" date="1783944000">- fix command injection in gpsprof (CVE-2026-58459)</changelog>
</package>
<package pkgid="8bd8e0347da5696ce67c4a94d604a7fc6132bc67828e087afd8ce1e3d24721ce" name="grafana" arch="x86_64">
  <version epoch="0" ver="10.2.6" rel="26.el10_2"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 10.2.6-14" date="1738152000">- Resolves RHEL-75917: grafana selinux issue with autofs_t</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-15" date="1742904000">- Resolves RHEL-84627: CVE-2025-30204</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-16" date="1745928000">- Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-18" date="1747137600">- Resolves RHEL-89943: CVE-2025-4123</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-20" date="1750248000">- Resolves RHEL-97520: Rework grafana-selinux spec file sections
- Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-22" date="1764590400">- Resolves RHEL-125629: CVE-2025-58183
- Resolves RHEL-132756: Grafana-selinux prevents plugins from searching cgroups</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-23" date="1769428800">- Resolves RHEL-140516: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-24" date="1771243200">- Resolves RHEL-144949: CVE-2026-21721
- Resolves RHEL-145413: CVE-2025-61728
- Resolves RHEL-146073: CVE-2025-61726
- Resolves RHEL-149246: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-25" date="1775044800">- Resolves RHEL-158484: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-26" date="1776859200">- Resolves RHEL-161791: CVE-2026-27877
- Resolves RHEL-166459: CVE-2026-32282
- Resolves RHEL-167494: CVE-2026-32283</changelog>
</package>
<package pkgid="65e59c422b08d24fb14ef1deb48b2e8b565d04a5b3778449dd5a4921c704ebb6" name="grafana" arch="x86_64">
  <version epoch="0" ver="10.2.6" rel="27.el10_2"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-15" date="1742904000">- Resolves RHEL-84627: CVE-2025-30204</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-16" date="1745928000">- Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-18" date="1747137600">- Resolves RHEL-89943: CVE-2025-4123</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-20" date="1750248000">- Resolves RHEL-97520: Rework grafana-selinux spec file sections
- Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-22" date="1764590400">- Resolves RHEL-125629: CVE-2025-58183
- Resolves RHEL-132756: Grafana-selinux prevents plugins from searching cgroups</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-23" date="1769428800">- Resolves RHEL-140516: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-24" date="1771243200">- Resolves RHEL-144949: CVE-2026-21721
- Resolves RHEL-145413: CVE-2025-61728
- Resolves RHEL-146073: CVE-2025-61726
- Resolves RHEL-149246: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-25" date="1775044800">- Resolves RHEL-158484: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-26" date="1776859200">- Resolves RHEL-161791: CVE-2026-27877
- Resolves RHEL-166459: CVE-2026-32282
- Resolves RHEL-167494: CVE-2026-32283</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-27" date="1782907200">- Resolves: RHEL-183694: CVE-2026-39821</changelog>
</package>
<package pkgid="b30a27742641f4196a36644aea42f29005faf73e98ff40168739c22b3641ed85" name="grafana" arch="x86_64">
  <version epoch="0" ver="10.2.6" rel="28.el10_2.4"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-23" date="1769428800">- Resolves RHEL-140516: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-24" date="1771243200">- Resolves RHEL-144949: CVE-2026-21721
- Resolves RHEL-145413: CVE-2025-61728
- Resolves RHEL-146073: CVE-2025-61726
- Resolves RHEL-149246: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-25" date="1775044800">- Resolves RHEL-158484: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-26" date="1776859200">- Resolves RHEL-161791: CVE-2026-27877
- Resolves RHEL-166459: CVE-2026-32282
- Resolves RHEL-167494: CVE-2026-32283</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-27" date="1782907200">- Resolves: RHEL-183694: CVE-2026-39821</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-28" date="1784721600">- Resolves RHEL-188282: Remove Lua ExclusiveArch macro for Konflux build</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-28.1" date="1785931200">- Resolves RHEL-211389: CVE-2026-33382</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-28.2" date="1785931201">- Resolves RHEL-210981: CVE-2026-33376</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-28.3" date="1785931202">- Resolves RHEL-211376: CVE-2026-8609</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-28.4" date="1786017600">- Resolves RHEL-211020: CVE-2026-33377</changelog>
</package>
<package pkgid="dad7598f4e59e25a5c3f8870422a395da55d97a4ef68ea1ca962c2544243742e" name="grafana" arch="x86_64">
  <version epoch="0" ver="10.2.6" rel="28.el10_2.5"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-24" date="1771243200">- Resolves RHEL-144949: CVE-2026-21721
- Resolves RHEL-145413: CVE-2025-61728
- Resolves RHEL-146073: CVE-2025-61726
- Resolves RHEL-149246: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-25" date="1775044800">- Resolves RHEL-158484: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-26" date="1776859200">- Resolves RHEL-161791: CVE-2026-27877
- Resolves RHEL-166459: CVE-2026-32282
- Resolves RHEL-167494: CVE-2026-32283</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-27" date="1782907200">- Resolves: RHEL-183694: CVE-2026-39821</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-28" date="1784721600">- Resolves RHEL-188282: Remove Lua ExclusiveArch macro for Konflux build</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-28.1" date="1785931200">- Resolves RHEL-211389: CVE-2026-33382</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-28.2" date="1785931201">- Resolves RHEL-210981: CVE-2026-33376</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-28.3" date="1785931202">- Resolves RHEL-211376: CVE-2026-8609</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-28.4" date="1786017600">- Resolves RHEL-211020: CVE-2026-33377</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-28.5" date="1788177600">- Rebuild against updated golang
- Resolves RHEL-241197
- Resolves RHEL-241426
- Resolves RHEL-241690
- Resolves RHEL-241975
- Resolves RHEL-242171
- Resolves RHEL-242372
- Resolves RHEL-251690
- Resolves RHEL-251818</changelog>
</package>
<package pkgid="5abd789e7a45d2f7aca993f0963796f056fe3471f613db7eba697c0a441b9107" name="grafana-pcp" arch="x86_64">
  <version epoch="0" ver="5.3.0" rel="5.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.1-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.2.1-1" date="1731326400">- Resolves RHEL-67043: update to 5.2.0/1 tagged upstream community sources, see CHANGELOG
- Resolves RHEL-16337: added PCP Vector Top Consumers dashboard in new release</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.2.2-1" date="1732622400">- Resolves RHEL-67043: update to 5.2.2 tagged upstream community sources, see CHANGELOG</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.org&gt; - 5.2.2-2" date="1733227200">- Remove visualizations for proc.hog.net and proc.hog.disk while they do not work via pmproxy</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.org&gt; - 5.2.2-3" date="1749556800">- Resolves RHEL-89218: CVE-2025-22871</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.org&gt; - 5.3.0-1" date="1751976000">- update to 5.3.0 tagged upstream sources, see CHANGELOG</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.3.0-2" date="1769428800">- RHEL-140517: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.3.0-3" date="1771329600">- Resolves RHEL-146074: CVE-2025-61726
- Resolves RHEL-149247: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.3.0-4" date="1775044800">- Resolves RHEL-158485: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.3.0-5" date="1776859200">- Resolves RHEL-166460: CVE-2026-32282
- Resolves RHEL-167495: CVE-2026-32283</changelog>
</package>
<package pkgid="10e5bafdb7689892ab91b8a6d054a94a7270bac8e612a77c39c717cca077cc68" name="grafana-pcp" arch="x86_64">
  <version epoch="0" ver="5.3.0" rel="7.el10_2"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.2.2-1" date="1732622400">- Resolves RHEL-67043: update to 5.2.2 tagged upstream community sources, see CHANGELOG</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.org&gt; - 5.2.2-2" date="1733227200">- Remove visualizations for proc.hog.net and proc.hog.disk while they do not work via pmproxy</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.org&gt; - 5.2.2-3" date="1749556800">- Resolves RHEL-89218: CVE-2025-22871</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.org&gt; - 5.3.0-1" date="1751976000">- update to 5.3.0 tagged upstream sources, see CHANGELOG</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.3.0-2" date="1769428800">- RHEL-140517: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.3.0-3" date="1771329600">- Resolves RHEL-146074: CVE-2025-61726
- Resolves RHEL-149247: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.3.0-4" date="1775044800">- Resolves RHEL-158485: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.3.0-5" date="1776859200">- Resolves RHEL-166460: CVE-2026-32282
- Resolves RHEL-167495: CVE-2026-32283</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.3.0-6" date="1782216000">- Resolves RHEL-183688: CVE-2026-39821</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.3.0-7" date="1782907200">- Resolves RHEL-183688: CVE-2026-39821</changelog>
</package>
<package pkgid="94f09b14adab108e8cad2328521e09f89f8926cbdeac0a0478ca9440e2c3c299" name="grafana-pcp" arch="x86_64">
  <version epoch="0" ver="5.3.0" rel="8.el10_2.1"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.org&gt; - 5.2.2-3" date="1749556800">- Resolves RHEL-89218: CVE-2025-22871</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.org&gt; - 5.3.0-1" date="1751976000">- update to 5.3.0 tagged upstream sources, see CHANGELOG</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.3.0-2" date="1769428800">- RHEL-140517: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.3.0-3" date="1771329600">- Resolves RHEL-146074: CVE-2025-61726
- Resolves RHEL-149247: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.3.0-4" date="1775044800">- Resolves RHEL-158485: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.3.0-5" date="1776859200">- Resolves RHEL-166460: CVE-2026-32282
- Resolves RHEL-167495: CVE-2026-32283</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.3.0-6" date="1782216000">- Resolves RHEL-183688: CVE-2026-39821</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.3.0-7" date="1782907200">- Resolves RHEL-183688: CVE-2026-39821</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 5.3.0-8" date="1784721600">- Resolves RHEL-188287: Remove Lua ExclusiveArch macro for Konflux build</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 5.3.0-8.1" date="1788350400">- Rebuilt for updated golang
- Resolves RHEL-241480, RHEL-251115, RHEL-242257, RHEL-242154, RHEL-241751</changelog>
</package>
<package pkgid="1e237e4af1522bd832bb9c943c217922f93f3ad7bb44acdf70520abb52947d96" name="grafana-selinux" arch="x86_64">
  <version epoch="0" ver="10.2.6" rel="26.el10_2"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; - 10.2.6-14" date="1738152000">- Resolves RHEL-75917: grafana selinux issue with autofs_t</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-15" date="1742904000">- Resolves RHEL-84627: CVE-2025-30204</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-16" date="1745928000">- Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-18" date="1747137600">- Resolves RHEL-89943: CVE-2025-4123</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-20" date="1750248000">- Resolves RHEL-97520: Rework grafana-selinux spec file sections
- Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-22" date="1764590400">- Resolves RHEL-125629: CVE-2025-58183
- Resolves RHEL-132756: Grafana-selinux prevents plugins from searching cgroups</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-23" date="1769428800">- Resolves RHEL-140516: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-24" date="1771243200">- Resolves RHEL-144949: CVE-2026-21721
- Resolves RHEL-145413: CVE-2025-61728
- Resolves RHEL-146073: CVE-2025-61726
- Resolves RHEL-149246: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-25" date="1775044800">- Resolves RHEL-158484: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-26" date="1776859200">- Resolves RHEL-161791: CVE-2026-27877
- Resolves RHEL-166459: CVE-2026-32282
- Resolves RHEL-167494: CVE-2026-32283</changelog>
</package>
<package pkgid="2086ed80c5a6e23034428915dad804b3eb2f4a9993972add6eab7758661e560e" name="grafana-selinux" arch="x86_64">
  <version epoch="0" ver="10.2.6" rel="27.el10_2"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-15" date="1742904000">- Resolves RHEL-84627: CVE-2025-30204</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-16" date="1745928000">- Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-18" date="1747137600">- Resolves RHEL-89943: CVE-2025-4123</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-20" date="1750248000">- Resolves RHEL-97520: Rework grafana-selinux spec file sections
- Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-22" date="1764590400">- Resolves RHEL-125629: CVE-2025-58183
- Resolves RHEL-132756: Grafana-selinux prevents plugins from searching cgroups</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-23" date="1769428800">- Resolves RHEL-140516: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-24" date="1771243200">- Resolves RHEL-144949: CVE-2026-21721
- Resolves RHEL-145413: CVE-2025-61728
- Resolves RHEL-146073: CVE-2025-61726
- Resolves RHEL-149246: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-25" date="1775044800">- Resolves RHEL-158484: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-26" date="1776859200">- Resolves RHEL-161791: CVE-2026-27877
- Resolves RHEL-166459: CVE-2026-32282
- Resolves RHEL-167494: CVE-2026-32283</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-27" date="1782907200">- Resolves: RHEL-183694: CVE-2026-39821</changelog>
</package>
<package pkgid="33007450991ee611ad1dc61b0f9b852adebbbe91c61e07f08f7a6748d824b648" name="grafana-selinux" arch="x86_64">
  <version epoch="0" ver="10.2.6" rel="28.el10_2.4"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-23" date="1769428800">- Resolves RHEL-140516: CVE-2025-61729</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-24" date="1771243200">- Resolves RHEL-144949: CVE-2026-21721
- Resolves RHEL-145413: CVE-2025-61728
- Resolves RHEL-146073: CVE-2025-61726
- Resolves RHEL-149246: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-25" date="1775044800">- Resolves RHEL-158484: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-26" date="1776859200">- Resolves RHEL-161791: CVE-2026-27877
- Resolves RHEL-166459: CVE-2026-32282
- Resolves RHEL-167494: CVE-2026-32283</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-27" date="1782907200">- Resolves: RHEL-183694: CVE-2026-39821</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-28" date="1784721600">- Resolves RHEL-188282: Remove Lua ExclusiveArch macro for Konflux build</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-28.1" date="1785931200">- Resolves RHEL-211389: CVE-2026-33382</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-28.2" date="1785931201">- Resolves RHEL-210981: CVE-2026-33376</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-28.3" date="1785931202">- Resolves RHEL-211376: CVE-2026-8609</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-28.4" date="1786017600">- Resolves RHEL-211020: CVE-2026-33377</changelog>
</package>
<package pkgid="e79ea8bebc2697383f21584cac854b1d1f2c8c239bbf8d8a02ef7aaa12f61c01" name="grafana-selinux" arch="x86_64">
  <version epoch="0" ver="10.2.6" rel="28.el10_2.5"/>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-24" date="1771243200">- Resolves RHEL-144949: CVE-2026-21721
- Resolves RHEL-145413: CVE-2025-61728
- Resolves RHEL-146073: CVE-2025-61726
- Resolves RHEL-149246: CVE-2025-68121</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-25" date="1775044800">- Resolves RHEL-158484: CVE-2026-25679</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-26" date="1776859200">- Resolves RHEL-161791: CVE-2026-27877
- Resolves RHEL-166459: CVE-2026-32282
- Resolves RHEL-167494: CVE-2026-32283</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-27" date="1782907200">- Resolves: RHEL-183694: CVE-2026-39821</changelog>
  <changelog author="Sam Feifer &lt;sfeifer@redhat.com&gt; 10.2.6-28" date="1784721600">- Resolves RHEL-188282: Remove Lua ExclusiveArch macro for Konflux build</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-28.1" date="1785931200">- Resolves RHEL-211389: CVE-2026-33382</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-28.2" date="1785931201">- Resolves RHEL-210981: CVE-2026-33376</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-28.3" date="1785931202">- Resolves RHEL-211376: CVE-2026-8609</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-28.4" date="1786017600">- Resolves RHEL-211020: CVE-2026-33377</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 10.2.6-28.5" date="1788177600">- Rebuild against updated golang
- Resolves RHEL-241197
- Resolves RHEL-241426
- Resolves RHEL-241690
- Resolves RHEL-241975
- Resolves RHEL-242171
- Resolves RHEL-242372
- Resolves RHEL-251690
- Resolves RHEL-251818</changelog>
</package>
<package pkgid="4a68f428a1ecdedbcdefbdfd6f0560b8badae8bc612b4badeb11c4560db013cb" name="graphene" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.6-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.6-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e0969ae878cc2893583c7a0f7ef6c22e96257e97865f222d3030cbe103555341" name="graphene-devel" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.6-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.6-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e0ea3eaed97d1c8aae72985d5d5f03fac7884044a38a51229f68135f468e982a" name="graphene-tests" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.6-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.6-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3978de4b40cde3af551cad9d0308021299cd7441b9a5c7048aef9c06e06955c0" name="graphite2" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="17.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-11" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-12" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.3.14-13" date="1699272000">- Migrate to SPDX license expression
- Drop Netscape license reference as no test file using it in 1.3.x releases</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-14" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-15" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.14-16" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.14-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="13bec328713d60f8e22b45717061fa11c3459dcc831ebfdf16d32db4a54890f8" name="graphite2-devel" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="17.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-11" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-12" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.3.14-13" date="1699272000">- Migrate to SPDX license expression
- Drop Netscape license reference as no test file using it in 1.3.x releases</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-14" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-15" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.14-16" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.14-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d43f59fc4494fe733b6f5758de7a4898c64f4ac39b16b623e573f441d91dd0ec" name="graphviz" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="15.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.0.0-6" date="1703678400">- Use transaction file triggers to configure plugins</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 9.0.0-7" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-9" date="1706097600">- Converted license to SPDX</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-10" date="1706184000">- Added hpnd-uc license</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 9.0.0-11" date="1707652800">- Rebuild for golang 1.22.0</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-12" date="1715083200">- Dropped ocaml in RHEL&gt;9
  Resolves: RHEL-16474</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-13" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-14" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="896c52ed12cf8ec8b7b47d5c1cabe11c3e1233758ab6cd60e03a7aface33d4dc" name="graphviz-devel" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="15.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.0.0-6" date="1703678400">- Use transaction file triggers to configure plugins</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 9.0.0-7" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-9" date="1706097600">- Converted license to SPDX</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-10" date="1706184000">- Added hpnd-uc license</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 9.0.0-11" date="1707652800">- Rebuild for golang 1.22.0</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-12" date="1715083200">- Dropped ocaml in RHEL&gt;9
  Resolves: RHEL-16474</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-13" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-14" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9a80d5def47280bc3acb6dbe82f3ca3bd88ee9b699ea84046c332024a69aadac" name="graphviz-doc" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="15.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.0.0-6" date="1703678400">- Use transaction file triggers to configure plugins</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 9.0.0-7" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-9" date="1706097600">- Converted license to SPDX</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-10" date="1706184000">- Added hpnd-uc license</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 9.0.0-11" date="1707652800">- Rebuild for golang 1.22.0</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-12" date="1715083200">- Dropped ocaml in RHEL&gt;9
  Resolves: RHEL-16474</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-13" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-14" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cdce10dc75b22f69632c45a373eb272cbd4b244e070fc389fd40c431dd22b284" name="graphviz-gd" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="15.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.0.0-6" date="1703678400">- Use transaction file triggers to configure plugins</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 9.0.0-7" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-9" date="1706097600">- Converted license to SPDX</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-10" date="1706184000">- Added hpnd-uc license</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 9.0.0-11" date="1707652800">- Rebuild for golang 1.22.0</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-12" date="1715083200">- Dropped ocaml in RHEL&gt;9
  Resolves: RHEL-16474</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-13" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-14" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fd22f343cb4e0a213e77ede9f9e09cfe88011c599326be3b7f5d876593f8eefd" name="graphviz-go" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="15.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.0.0-6" date="1703678400">- Use transaction file triggers to configure plugins</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 9.0.0-7" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-9" date="1706097600">- Converted license to SPDX</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-10" date="1706184000">- Added hpnd-uc license</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 9.0.0-11" date="1707652800">- Rebuild for golang 1.22.0</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-12" date="1715083200">- Dropped ocaml in RHEL&gt;9
  Resolves: RHEL-16474</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-13" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-14" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4d3d449f558a6ef849eb7ab65a13833191beb20ec5d0118488375746007e882a" name="graphviz-graphs" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="15.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.0.0-6" date="1703678400">- Use transaction file triggers to configure plugins</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 9.0.0-7" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-9" date="1706097600">- Converted license to SPDX</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-10" date="1706184000">- Added hpnd-uc license</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 9.0.0-11" date="1707652800">- Rebuild for golang 1.22.0</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-12" date="1715083200">- Dropped ocaml in RHEL&gt;9
  Resolves: RHEL-16474</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-13" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-14" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4fa77faea04869901dae03df963efe012b5a43e971793c9de8e61e70aa99a3a3" name="graphviz-java" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="15.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.0.0-6" date="1703678400">- Use transaction file triggers to configure plugins</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 9.0.0-7" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-9" date="1706097600">- Converted license to SPDX</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-10" date="1706184000">- Added hpnd-uc license</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 9.0.0-11" date="1707652800">- Rebuild for golang 1.22.0</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-12" date="1715083200">- Dropped ocaml in RHEL&gt;9
  Resolves: RHEL-16474</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-13" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-14" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="86232abc7e2c76a25b63bec8aedec59710aef04eef486fa32aa5c82e1bf9448a" name="graphviz-lua" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="15.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.0.0-6" date="1703678400">- Use transaction file triggers to configure plugins</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 9.0.0-7" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-9" date="1706097600">- Converted license to SPDX</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-10" date="1706184000">- Added hpnd-uc license</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 9.0.0-11" date="1707652800">- Rebuild for golang 1.22.0</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-12" date="1715083200">- Dropped ocaml in RHEL&gt;9
  Resolves: RHEL-16474</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-13" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-14" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="147de6ff5f1d631d26ff9cc4c1e3f8ffe0d1677d4ce25ecc9ef687652e6953f1" name="graphviz-perl" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="15.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.0.0-6" date="1703678400">- Use transaction file triggers to configure plugins</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 9.0.0-7" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-9" date="1706097600">- Converted license to SPDX</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-10" date="1706184000">- Added hpnd-uc license</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 9.0.0-11" date="1707652800">- Rebuild for golang 1.22.0</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-12" date="1715083200">- Dropped ocaml in RHEL&gt;9
  Resolves: RHEL-16474</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-13" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-14" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e475b7ca643f91db9b5ca7f0ed1a9593df947700990165d6e1d9e1d4a87dfd3c" name="graphviz-python3" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="15.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.0.0-6" date="1703678400">- Use transaction file triggers to configure plugins</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 9.0.0-7" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-9" date="1706097600">- Converted license to SPDX</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-10" date="1706184000">- Added hpnd-uc license</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 9.0.0-11" date="1707652800">- Rebuild for golang 1.22.0</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-12" date="1715083200">- Dropped ocaml in RHEL&gt;9
  Resolves: RHEL-16474</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-13" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-14" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="205daa2b64416ee2887197806e484e20f36f4bc0ffb4e74069fb6ee943c45484" name="graphviz-ruby" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="15.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.0.0-6" date="1703678400">- Use transaction file triggers to configure plugins</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 9.0.0-7" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-9" date="1706097600">- Converted license to SPDX</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-10" date="1706184000">- Added hpnd-uc license</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 9.0.0-11" date="1707652800">- Rebuild for golang 1.22.0</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-12" date="1715083200">- Dropped ocaml in RHEL&gt;9
  Resolves: RHEL-16474</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-13" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-14" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d70b77b931407bccb722b5cc8ca8c54de6efce2ffe00c639e17d48cdbe2443b2" name="graphviz-tcl" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="15.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.0.0-6" date="1703678400">- Use transaction file triggers to configure plugins</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 9.0.0-7" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-9" date="1706097600">- Converted license to SPDX</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-10" date="1706184000">- Added hpnd-uc license</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 9.0.0-11" date="1707652800">- Rebuild for golang 1.22.0</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 9.0.0-12" date="1715083200">- Dropped ocaml in RHEL&gt;9
  Resolves: RHEL-16474</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-13" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-14" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.0.0-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="470aed2c517b6872fa0cd801b133fbf0fdf29e2d66397332c0bd11770db5ca3e" name="greenboot" arch="x86_64">
  <version epoch="0" ver="0.16.3" rel="0.el10_2"/>
  <changelog author="Sayan Paul &lt;saypaul@redhat.com&gt; - 0.16.0-1" date="1753358400">- Initial Package
- Switched to native Fedora dependencies, removing vendoring.</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.16.0-2" date="1753444800">- Update src to greenboot-rs, binaries remain greenboot
- Obsoletes/Conflicts for bash greenboot, Provides greenboot</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.16.0-3" date="1755259200">- Various spec file cleanups</changelog>
  <changelog author="Sayan Paul &lt;saypaul@redhat.com&gt; - 0.16.0-4" date="1756123200">- Adhering to rust packaging best practices</changelog>
  <changelog author="Mario Cattamo &lt;mcattamo@redhat.com&gt; - 0.16.0-5" date="1756728000">- Handle vendor packages in Centos-Stream</changelog>
  <changelog author="Sayan Paul &lt;saypaul@redhat.com&gt; - 0.16.0-6" date="1760529600">- Fix OS type detection
- Do not remount /boot superblock/filesystem readonly</changelog>
  <changelog author="Sayan Paul &lt;saypaul@redhat.com&gt; - 0.16.1" date="1764763200">- Ensure rollback trigger runs before systemd-update-done and only on updates
- Log the correct system type when reporting rollback decisions
- Fix CI/tests (Ansible callback config, GI deps) to keep gating green
- Refresh Packit release config for Fedora delivery</changelog>
  <changelog author="Sayan Paul &lt;saypaul@redhat.com&gt; - 0.16.2" date="1768996800">- restrict manual restart of healthcheck service
- fixed error while running healtcheck inside container
- removed bootupd dependency
- fixed CI tests</changelog>
</package>
<package pkgid="1e69d14396ff874605ac1e1462a4247189e4e38a78cf0b262366178417fcc3f0" name="greenboot-default-health-checks" arch="x86_64">
  <version epoch="0" ver="0.16.3" rel="0.el10_2"/>
  <changelog author="Sayan Paul &lt;saypaul@redhat.com&gt; - 0.16.0-1" date="1753358400">- Initial Package
- Switched to native Fedora dependencies, removing vendoring.</changelog>
  <changelog author="Paul Whalen &lt;pwhalen@fedoraproject.org&gt; - 0.16.0-2" date="1753444800">- Update src to greenboot-rs, binaries remain greenboot
- Obsoletes/Conflicts for bash greenboot, Provides greenboot</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.16.0-3" date="1755259200">- Various spec file cleanups</changelog>
  <changelog author="Sayan Paul &lt;saypaul@redhat.com&gt; - 0.16.0-4" date="1756123200">- Adhering to rust packaging best practices</changelog>
  <changelog author="Mario Cattamo &lt;mcattamo@redhat.com&gt; - 0.16.0-5" date="1756728000">- Handle vendor packages in Centos-Stream</changelog>
  <changelog author="Sayan Paul &lt;saypaul@redhat.com&gt; - 0.16.0-6" date="1760529600">- Fix OS type detection
- Do not remount /boot superblock/filesystem readonly</changelog>
  <changelog author="Sayan Paul &lt;saypaul@redhat.com&gt; - 0.16.1" date="1764763200">- Ensure rollback trigger runs before systemd-update-done and only on updates
- Log the correct system type when reporting rollback decisions
- Fix CI/tests (Ansible callback config, GI deps) to keep gating green
- Refresh Packit release config for Fedora delivery</changelog>
  <changelog author="Sayan Paul &lt;saypaul@redhat.com&gt; - 0.16.2" date="1768996800">- restrict manual restart of healthcheck service
- fixed error while running healtcheck inside container
- removed bootupd dependency
- fixed CI tests</changelog>
</package>
<package pkgid="2750237f3e96231af4577a219c2deff91f505f37cd226d8c9abad01cb190e792" name="grep" arch="x86_64">
  <version epoch="0" ver="3.11" rel="10.el10"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.11-1" date="1686052800">- New version
  Resolves: rhbz#2181063</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.11-2" date="1689249600">- Fixed egrep/fgrep aliases
  Resolves: rhbz#2215713</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.11-4" date="1691582400">- Converted license to SPDX</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.11-5" date="1691668800">- Updated SPDX license expression</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11-6" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 3.11-8" date="1714392000">- remove redundant dependency on libsigsegv (RHEL-34664)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.11-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.11-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1bc0a3cf8ec89450aa23c822b3252f56b1c3b177a1a8c390bbc61b71f5cdf58b" name="groff" arch="x86_64">
  <version epoch="0" ver="1.23.0" rel="10.el10"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-1" date="1688990400">- Rebase to version 1.23.0
- Several files were removed from groff package
- Several files were added to groff package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-3" date="1698926400">- Revert upstream change of mapping special characters for UTF-8 devices
- Resolves: BZ#2224123</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.23.0-4" date="1705406400">- Fix alternatives usage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23.0-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-8" date="1724241600">- Fix SAST identified true positives</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-9" date="1724760000">- Rebase for added gating</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6241f259c15393be50e6114f8a9068b8df4d8d75d9b3ef7f99e0e5ba48afefe6" name="groff-base" arch="x86_64">
  <version epoch="0" ver="1.23.0" rel="10.el10"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-1" date="1688990400">- Rebase to version 1.23.0
- Several files were removed from groff package
- Several files were added to groff package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-3" date="1698926400">- Revert upstream change of mapping special characters for UTF-8 devices
- Resolves: BZ#2224123</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.23.0-4" date="1705406400">- Fix alternatives usage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23.0-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-8" date="1724241600">- Fix SAST identified true positives</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-9" date="1724760000">- Rebase for added gating</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a2b880c5ef76d0c270da07ad148f0ad5749f43390cc2890ef77ca4ae2aec40cd" name="groff-doc" arch="noarch">
  <version epoch="0" ver="1.23.0" rel="10.el10"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-1" date="1688990400">- Rebase to version 1.23.0
- Several files were removed from groff package
- Several files were added to groff package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-3" date="1698926400">- Revert upstream change of mapping special characters for UTF-8 devices
- Resolves: BZ#2224123</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.23.0-4" date="1705406400">- Fix alternatives usage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23.0-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-8" date="1724241600">- Fix SAST identified true positives</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-9" date="1724760000">- Rebase for added gating</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="75b19a0f23f98f055f85a1f1dc06499664b8a7e98cc28ed21e42f58b3e0fcee9" name="groff-perl" arch="x86_64">
  <version epoch="0" ver="1.23.0" rel="10.el10"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-1" date="1688990400">- Rebase to version 1.23.0
- Several files were removed from groff package
- Several files were added to groff package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-3" date="1698926400">- Revert upstream change of mapping special characters for UTF-8 devices
- Resolves: BZ#2224123</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.23.0-4" date="1705406400">- Fix alternatives usage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23.0-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-8" date="1724241600">- Fix SAST identified true positives</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-9" date="1724760000">- Rebase for added gating</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="76d5febebc97dc9011cfee1d45b1143df2f5216e7c311b8dc31e6d778f434bd7" name="groff-x11" arch="x86_64">
  <version epoch="0" ver="1.23.0" rel="10.el10"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-1" date="1688990400">- Rebase to version 1.23.0
- Several files were removed from groff package
- Several files were added to groff package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-3" date="1698926400">- Revert upstream change of mapping special characters for UTF-8 devices
- Resolves: BZ#2224123</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.23.0-4" date="1705406400">- Fix alternatives usage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23.0-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-8" date="1724241600">- Fix SAST identified true positives</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.23.0-9" date="1724760000">- Rebase for added gating</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ccf0f24e26800079d955c80113eac341d1cbaded0e0ee8c35113c0300135fe1c" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="d38980de03acfe998bb7309e2b023ac5c5673fd42966c96d1019911521178379" name="grub2-efi-aa64-modules" arch="noarch">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="cbdd647de4cfb17d8c72ec445abad66f99d02f7e3a0d1c1ea8232aee98ffbae1" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="660ab5bfef0a4b327e8d9f0aece24f84b19f8953a8fe89912e73efb8d6809175" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="bb3d6c0d8c9e689d8b95e01a535bf8fee1f31cfaa7a11861ca53e3a34f584442" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="fb58d0af8e17c2353924a704e894b5ae3a204236db03ccc7532da8016a760d42" name="grub2-efi-riscv64-modules" arch="noarch">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="96d958810eeeeb73971f136ec89dacbf4702c9f9b8069f85ed0ea34c9feb60db" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="e0f1acad6e0cf30c6a4d95a23dcbc76a09ca43a29d70194908657caf123ef13f" name="grub2-efi-x64-cc" arch="x86_64">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="be008eaba0b88f30f40f2ddd43dbec20d301ce3182c64702aee1eaaa6fba3d82" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="3db1b119242f6b50ae1a5ac3b7ab147a0b13abfca507b9b153be5dc1a8c081d0" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="b3d50e7d50db4dc1578f208468cab208e749f29f0b76106700fd6b76e47fd8ff" name="grub2-emu" arch="x86_64">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="542d55a8c8f5792da7bcc2f6f2dacf3d3713c6d1f4a71d71f240ab7a3004d143" name="grub2-emu-modules" arch="x86_64">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="66ff1cd4c9efeac573e72e698750c0b24fd113ec30a52f663057ddab25eaf54c" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="16eb1a920cc37bed74bb96380bfdcb6f7353a2e4b663b330e7f1725d0a801f79" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="7c1a652dbe205b397ea76064ede6f1e18aeccdaf44e923219e8921b5a369ffe7" name="grub2-ppc64le-modules" arch="noarch">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="f3d15fb468cd46d591b8fee728fc37d5855f77d7be94a1f4d5ce7d8eab8bb446" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="9db17e9d69a3e15b6164ed588ff4c12190fb84cd177d13e1ac6fb059127f1969" name="grub2-tools-efi" arch="x86_64">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="b736bc3d5088b26aaa74345e0c9a26313401c13a56dc95cf26ad4a1c7bfdf835" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="21cead0204cbe97bc2c7a6bedde0e90e9e809616f8b6161a3df96692abbd4f6c" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.12" rel="46.el10_2.rocky.0.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-39" date="1770811200">- commands/search.c: check possible NULL pointer before dereference
- Resolves: #RHEL-146317</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.12-40" date="1770984000">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24510</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.12-41" date="1770984001">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24510</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-42" date="1772107200">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146590</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.12-43" date="1773057600">- Bump release
- Related: #RHEL-146590</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.12-44" date="1773057601">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148309</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 2.12-45" date="1773144000">- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-147757</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 2.12-46" date="1774612800">- New package grub2-efi-x64-cc for confidential computing workloads
- Resolves: #RHEL-127909</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:2.12-46" date="1776859200">- Replace sbat with Rocky Linux sbat (label)
- Change bug tracker URL (label)
- Force appended sig size for ppc64le (label)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 1:2.12-46.rocky.0.1" date="1779537600">- Bump for rebuild with new certificates</changelog>
</package>
<package pkgid="511cd800c9ca0fc2aee1471a8517dd5db2d64e81c13d024610de026f0ab54b1b" name="grubby" arch="x86_64">
  <version epoch="0" ver="8.40" rel="83.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.40-74" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.40-75" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.40-76" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.40-77" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 8.40-78" date="1733400000">- On grub cfg updates, run grub2-mkconfig for Xen systems
  Resolves: #RHEL-70200</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 8.40-79" date="1733486400">- grubby-bls: in s390* systems, run zipl on grub cfg update event
  Resolves: #RHEL-36092</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 8.40-80" date="1733486401">- grubby-bls: on PPC systems, remove petiboot's version checks
  Resolves: #RHEL-70194</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 8.40-81" date="1742472000">- grubby-bls: in s390* systems, run zipl on grub cfg update event
  Fixes previous commit and formats better the conditions that trigger grub cfg updates
  Resolves: #RHEL-36092</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 8.40-82" date="1744804800">- Fix riscv64 build
  Resolves: RHEL-85989</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 8.40-83" date="1753876800">- Update cfg when setting a default kernel
  Resolves:#RHEL-101784</changelog>
</package>
<package pkgid="c983454773b2f3054daa9ec750f692b1bf98f2ea920dd0426e12c77081458a51" name="gsettings-desktop-schemas" arch="x86_64">
  <version epoch="0" ver="47.1" rel="4.el10"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 46.0-3" date="1712664000">- Move to the Red Hat fonts family for RHEL 10</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 46.0-4" date="1717588800">- Use variable fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 47~alpha-1" date="1721131200">- Update to 47.alpha</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47~rc-1" date="1725278400">- Update to 47.rc</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 47~rc-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Carlos Garnacho &lt;carlosg@gnome.org&gt; - 47.1-1" date="1732104000">- Update to latest Fedora 41 changes</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 47.1-2" date="1752667200">- Add an option to enable restart/shutdown at lockscreen</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 47.1-3" date="1752667201">- Rebuild for the correct RHEL target</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.1-4" date="1762776000">- Backport screen-time-limits settings</changelog>
</package>
<package pkgid="b578c36b3120882b00a849a6980bc7c477a675fb8784978c1e0a73f28c24792e" name="gsettings-desktop-schemas-devel" arch="x86_64">
  <version epoch="0" ver="47.1" rel="4.el10"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 46.0-3" date="1712664000">- Move to the Red Hat fonts family for RHEL 10</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 46.0-4" date="1717588800">- Use variable fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 47~alpha-1" date="1721131200">- Update to 47.alpha</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47~rc-1" date="1725278400">- Update to 47.rc</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 47~rc-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Carlos Garnacho &lt;carlosg@gnome.org&gt; - 47.1-1" date="1732104000">- Update to latest Fedora 41 changes</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 47.1-2" date="1752667200">- Add an option to enable restart/shutdown at lockscreen</changelog>
  <changelog author="Joan Torres Lopez &lt;joantolo@redhat.com&gt; - 47.1-3" date="1752667201">- Rebuild for the correct RHEL target</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 47.1-4" date="1762776000">- Backport screen-time-limits settings</changelog>
</package>
<package pkgid="116c523014e9ad37439d1a0a5c9a6c8f9fe9df70148d60cc4587b3ae5a550639" name="gsm" arch="x86_64">
  <version epoch="0" ver="1.0.22" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.22-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.22-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.0.22-4" date="1702382400">- License converted to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.22-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.22-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.22-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.22-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c33983ffe71242feef5fa4e000d789d231b8c15b4ec43740acee5a69d91b4b4c" name="gsm-devel" arch="x86_64">
  <version epoch="0" ver="1.0.22" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.22-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.22-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.0.22-4" date="1702382400">- License converted to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.22-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.22-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.22-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.22-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="889f9a1c9c19c3301b909ed8fa5c3ec7ef813e68ec358cfa763dd7d8d14ec46e" name="gsm-tools" arch="x86_64">
  <version epoch="0" ver="1.0.22" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.22-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.22-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.0.22-4" date="1702382400">- License converted to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.22-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.22-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.22-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.22-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8bcf414ce94e989a7405e8ef451b18bbb36621cbd33481ac59217f585177f3db" name="gsound" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.3-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.3-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5ab1df0e12ccd02130817a8fe3cd4e7594c2afe3512d1e0408d65e14ed8061df" name="gsound-devel" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.3-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.3-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3074ac89f70df2e64e18a07fe63d9eacca948d4501953239d2d407c13c157964" name="gssproxy" arch="x86_64">
  <version epoch="0" ver="0.9.2" rel="10.el10"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 0.9.2-1" date="1697716800">- Update to 0.9.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.2-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.2-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sudhir Menon &lt;sumenon@redhat.com&gt; - 0.9.2-5" date="1719921600">- Added tests and gating.yaml for gssproxy</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 0.9.2-6" date="1723118400">- Fix various issues detected by static analysis</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 0.9.2-7" date="1723118401">- Make systemd use 0700 mode on cache folders</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.2-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 0.9.2-9" date="1733140800">- Use internal RPM repo for openldap-servers tests</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 0.9.2-10" date="1736251200">- Change daemon to Type=notify with systemd</changelog>
</package>
<package pkgid="ca83e31edae6fd386a212068bc89489b6c4898156fcc01950ccab387a3b63b73" name="gstreamer1" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="5.el10"/>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.5-1" date="1718971200">- 1.24.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.5-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.6-1" date="1722254400">- 1.24.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1733918400">- 1.24.10
  Resolves: RHEL-70405</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-2" date="1734091200">Rebuild
  Resolves: RHEL-70405</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- 1.24.11
  Resolves: RHEL-73673</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-2" date="1736942400">Rebuild
  Resolves: RHEL-73673</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-5" date="1762171200">- 1.26.7
  Resolves: RHEL-126057</changelog>
</package>
<package pkgid="f282f180d7e31192e5a93e5e9e76db5901550bdfd201ad4ad16cf00d190b26fa" name="gstreamer1-devel" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="5.el10"/>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.5-1" date="1718971200">- 1.24.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.5-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.6-1" date="1722254400">- 1.24.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1733918400">- 1.24.10
  Resolves: RHEL-70405</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-2" date="1734091200">Rebuild
  Resolves: RHEL-70405</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- 1.24.11
  Resolves: RHEL-73673</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-2" date="1736942400">Rebuild
  Resolves: RHEL-73673</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-5" date="1762171200">- 1.26.7
  Resolves: RHEL-126057</changelog>
</package>
<package pkgid="049053e91cf04073ac186f25a634a60f4f9ac397aa9e45e94f417805caad9942" name="gstreamer1-plugins-bad-free" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.4"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70406</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73674</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-2" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93045</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patches for CVE-2026-2923 and CVE-2026-3082
  Resolves: RHEL-156114, RHEL-156172</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in VNC source plugin's RFB decoder
  Resolves: RHEL-184462</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1781870401">- Fix integer overflows in VMnc decoder (CVE-2026-52722)
  Resolves: RHEL-184425</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1782129600">- Fix for CVE-2026-52719
  Resolves: RHEL-184406</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.4" date="1782216000">- Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718)
  Resolves: RHEL-184391</changelog>
</package>
<package pkgid="be5c16763f89399f78127ea655951dfb39800ee18fb60bfe863d72992c115148" name="gstreamer1-plugins-bad-free" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.6"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73674</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-2" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93045</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patches for CVE-2026-2923 and CVE-2026-3082
  Resolves: RHEL-156114, RHEL-156172</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in VNC source plugin's RFB decoder
  Resolves: RHEL-184462</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1781870401">- Fix integer overflows in VMnc decoder (CVE-2026-52722)
  Resolves: RHEL-184425</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1782129600">- Fix for CVE-2026-52719
  Resolves: RHEL-184406</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.4" date="1782216000">- Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718)
  Resolves: RHEL-184391</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.5" date="1783771200">- Fix rfbsrc hextile and color read handling for non-32bpp
  pixel formats (CVE-2026-59691)
  Resolves: RHEL-193550</changelog>
</package>
<package pkgid="d93a3f85da34f5d51015d60cac9cb262217a2d16aa01942a90c54a5a6d752eb9" name="gstreamer1-plugins-bad-free" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.7"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-2" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93045</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patches for CVE-2026-2923 and CVE-2026-3082
  Resolves: RHEL-156114, RHEL-156172</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in VNC source plugin's RFB decoder
  Resolves: RHEL-184462</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1781870401">- Fix integer overflows in VMnc decoder (CVE-2026-52722)
  Resolves: RHEL-184425</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1782129600">- Fix for CVE-2026-52719
  Resolves: RHEL-184406</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.4" date="1782216000">- Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718)
  Resolves: RHEL-184391</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.5" date="1783771200">- Fix rfbsrc hextile and color read handling for non-32bpp
  pixel formats (CVE-2026-59691)
  Resolves: RHEL-193550</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.7" date="1786363200">- Fix ADPCM decoder input validation (CVE-2026-19387)
  Resolves: RHEL-235500</changelog>
</package>
<package pkgid="829e65bb76470579875defa4482b406498118df9746e7674b242807f44fb53af" name="gstreamer1-plugins-bad-free" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.5-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 1.24.5-3" date="1721908800">- Rebuild for opencv 4.10.0</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.6-1" date="1722254400">- 1.24.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70406</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73674</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-2" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93045</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patches for CVE-2026-2923 and CVE-2026-3082
  Resolves: RHEL-156114, RHEL-156172</changelog>
</package>
<package pkgid="14f78dc12ca609b235f31ead9126c49480e50b500ff46789465888ed4a667721" name="gstreamer1-plugins-bad-free-devel" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.4"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70406</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73674</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-2" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93045</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patches for CVE-2026-2923 and CVE-2026-3082
  Resolves: RHEL-156114, RHEL-156172</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in VNC source plugin's RFB decoder
  Resolves: RHEL-184462</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1781870401">- Fix integer overflows in VMnc decoder (CVE-2026-52722)
  Resolves: RHEL-184425</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1782129600">- Fix for CVE-2026-52719
  Resolves: RHEL-184406</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.4" date="1782216000">- Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718)
  Resolves: RHEL-184391</changelog>
</package>
<package pkgid="ab542a84573e9b3c85d6ee4c69a1a1b194567433acd46111fd6de85f6eb1f57d" name="gstreamer1-plugins-bad-free-devel" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.6"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73674</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-2" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93045</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patches for CVE-2026-2923 and CVE-2026-3082
  Resolves: RHEL-156114, RHEL-156172</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in VNC source plugin's RFB decoder
  Resolves: RHEL-184462</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1781870401">- Fix integer overflows in VMnc decoder (CVE-2026-52722)
  Resolves: RHEL-184425</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1782129600">- Fix for CVE-2026-52719
  Resolves: RHEL-184406</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.4" date="1782216000">- Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718)
  Resolves: RHEL-184391</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.5" date="1783771200">- Fix rfbsrc hextile and color read handling for non-32bpp
  pixel formats (CVE-2026-59691)
  Resolves: RHEL-193550</changelog>
</package>
<package pkgid="209368acaf9ae9bed69cf5391c72f97f07c64025da1927f3111395b4c6db068e" name="gstreamer1-plugins-bad-free-devel" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.7"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-2" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93045</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patches for CVE-2026-2923 and CVE-2026-3082
  Resolves: RHEL-156114, RHEL-156172</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in VNC source plugin's RFB decoder
  Resolves: RHEL-184462</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1781870401">- Fix integer overflows in VMnc decoder (CVE-2026-52722)
  Resolves: RHEL-184425</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1782129600">- Fix for CVE-2026-52719
  Resolves: RHEL-184406</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.4" date="1782216000">- Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718)
  Resolves: RHEL-184391</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.5" date="1783771200">- Fix rfbsrc hextile and color read handling for non-32bpp
  pixel formats (CVE-2026-59691)
  Resolves: RHEL-193550</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.7" date="1786363200">- Fix ADPCM decoder input validation (CVE-2026-19387)
  Resolves: RHEL-235500</changelog>
</package>
<package pkgid="a2d0b0707f4abe16d08e1d9c3fe4304647ebdbc094c4f1011343bdb9bf537f9d" name="gstreamer1-plugins-bad-free-devel" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.5-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 1.24.5-3" date="1721908800">- Rebuild for opencv 4.10.0</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.6-1" date="1722254400">- 1.24.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70406</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73674</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-2" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93045</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patches for CVE-2026-2923 and CVE-2026-3082
  Resolves: RHEL-156114, RHEL-156172</changelog>
</package>
<package pkgid="699484823008fd4e1c05c7bcd37b1211f088fecc9467c634cdef7bfaffa5722a" name="gstreamer1-plugins-bad-free-libs" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.4"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70406</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73674</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-2" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93045</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patches for CVE-2026-2923 and CVE-2026-3082
  Resolves: RHEL-156114, RHEL-156172</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in VNC source plugin's RFB decoder
  Resolves: RHEL-184462</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1781870401">- Fix integer overflows in VMnc decoder (CVE-2026-52722)
  Resolves: RHEL-184425</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1782129600">- Fix for CVE-2026-52719
  Resolves: RHEL-184406</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.4" date="1782216000">- Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718)
  Resolves: RHEL-184391</changelog>
</package>
<package pkgid="3c2e4988fd2adb6f8689a563a8208203f26c693bbcbb070bd3e3b98d7a20fa50" name="gstreamer1-plugins-bad-free-libs" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.6"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73674</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-2" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93045</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patches for CVE-2026-2923 and CVE-2026-3082
  Resolves: RHEL-156114, RHEL-156172</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in VNC source plugin's RFB decoder
  Resolves: RHEL-184462</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1781870401">- Fix integer overflows in VMnc decoder (CVE-2026-52722)
  Resolves: RHEL-184425</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1782129600">- Fix for CVE-2026-52719
  Resolves: RHEL-184406</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.4" date="1782216000">- Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718)
  Resolves: RHEL-184391</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.5" date="1783771200">- Fix rfbsrc hextile and color read handling for non-32bpp
  pixel formats (CVE-2026-59691)
  Resolves: RHEL-193550</changelog>
</package>
<package pkgid="65a986eb090ba426393f1489bd1f119bba64be86d698b10116304b0131e6c921" name="gstreamer1-plugins-bad-free-libs" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.7"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-2" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93045</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patches for CVE-2026-2923 and CVE-2026-3082
  Resolves: RHEL-156114, RHEL-156172</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix for CVE-2026-52720: validate framebuffer update rectangles
  in VNC source plugin's RFB decoder
  Resolves: RHEL-184462</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1781870401">- Fix integer overflows in VMnc decoder (CVE-2026-52722)
  Resolves: RHEL-184425</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1782129600">- Fix for CVE-2026-52719
  Resolves: RHEL-184406</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.4" date="1782216000">- Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718)
  Resolves: RHEL-184391</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.5" date="1783771200">- Fix rfbsrc hextile and color read handling for non-32bpp
  pixel formats (CVE-2026-59691)
  Resolves: RHEL-193550</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.7" date="1786363200">- Fix ADPCM decoder input validation (CVE-2026-19387)
  Resolves: RHEL-235500</changelog>
</package>
<package pkgid="6c32863b0b62f08e893d9a07f78398c5764be6e57f5f8366aa330c64c7743470" name="gstreamer1-plugins-bad-free-libs" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.5-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 1.24.5-3" date="1721908800">- Rebuild for opencv 4.10.0</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.6-1" date="1722254400">- 1.24.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70406</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73674</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-2" date="1748260800">- fix for CVE-2025-3887
  Resolves: RHEL-93045</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patches for CVE-2026-2923 and CVE-2026-3082
  Resolves: RHEL-156114, RHEL-156172</changelog>
</package>
<package pkgid="a84c79111d6ecbbf21f54efdda715fcbcbcfc48b7316973a67e691f774f1d955" name="gstreamer1-plugins-base" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1743422400">- Add patch for CVE-2026-2921
  Resolves: RHEL-156122</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1787400000">- Add patch for CVE-2026-18297
  Resolves: RHEL-246574</changelog>
</package>
<package pkgid="38cb8c7382c32e81b0f9f1dab3c4056a347826e546be4b161d0504e3c5f4bf45" name="gstreamer1-plugins-base" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1743422400">- Add patch for CVE-2026-2921
  Resolves: RHEL-156122</changelog>
</package>
<package pkgid="b3bd0f809d14100fdd0932daa87e7a1bc6f7c6248d59874a674ec9f2e3a951ab" name="gstreamer1-plugins-base-devel" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1743422400">- Add patch for CVE-2026-2921
  Resolves: RHEL-156122</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1787400000">- Add patch for CVE-2026-18297
  Resolves: RHEL-246574</changelog>
</package>
<package pkgid="2fa40ca03b2a2fbe56be6b3778d1fc7e45574de69418f8c523c13c585336dae7" name="gstreamer1-plugins-base-devel" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1743422400">- Add patch for CVE-2026-2921
  Resolves: RHEL-156122</changelog>
</package>
<package pkgid="7d91f0f7dfff21a8ccd09a84f5c32c87d3f5daa64fc9a57390b9b6124c1af846" name="gstreamer1-plugins-base-tools" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1743422400">- Add patch for CVE-2026-2921
  Resolves: RHEL-156122</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1787400000">- Add patch for CVE-2026-18297
  Resolves: RHEL-246574</changelog>
</package>
<package pkgid="205cfc4a714f2cf26373d9e0b9373f4953c3ccfca86142752f79c28d9e35f869" name="gstreamer1-plugins-base-tools" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1743422400">- Add patch for CVE-2026-2921
  Resolves: RHEL-156122</changelog>
</package>
<package pkgid="f7d3f9c7e579b2371ecd7c9697577fe2fb0777e06c942de6d6c108dc7564d291" name="gstreamer1-plugins-good" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.1"/>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.5-1" date="1718971200">- 1.24.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.5-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.6-1" date="1722254400">- 1.24.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
  Resolves: RHEL-70960, RHEL-70947, RHEL-70934</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73676</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
  Resolves: RHEL-184480</changelog>
</package>
<package pkgid="0f1a85629f3e3d69888f92a097c165d3cd3aac48ae8152384841f327312a1ada" name="gstreamer1-plugins-good" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
  Resolves: RHEL-70960, RHEL-70947, RHEL-70934</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73676</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
  Resolves: RHEL-184480</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1785499200">- Fix integer overflow and bounds check vulnerabilities in uncompressed
  video handling (CVE-2026-5056)
  Resolves: RHEL-222333</changelog>
</package>
<package pkgid="1aecebace708ef590ad03ecab0c69e6e191863ae96b201f8b96de54ba8dd0d32" name="gstreamer1-plugins-good" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.3"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
  Resolves: RHEL-70960, RHEL-70947, RHEL-70934</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73676</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
  Resolves: RHEL-184480</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1785499200">- Fix integer overflow and bounds check vulnerabilities in uncompressed
  video handling (CVE-2026-5056)
  Resolves: RHEL-222333</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1786104000">- Fix excessive memory allocation from malicious RTP fragmentation unit
  packets in rtph264depay/rtph265depay (CVE-2026-18649)
  Resolves: RHEL-224158</changelog>
</package>
<package pkgid="9061d74ad4d1f5fcbfcdcb9ebd521a6a9949ece4d07b2d0de55301b6626a5aac" name="gstreamer1-plugins-good" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.5"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
  Resolves: RHEL-70960, RHEL-70947, RHEL-70934</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73676</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
  Resolves: RHEL-184480</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1785499200">- Fix integer overflow and bounds check vulnerabilities in uncompressed
  video handling (CVE-2026-5056)
  Resolves: RHEL-222333</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1786104000">- Fix excessive memory allocation from malicious RTP fragmentation unit
  packets in rtph264depay/rtph265depay (CVE-2026-18649)
  Resolves: RHEL-224158</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.4" date="1786622400">- Fix out-of-bounds reads when parsing FUJIFILM strd metadata in AVI
  files (CVE-2026-73433)
  Resolves: RHEL-239062</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.5" date="1786622401">- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
  Resolves: RHEL-239045</changelog>
</package>
<package pkgid="9a5d45d7df1babb21bfe8c4acfc4c4908083a40b74e820576804566308178fa5" name="gstreamer1-plugins-good" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.7"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
  Resolves: RHEL-184480</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1785499200">- Fix integer overflow and bounds check vulnerabilities in uncompressed
  video handling (CVE-2026-5056)
  Resolves: RHEL-222333</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1786104000">- Fix excessive memory allocation from malicious RTP fragmentation unit
  packets in rtph264depay/rtph265depay (CVE-2026-18649)
  Resolves: RHEL-224158</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.4" date="1786622400">- Fix out-of-bounds reads when parsing FUJIFILM strd metadata in AVI
  files (CVE-2026-73433)
  Resolves: RHEL-239062</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.5" date="1786622401">- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
  Resolves: RHEL-239045</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.6" date="1787400000">- Fix insufficient size validation in MRF file parsing in qtmoovrecover
  (CVE-2026-18296)
  Resolves: RHEL-246546</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.7" date="1787400001">- Fix CVE-2026-18298 in gdkpixbufdec element
  Resolves: RHEL-246557</changelog>
</package>
<package pkgid="2609dc4e36f9e634a85c747156f8683ca90e19036783b241e32e3041738f840c" name="gstreamer1-plugins-good" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
  Resolves: RHEL-184480</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1785499200">- Fix integer overflow and bounds check vulnerabilities in uncompressed
  video handling (CVE-2026-5056)
  Resolves: RHEL-222333</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1786104000">- Fix excessive memory allocation from malicious RTP fragmentation unit
  packets in rtph264depay/rtph265depay (CVE-2026-18649)
  Resolves: RHEL-224158</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.4" date="1786622400">- Fix out-of-bounds reads when parsing FUJIFILM strd metadata in AVI
  files (CVE-2026-73433)
  Resolves: RHEL-239062</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.5" date="1786622401">- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
  Resolves: RHEL-239045</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.6" date="1787400000">- Fix insufficient size validation in MRF file parsing in qtmoovrecover
  (CVE-2026-18296)
  Resolves: RHEL-246546</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.7" date="1787400001">- Fix CVE-2026-18298 in gdkpixbufdec element
  Resolves: RHEL-246557</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.8" date="1787659200">- Fix use-after-free vulnerability in RTP SBC depayloader
  (CVE-2026-18299)
  Resolves: RHEL-246613</changelog>
</package>
<package pkgid="a8631a4a02344f743e47ccd1f26f22c3170a306bf6ac1639e43277e40cbf88bb" name="gstreamer1-plugins-good" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2"/>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.4-1" date="1716984000">- 1.24.4</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.5-1" date="1718971200">- 1.24.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.5-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.6-1" date="1722254400">- 1.24.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
  Resolves: RHEL-70960, RHEL-70947, RHEL-70934</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73676</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
</package>
<package pkgid="9fae028397b60401a0c4285c08fea41bad09923656790f1f5958bc25f8aa2c68" name="gstreamer1-plugins-good-gtk" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.1"/>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.5-1" date="1718971200">- 1.24.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.5-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.6-1" date="1722254400">- 1.24.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
  Resolves: RHEL-70960, RHEL-70947, RHEL-70934</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73676</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
  Resolves: RHEL-184480</changelog>
</package>
<package pkgid="3fede2ed983d75f99e5f06a6f20f6148ddb2978457fdf06830ba3244c6d892aa" name="gstreamer1-plugins-good-gtk" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
  Resolves: RHEL-70960, RHEL-70947, RHEL-70934</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73676</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
  Resolves: RHEL-184480</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1785499200">- Fix integer overflow and bounds check vulnerabilities in uncompressed
  video handling (CVE-2026-5056)
  Resolves: RHEL-222333</changelog>
</package>
<package pkgid="cba0733aa4c9bbdee6851df1a2a00ae022254bda919bfaa10722d65b0f95c114" name="gstreamer1-plugins-good-gtk" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.3"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
  Resolves: RHEL-70960, RHEL-70947, RHEL-70934</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73676</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
  Resolves: RHEL-184480</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1785499200">- Fix integer overflow and bounds check vulnerabilities in uncompressed
  video handling (CVE-2026-5056)
  Resolves: RHEL-222333</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1786104000">- Fix excessive memory allocation from malicious RTP fragmentation unit
  packets in rtph264depay/rtph265depay (CVE-2026-18649)
  Resolves: RHEL-224158</changelog>
</package>
<package pkgid="5fab7cf386da63771e011f573e15bb36a63b5fd742dd5104581a727233dc0f63" name="gstreamer1-plugins-good-gtk" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.5"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
  Resolves: RHEL-70960, RHEL-70947, RHEL-70934</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73676</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
  Resolves: RHEL-184480</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1785499200">- Fix integer overflow and bounds check vulnerabilities in uncompressed
  video handling (CVE-2026-5056)
  Resolves: RHEL-222333</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1786104000">- Fix excessive memory allocation from malicious RTP fragmentation unit
  packets in rtph264depay/rtph265depay (CVE-2026-18649)
  Resolves: RHEL-224158</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.4" date="1786622400">- Fix out-of-bounds reads when parsing FUJIFILM strd metadata in AVI
  files (CVE-2026-73433)
  Resolves: RHEL-239062</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.5" date="1786622401">- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
  Resolves: RHEL-239045</changelog>
</package>
<package pkgid="9e3fdd7d764ddd300c97e7da7320e2af2de14bf3ffcad1e2fa040b2cb27a3d9b" name="gstreamer1-plugins-good-gtk" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.7"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
  Resolves: RHEL-184480</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1785499200">- Fix integer overflow and bounds check vulnerabilities in uncompressed
  video handling (CVE-2026-5056)
  Resolves: RHEL-222333</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1786104000">- Fix excessive memory allocation from malicious RTP fragmentation unit
  packets in rtph264depay/rtph265depay (CVE-2026-18649)
  Resolves: RHEL-224158</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.4" date="1786622400">- Fix out-of-bounds reads when parsing FUJIFILM strd metadata in AVI
  files (CVE-2026-73433)
  Resolves: RHEL-239062</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.5" date="1786622401">- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
  Resolves: RHEL-239045</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.6" date="1787400000">- Fix insufficient size validation in MRF file parsing in qtmoovrecover
  (CVE-2026-18296)
  Resolves: RHEL-246546</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.7" date="1787400001">- Fix CVE-2026-18298 in gdkpixbufdec element
  Resolves: RHEL-246557</changelog>
</package>
<package pkgid="84d28982628d1eca0ec6875d0a4d0bab888f447f0028d9830189fb2cc8744841" name="gstreamer1-plugins-good-gtk" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
  Resolves: RHEL-184480</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1785499200">- Fix integer overflow and bounds check vulnerabilities in uncompressed
  video handling (CVE-2026-5056)
  Resolves: RHEL-222333</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1786104000">- Fix excessive memory allocation from malicious RTP fragmentation unit
  packets in rtph264depay/rtph265depay (CVE-2026-18649)
  Resolves: RHEL-224158</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.4" date="1786622400">- Fix out-of-bounds reads when parsing FUJIFILM strd metadata in AVI
  files (CVE-2026-73433)
  Resolves: RHEL-239062</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.5" date="1786622401">- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
  Resolves: RHEL-239045</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.6" date="1787400000">- Fix insufficient size validation in MRF file parsing in qtmoovrecover
  (CVE-2026-18296)
  Resolves: RHEL-246546</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.7" date="1787400001">- Fix CVE-2026-18298 in gdkpixbufdec element
  Resolves: RHEL-246557</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.8" date="1787659200">- Fix use-after-free vulnerability in RTP SBC depayloader
  (CVE-2026-18299)
  Resolves: RHEL-246613</changelog>
</package>
<package pkgid="017a3d4f527664b3124247b725b5a4d7fabfc74eba07cdc19576821b5d15cea9" name="gstreamer1-plugins-good-gtk" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2"/>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.4-1" date="1716984000">- 1.24.4</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.5-1" date="1718971200">- 1.24.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.5-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.6-1" date="1722254400">- 1.24.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
  Resolves: RHEL-70960, RHEL-70947, RHEL-70934</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73676</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
</package>
<package pkgid="fc5e6153174265e0b89df8feae143d0946f8dfe941f54120ed9e31e6571eb946" name="gstreamer1-plugins-good-qt6" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.1"/>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.5-1" date="1718971200">- 1.24.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.5-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.6-1" date="1722254400">- 1.24.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
  Resolves: RHEL-70960, RHEL-70947, RHEL-70934</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73676</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
  Resolves: RHEL-184480</changelog>
</package>
<package pkgid="b186e15b811b63f998c1f5cb119ff143905c53db95e12e712ec8c49e9d58af25" name="gstreamer1-plugins-good-qt6" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
  Resolves: RHEL-70960, RHEL-70947, RHEL-70934</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73676</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
  Resolves: RHEL-184480</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1785499200">- Fix integer overflow and bounds check vulnerabilities in uncompressed
  video handling (CVE-2026-5056)
  Resolves: RHEL-222333</changelog>
</package>
<package pkgid="22fd34e64fa7190534d213f3de06b7ef6993d27ce2fb2c2d62cbbe717d79f9cc" name="gstreamer1-plugins-good-qt6" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.3"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
  Resolves: RHEL-70960, RHEL-70947, RHEL-70934</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73676</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
  Resolves: RHEL-184480</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1785499200">- Fix integer overflow and bounds check vulnerabilities in uncompressed
  video handling (CVE-2026-5056)
  Resolves: RHEL-222333</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1786104000">- Fix excessive memory allocation from malicious RTP fragmentation unit
  packets in rtph264depay/rtph265depay (CVE-2026-18649)
  Resolves: RHEL-224158</changelog>
</package>
<package pkgid="612201f42801a89e7ac5f3874be8e91cfa8ae6fbd551f0aa89b6d9acf6ad5932" name="gstreamer1-plugins-good-qt6" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.5"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
  Resolves: RHEL-70960, RHEL-70947, RHEL-70934</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73676</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
  Resolves: RHEL-184480</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1785499200">- Fix integer overflow and bounds check vulnerabilities in uncompressed
  video handling (CVE-2026-5056)
  Resolves: RHEL-222333</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1786104000">- Fix excessive memory allocation from malicious RTP fragmentation unit
  packets in rtph264depay/rtph265depay (CVE-2026-18649)
  Resolves: RHEL-224158</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.4" date="1786622400">- Fix out-of-bounds reads when parsing FUJIFILM strd metadata in AVI
  files (CVE-2026-73433)
  Resolves: RHEL-239062</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.5" date="1786622401">- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
  Resolves: RHEL-239045</changelog>
</package>
<package pkgid="8489e1a1e66db440f6e283212652d1912e3131dc4350581db45099cd19a0dde5" name="gstreamer1-plugins-good-qt6" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.7"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
  Resolves: RHEL-184480</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1785499200">- Fix integer overflow and bounds check vulnerabilities in uncompressed
  video handling (CVE-2026-5056)
  Resolves: RHEL-222333</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1786104000">- Fix excessive memory allocation from malicious RTP fragmentation unit
  packets in rtph264depay/rtph265depay (CVE-2026-18649)
  Resolves: RHEL-224158</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.4" date="1786622400">- Fix out-of-bounds reads when parsing FUJIFILM strd metadata in AVI
  files (CVE-2026-73433)
  Resolves: RHEL-239062</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.5" date="1786622401">- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
  Resolves: RHEL-239045</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.6" date="1787400000">- Fix insufficient size validation in MRF file parsing in qtmoovrecover
  (CVE-2026-18296)
  Resolves: RHEL-246546</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.7" date="1787400001">- Fix CVE-2026-18298 in gdkpixbufdec element
  Resolves: RHEL-246557</changelog>
</package>
<package pkgid="290e09d8be4982f7ba23109c29048bda7c1f5bce5c105c2947a853b11b7ae5f8" name="gstreamer1-plugins-good-qt6" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1781870400">- Fix integer overflow vulnerabilities in wavpack decoder (CVE-2026-53705)
  Resolves: RHEL-184480</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1785499200">- Fix integer overflow and bounds check vulnerabilities in uncompressed
  video handling (CVE-2026-5056)
  Resolves: RHEL-222333</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.3" date="1786104000">- Fix excessive memory allocation from malicious RTP fragmentation unit
  packets in rtph264depay/rtph265depay (CVE-2026-18649)
  Resolves: RHEL-224158</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.4" date="1786622400">- Fix out-of-bounds reads when parsing FUJIFILM strd metadata in AVI
  files (CVE-2026-73433)
  Resolves: RHEL-239062</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.5" date="1786622401">- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
  Resolves: RHEL-239045</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.6" date="1787400000">- Fix insufficient size validation in MRF file parsing in qtmoovrecover
  (CVE-2026-18296)
  Resolves: RHEL-246546</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.7" date="1787400001">- Fix CVE-2026-18298 in gdkpixbufdec element
  Resolves: RHEL-246557</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.8" date="1787659200">- Fix use-after-free vulnerability in RTP SBC depayloader
  (CVE-2026-18299)
  Resolves: RHEL-246613</changelog>
</package>
<package pkgid="91ca84c2058845c7fca185b44696a6e7fb7090e11466d14584d1970508a7d358" name="gstreamer1-plugins-good-qt6" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2"/>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.4-1" date="1716984000">- 1.24.4</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.5-1" date="1718971200">- 1.24.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.5-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.6-1" date="1722254400">- 1.24.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
  Resolves: RHEL-70960, RHEL-70947, RHEL-70934</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73676</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156133, RHEL-156112</changelog>
</package>
<package pkgid="2e995b36b0bd2ce8a0fcd585c1a5579d2fdd7d0d23244d7577d348bdf3f901bb" name="gstreamer1-plugins-ugly-free" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.5-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.6-1" date="1722254400">- 1.24.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70409</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73677</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patches for CVE-2026-2920 and CVE-2026-2922
  Resolves: RHEL-156044, RHEL-156165</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1782216000">- Fix CVE-2026-53703: multiple security issues in rmdemux
  Resolves: RHEL-184439</changelog>
</package>
<package pkgid="5131d53de94dd301858ce3b3bdd2c1bb41d797e5bcb087e35fe04a3ac175c95e" name="gstreamer1-plugins-ugly-free" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2.2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70409</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73677</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patches for CVE-2026-2920 and CVE-2026-2922
  Resolves: RHEL-156044, RHEL-156165</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.1" date="1782216000">- Fix CVE-2026-53703: multiple security issues in rmdemux
  Resolves: RHEL-184439</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.26.7-2.2" date="1786363200">- Fix CVE-2026-19389: integer overflow vulnerabilities in asfdemux
  Resolves: RHEL-235515</changelog>
</package>
<package pkgid="bef7784c118cb6329d6990a3379aaf7a545adbf7bb978b62b125532e6d84f7d3" name="gstreamer1-plugins-ugly-free" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10_2"/>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.4-1" date="1716984000">- 1.24.4</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.5-1" date="1718971200">- 1.24.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.5-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.6-1" date="1722254400">- 1.24.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-70409</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73677</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-1" date="1762257600">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1774958400">- Add patches for CVE-2026-2920 and CVE-2026-2922
  Resolves: RHEL-156044, RHEL-156165</changelog>
</package>
<package pkgid="a2b2970d35469f1de9276537d8b187f4077ff120d5f2159cba8e7e3cb7c53e63" name="gstreamer1-rtsp-server" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10"/>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.3-1" date="1714478400">- 1.24.3</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.4-1" date="1716984000">- 1.24.4</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.5-1" date="1718971200">- 1.24.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.5-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.6-1" date="1722254400">- 1.24.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-71154</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73678</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1762344000">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
</package>
<package pkgid="4304d1143bb8ebc4951323888840a88c09565bcfb46ea0a934f469c645020bd5" name="gstreamer1-rtsp-server-devel" arch="x86_64">
  <version epoch="0" ver="1.26.7" rel="2.el10"/>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.3-1" date="1714478400">- 1.24.3</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.4-1" date="1716984000">- 1.24.4</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.5-1" date="1718971200">- 1.24.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.5-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.24.6-1" date="1722254400">- 1.24.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.24.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.10-1" date="1734004800">- Update to 1.24.10
  Resolves: RHEL-71154</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.24.11-1" date="1736856000">- Update to 1.24.11
  Resolves: RHEL-73678</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.2-1" date="1750161600">- Update to 1.26.2
  Resolves: DESKTOP-1858</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.26.7-2" date="1762344000">- Update to 1.26.7
  Resolves: RHEL-126057</changelog>
</package>
<package pkgid="ddbc0a80d3c28756bc3812b727f361ed318cb3a330f6e6512c190da51a8a364e" name="gtest" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="6.el10"/>
  <changelog author="Terje Rosten &lt;terje.rosten@ntnu.no&gt; - 1.13.0-1" date="1674043200">- 1.13.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Terje Rosten &lt;terje.rosten@ntnu.no&gt; - 1.14.0-1" date="1697371200">- 1.14.0</changelog>
  <changelog author="Benson Muite &lt;benson_muite@emailplus.org&gt; - 1.14.0-2" date="1700395200">- Use SPDX license identifiers</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.0-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3150d327231e94002750713118ca6af7f18ac74d9b368137b226e773fbc66f12" name="gtest-devel" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="6.el10"/>
  <changelog author="Terje Rosten &lt;terje.rosten@ntnu.no&gt; - 1.13.0-1" date="1674043200">- 1.13.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Terje Rosten &lt;terje.rosten@ntnu.no&gt; - 1.14.0-1" date="1697371200">- 1.14.0</changelog>
  <changelog author="Benson Muite &lt;benson_muite@emailplus.org&gt; - 1.14.0-2" date="1700395200">- Use SPDX license identifiers</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.0-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c7a9339fe20655663b240b002cc0fcaff10bb5288a4035fdb77990c6d04506c1" name="gtk-doc" arch="x86_64">
  <version epoch="0" ver="1.33.2" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.33.2-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jeremy Newton &lt;alexjnewt AT hotmail DOT com&gt; - 1.33.2-8" date="1675166400">- Fix ownership of cmake directory</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.33.2-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Neil Hanlon &lt;neil@shrug.pw&gt; - 1.33.2-10" date="1707480000">- Add tests/gobject/examples to path argument (#2254318 #2261221)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.33.2-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.33.2-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9ab3a80a4a9a1eb2c3e207154755dcd5a06aa3384faf1f646319a4c8271bb849" name="gtk-update-icon-cache" arch="x86_64">
  <version epoch="0" ver="3.24.43" rel="5.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.24.39-1" date="1702987200">- Update to 3.24.39</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.24.40-1" date="1705665600">- Update to 3.24.40</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.24.41-1" date="1706097600">- Update to 3.24.41</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.42-1" date="1717502400">- Update to 3.24.42
- Enable profiler support</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.42-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-1" date="1720612800">- Update to 3.24.43
- Resolves: RHEL-46990</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.24.43-2" date="1723723200">- Don't require package gtk-immodules-imsettings as it isn't part of
  RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
- Resolves: RHEL-38223</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.43-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-4" date="1741608000">- Stop relying on xpms in the testsuite
  Resolves: RHEL-69453
- Avoid criticals on headless systems
  Resolves: RHEL-40884
- Hide emoji chooser unless explicitly requested
  Resolves: RHEL-65214</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-5" date="1763121600">- Await more motion events before deactivating menus
  Resolves: RHEL-47037</changelog>
</package>
<package pkgid="6806d1335be20d458b119a58864fb7733f402a60593790afbe33c0745cf020e7" name="gtk-vnc2" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="7.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.3.1-1" date="1673870400">- Update to 1.3.1 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b754bbcababf07d5c060576fbb69b64396e81dce9e491c99b7077a71d766b429" name="gtk-vnc2-devel" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="7.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.3.1-1" date="1673870400">- Update to 1.3.1 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="580f42ce1551092a9dc274e08b825a7b043295f07530b45c11738e8fd0643fc5" name="gtk3" arch="x86_64">
  <version epoch="0" ver="3.24.43" rel="5.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.24.39-1" date="1702987200">- Update to 3.24.39</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.24.40-1" date="1705665600">- Update to 3.24.40</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.24.41-1" date="1706097600">- Update to 3.24.41</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.42-1" date="1717502400">- Update to 3.24.42
- Enable profiler support</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.42-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-1" date="1720612800">- Update to 3.24.43
- Resolves: RHEL-46990</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.24.43-2" date="1723723200">- Don't require package gtk-immodules-imsettings as it isn't part of
  RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
- Resolves: RHEL-38223</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.43-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-4" date="1741608000">- Stop relying on xpms in the testsuite
  Resolves: RHEL-69453
- Avoid criticals on headless systems
  Resolves: RHEL-40884
- Hide emoji chooser unless explicitly requested
  Resolves: RHEL-65214</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-5" date="1763121600">- Await more motion events before deactivating menus
  Resolves: RHEL-47037</changelog>
</package>
<package pkgid="648775c5f496445acce2470f6356fcc34acfe35112c9f339e35895ee73c1e0af" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.24.43" rel="5.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.24.39-1" date="1702987200">- Update to 3.24.39</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.24.40-1" date="1705665600">- Update to 3.24.40</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.24.41-1" date="1706097600">- Update to 3.24.41</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.42-1" date="1717502400">- Update to 3.24.42
- Enable profiler support</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.42-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-1" date="1720612800">- Update to 3.24.43
- Resolves: RHEL-46990</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.24.43-2" date="1723723200">- Don't require package gtk-immodules-imsettings as it isn't part of
  RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
- Resolves: RHEL-38223</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.43-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-4" date="1741608000">- Stop relying on xpms in the testsuite
  Resolves: RHEL-69453
- Avoid criticals on headless systems
  Resolves: RHEL-40884
- Hide emoji chooser unless explicitly requested
  Resolves: RHEL-65214</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-5" date="1763121600">- Await more motion events before deactivating menus
  Resolves: RHEL-47037</changelog>
</package>
<package pkgid="ecc62e8df3dc36debdf44ed09ed55a7cf512e7055be270e1249acbf444fb11d8" name="gtk3-devel-docs" arch="x86_64">
  <version epoch="0" ver="3.24.43" rel="5.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.24.39-1" date="1702987200">- Update to 3.24.39</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.24.40-1" date="1705665600">- Update to 3.24.40</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.24.41-1" date="1706097600">- Update to 3.24.41</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.42-1" date="1717502400">- Update to 3.24.42
- Enable profiler support</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.42-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-1" date="1720612800">- Update to 3.24.43
- Resolves: RHEL-46990</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.24.43-2" date="1723723200">- Don't require package gtk-immodules-imsettings as it isn't part of
  RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
- Resolves: RHEL-38223</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.43-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-4" date="1741608000">- Stop relying on xpms in the testsuite
  Resolves: RHEL-69453
- Avoid criticals on headless systems
  Resolves: RHEL-40884
- Hide emoji chooser unless explicitly requested
  Resolves: RHEL-65214</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-5" date="1763121600">- Await more motion events before deactivating menus
  Resolves: RHEL-47037</changelog>
</package>
<package pkgid="0c2f153959b4ecb7b5be68bf85a5ad4924bedc27f15d103aa55f6885aa8f0c03" name="gtk3-immodule-xim" arch="x86_64">
  <version epoch="0" ver="3.24.43" rel="5.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.24.39-1" date="1702987200">- Update to 3.24.39</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.24.40-1" date="1705665600">- Update to 3.24.40</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.24.41-1" date="1706097600">- Update to 3.24.41</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.42-1" date="1717502400">- Update to 3.24.42
- Enable profiler support</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.42-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-1" date="1720612800">- Update to 3.24.43
- Resolves: RHEL-46990</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.24.43-2" date="1723723200">- Don't require package gtk-immodules-imsettings as it isn't part of
  RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
- Resolves: RHEL-38223</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.43-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-4" date="1741608000">- Stop relying on xpms in the testsuite
  Resolves: RHEL-69453
- Avoid criticals on headless systems
  Resolves: RHEL-40884
- Hide emoji chooser unless explicitly requested
  Resolves: RHEL-65214</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-5" date="1763121600">- Await more motion events before deactivating menus
  Resolves: RHEL-47037</changelog>
</package>
<package pkgid="e2a6c0d8cccf60f964102ac03e6a04414c99f95c1ee0abe3952c3213a56ff9ea" name="gtk3-immodules" arch="x86_64">
  <version epoch="0" ver="3.24.43" rel="5.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.24.39-1" date="1702987200">- Update to 3.24.39</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.24.40-1" date="1705665600">- Update to 3.24.40</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.24.41-1" date="1706097600">- Update to 3.24.41</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.42-1" date="1717502400">- Update to 3.24.42
- Enable profiler support</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.42-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-1" date="1720612800">- Update to 3.24.43
- Resolves: RHEL-46990</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.24.43-2" date="1723723200">- Don't require package gtk-immodules-imsettings as it isn't part of
  RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
- Resolves: RHEL-38223</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.43-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-4" date="1741608000">- Stop relying on xpms in the testsuite
  Resolves: RHEL-69453
- Avoid criticals on headless systems
  Resolves: RHEL-40884
- Hide emoji chooser unless explicitly requested
  Resolves: RHEL-65214</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-5" date="1763121600">- Await more motion events before deactivating menus
  Resolves: RHEL-47037</changelog>
</package>
<package pkgid="1e268cdb547ebaa704008ae67e18523f6256ea6d6b1592a74bd01448aab60a21" name="gtk3-tests" arch="x86_64">
  <version epoch="0" ver="3.24.43" rel="5.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.24.39-1" date="1702987200">- Update to 3.24.39</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.24.40-1" date="1705665600">- Update to 3.24.40</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.24.41-1" date="1706097600">- Update to 3.24.41</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.42-1" date="1717502400">- Update to 3.24.42
- Enable profiler support</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.42-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-1" date="1720612800">- Update to 3.24.43
- Resolves: RHEL-46990</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.24.43-2" date="1723723200">- Don't require package gtk-immodules-imsettings as it isn't part of
  RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
- Resolves: RHEL-38223</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.24.43-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-4" date="1741608000">- Stop relying on xpms in the testsuite
  Resolves: RHEL-69453
- Avoid criticals on headless systems
  Resolves: RHEL-40884
- Hide emoji chooser unless explicitly requested
  Resolves: RHEL-65214</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.43-5" date="1763121600">- Await more motion events before deactivating menus
  Resolves: RHEL-47037</changelog>
</package>
<package pkgid="e8b39b4b9d91fe05f42f2b52e40552b5454aaf991c5cdbf7f6293f77018684cb" name="gtk4" arch="x86_64">
  <version epoch="0" ver="4.16.7" rel="4.el10"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.14.4-4" date="1717675200">- Stop using objcopy for resources</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.14.4-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 4.15.3-1" date="1721131200">- Update to 4.15.3</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.15.3-2" date="1725537600">- Fix missing popovers</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.3-1" date="1728043200">- Update to GTK 4.16.3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.16.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.7-1" date="1732536000">- Update to 4.16.7</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.7-2" date="1741608000">- Hide emoji chooser unless explicitly requested</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.7-3" date="1741608001">- Fix a focus problem in the file chooser</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.7-4" date="1742385600">- Use a gtk3 servers file if it exists</changelog>
</package>
<package pkgid="5b8f3d98af8ea747ad8698cc728538dafedd0bb49a4f418f06d6c07e02dd730f" name="gtk4-devel" arch="x86_64">
  <version epoch="0" ver="4.16.7" rel="4.el10"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.14.4-4" date="1717675200">- Stop using objcopy for resources</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.14.4-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 4.15.3-1" date="1721131200">- Update to 4.15.3</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.15.3-2" date="1725537600">- Fix missing popovers</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.3-1" date="1728043200">- Update to GTK 4.16.3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.16.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.7-1" date="1732536000">- Update to 4.16.7</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.7-2" date="1741608000">- Hide emoji chooser unless explicitly requested</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.7-3" date="1741608001">- Fix a focus problem in the file chooser</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.7-4" date="1742385600">- Use a gtk3 servers file if it exists</changelog>
</package>
<package pkgid="b6afa37a49712ec660d8afd175d58cf55faa7c3e4d6cf60cf8f22c00c921ef9c" name="gtk4-devel-docs" arch="noarch">
  <version epoch="0" ver="4.16.7" rel="4.el10"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.14.4-4" date="1717675200">- Stop using objcopy for resources</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.14.4-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 4.15.3-1" date="1721131200">- Update to 4.15.3</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.15.3-2" date="1725537600">- Fix missing popovers</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.3-1" date="1728043200">- Update to GTK 4.16.3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.16.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.7-1" date="1732536000">- Update to 4.16.7</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.7-2" date="1741608000">- Hide emoji chooser unless explicitly requested</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.7-3" date="1741608001">- Fix a focus problem in the file chooser</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.7-4" date="1742385600">- Use a gtk3 servers file if it exists</changelog>
</package>
<package pkgid="284deef13cfa28737642c12d80c0240c3415470b325c43b6b1ee08a67d50e7be" name="gtk4-devel-tools" arch="x86_64">
  <version epoch="0" ver="4.16.7" rel="4.el10"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.14.4-4" date="1717675200">- Stop using objcopy for resources</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.14.4-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 4.15.3-1" date="1721131200">- Update to 4.15.3</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.15.3-2" date="1725537600">- Fix missing popovers</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.3-1" date="1728043200">- Update to GTK 4.16.3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.16.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.7-1" date="1732536000">- Update to 4.16.7</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.7-2" date="1741608000">- Hide emoji chooser unless explicitly requested</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.7-3" date="1741608001">- Fix a focus problem in the file chooser</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 4.16.7-4" date="1742385600">- Use a gtk3 servers file if it exists</changelog>
</package>
<package pkgid="eef125b161a1eb1e6fa6d0332bcc5a9e732d71876ee73600b66cb57fa1ee5d20" name="gtkmm4.0" arch="x86_64">
  <version epoch="0" ver="4.13.2" rel="5.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.11.3-1" date="1686744000">- Update to 4.11.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.11.3-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.11.3-3" date="1691582400">- Drop COPYING.tools and remove GPL-2.0-or-later from license tag</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.12.0-1" date="1691582401">- Update to 4.12.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.13.1-1" date="1698321600">- Update to 4.13.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.13.2-1" date="1700654400">- Update to 4.13.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.13.2-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 4.13.2-3" date="1713355200">- gating enabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.13.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.13.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="4256bdea8d94d42a6e591db82a50160e6cbd6f490b1318f47f71230ffd1f2606" name="gtkmm4.0-devel" arch="x86_64">
  <version epoch="0" ver="4.13.2" rel="5.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.11.3-1" date="1686744000">- Update to 4.11.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.11.3-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.11.3-3" date="1691582400">- Drop COPYING.tools and remove GPL-2.0-or-later from license tag</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.12.0-1" date="1691582401">- Update to 4.12.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.13.1-1" date="1698321600">- Update to 4.13.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.13.2-1" date="1700654400">- Update to 4.13.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.13.2-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 4.13.2-3" date="1713355200">- gating enabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.13.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.13.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="8eafa689c0fcb6a6b491febcdb2636397498dd3890e9e8920b1c0531e180e186" name="gtkmm4.0-doc" arch="noarch">
  <version epoch="0" ver="4.13.2" rel="5.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.11.3-1" date="1686744000">- Update to 4.11.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.11.3-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.11.3-3" date="1691582400">- Drop COPYING.tools and remove GPL-2.0-or-later from license tag</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.12.0-1" date="1691582401">- Update to 4.12.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.13.1-1" date="1698321600">- Update to 4.13.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.13.2-1" date="1700654400">- Update to 4.13.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.13.2-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 4.13.2-3" date="1713355200">- gating enabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.13.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.13.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="aac9d96693ca19f6627c26b6d208ecf632eecd80c5f2bf49f2ed6911ae4c4c15" name="gtksourceview5" arch="x86_64">
  <version epoch="0" ver="5.14.2" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 5.9.0-1" date="1693915200">- Update to 5.9.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 5.10.0-1" date="1695124800">- Update to 5.10.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.10.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 5.11.0-1" date="1705924800">- Update to 5.11.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.11.0-2" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 5.11.0-3" date="1714046400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.11.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.11.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 5.14.2-1" date="1732190400">- Update to 5.14.2</changelog>
</package>
<package pkgid="baa6996034873b9f1ae2f61743684f2579983090997337f0fcf66457cb5d6162" name="gtksourceview5-devel" arch="x86_64">
  <version epoch="0" ver="5.14.2" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 5.9.0-1" date="1693915200">- Update to 5.9.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 5.10.0-1" date="1695124800">- Update to 5.10.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.10.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 5.11.0-1" date="1705924800">- Update to 5.11.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.11.0-2" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 5.11.0-3" date="1714046400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.11.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.11.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 5.14.2-1" date="1732190400">- Update to 5.14.2</changelog>
</package>
<package pkgid="eaae909fbdc871d9c3254077bac9a32a90b9a5046cafd0f4854ef7bb93bc98fb" name="gtksourceview5-tests" arch="x86_64">
  <version epoch="0" ver="5.14.2" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 5.9.0-1" date="1693915200">- Update to 5.9.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 5.10.0-1" date="1695124800">- Update to 5.10.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.10.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 5.11.0-1" date="1705924800">- Update to 5.11.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.11.0-2" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 5.11.0-3" date="1714046400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.11.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.11.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 5.14.2-1" date="1732190400">- Update to 5.14.2</changelog>
</package>
<package pkgid="1413202e09edf384ff21477388f489b3b8d9d720d8b7b0e149770a330fd876dd" name="guava" arch="noarch">
  <version epoch="0" ver="32.1.3" rel="6.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.1-5" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.1-6" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.1-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.1-8" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 32.1.3-1" date="1700568000">- Update to upstream version 32.1.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 32.1.3-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 32.1.3-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 32.1.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 32.1.3-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 32.1.3-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7c01a8b3e234b1aef5d9266489702deec60ccc53140ae325ea7a2be73d62e21c" name="guava-javadoc" arch="noarch">
  <version epoch="0" ver="32.1.3" rel="6.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.1-5" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.1-6" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.1-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.1-8" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 32.1.3-1" date="1700568000">- Update to upstream version 32.1.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 32.1.3-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 32.1.3-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 32.1.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 32.1.3-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 32.1.3-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="94aea815ba12246f2b8d2de0b35206e061b3dea0d2215f26c5088e255baca8a4" name="guava-testlib" arch="noarch">
  <version epoch="0" ver="32.1.3" rel="6.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.1-5" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.1-6" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.1-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.1-8" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 32.1.3-1" date="1700568000">- Update to upstream version 32.1.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 32.1.3-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 32.1.3-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 32.1.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 32.1.3-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 32.1.3-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fed19ccdd6b1bdfe345b98d1c0e659c1d2dbf10dd14d584f25bc13ff79507434" name="guestfs-tools" arch="x86_64">
  <version epoch="0" ver="1.54.0" rel="10.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.0-4" date="1717156800">- Rebuild for OCaml 5.2</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.0-5" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.52.0-6" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.1-1" date="1724760000">- New stable version 1.52.1
- Rebase on top of patches from RHEL 9.5
- Reboot Windows between each firstboot script to improve reliability
  resolves: RHEL-56319
- customize: Implement --inject-blnsvr operation
  resolves: RHEL-56330
- Add support for nbd+unix:// URIs
  resolves: RHEL-56332</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-2" date="1730289600">- Rebase to guestfs-tools 1.52.2
  resolves: RHEL-56812
- Replace Jansson with json-c
  resolves: RHEL-65295</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-3" date="1755086400">- Rebase to guestfs-tools 1.54.0
  resolves: RHEL-81734
- virt-builder, virt-v2v &amp; other tools with -v and --install causes dnf5 error
  resolves: RHEL-83201
- virt-drivers fails on opensuse guest if kernel-source is installed
  resolves: RHEL-92604
- builder: Update link to templates to use https
  resolves: RHEL-94873
- Fix SELinux relabelling in Linux split-/usr
  resolves: RHEL-109129</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-9" date="1770292800">- Synchronize spec file with Fedora
- Fix pnputils after virt-customize --inject-virtio-win
  resolves: RHEL-116537
- Unify spec files between Fedora and RHEL.
- Ensure a minimum version of libguestfs is installed at build and run time.
  resolves: RHEL-116716
- Remove virt-customize subscription-manager options
  resolves: RHEL-122307
- Add AV and GPOs to virt-inspector output
  resolves: RHEL-125955
- Expose XFS version in virt-filesystems
  resolves: RHEL-144074</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-10" date="1778155200">- Fix binary LUKS keys
  resolves: RHEL-174518
- Windows firstboot: Add exit code 250 to skip reboots
  Rework documentation for firstboot feature
  resolves: RHEL-174517
- Write sentinel file after firstboot scripts finish
  related: RHEL-161192
- Fix location of Windows Vista and Windows 2008 Server R1 drivers
  related: RHEL-174513</changelog>
</package>
<package pkgid="716486821506ba8c27f9419af8689f311f060d07ab5efb5c6eb2ff99ee7bc16c" name="guestfs-tools" arch="x86_64">
  <version epoch="0" ver="1.54.0" rel="9.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.0-4" date="1717156800">- Rebuild for OCaml 5.2</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.0-5" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.52.0-6" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.1-1" date="1724760000">- New stable version 1.52.1
- Rebase on top of patches from RHEL 9.5
- Reboot Windows between each firstboot script to improve reliability
  resolves: RHEL-56319
- customize: Implement --inject-blnsvr operation
  resolves: RHEL-56330
- Add support for nbd+unix:// URIs
  resolves: RHEL-56332</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-2" date="1730289600">- Rebase to guestfs-tools 1.52.2
  resolves: RHEL-56812
- Replace Jansson with json-c
  resolves: RHEL-65295</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-3" date="1755086400">- Rebase to guestfs-tools 1.54.0
  resolves: RHEL-81734
- virt-builder, virt-v2v &amp; other tools with -v and --install causes dnf5 error
  resolves: RHEL-83201
- virt-drivers fails on opensuse guest if kernel-source is installed
  resolves: RHEL-92604
- builder: Update link to templates to use https
  resolves: RHEL-94873
- Fix SELinux relabelling in Linux split-/usr
  resolves: RHEL-109129</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-9" date="1770292800">- Synchronize spec file with Fedora
- Fix pnputils after virt-customize --inject-virtio-win
  resolves: RHEL-116537
- Unify spec files between Fedora and RHEL.
- Ensure a minimum version of libguestfs is installed at build and run time.
  resolves: RHEL-116716
- Remove virt-customize subscription-manager options
  resolves: RHEL-122307
- Add AV and GPOs to virt-inspector output
  resolves: RHEL-125955
- Expose XFS version in virt-filesystems
  resolves: RHEL-144074</changelog>
</package>
<package pkgid="f05bdf137f17eb90bdd7ea6af60b8f8e87601119b4f8927b901cd8fbf8f6fe61" name="guestfs-tools-bash-completion" arch="noarch">
  <version epoch="0" ver="1.54.0" rel="10.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.0-4" date="1717156800">- Rebuild for OCaml 5.2</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.0-5" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.52.0-6" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.1-1" date="1724760000">- New stable version 1.52.1
- Rebase on top of patches from RHEL 9.5
- Reboot Windows between each firstboot script to improve reliability
  resolves: RHEL-56319
- customize: Implement --inject-blnsvr operation
  resolves: RHEL-56330
- Add support for nbd+unix:// URIs
  resolves: RHEL-56332</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-2" date="1730289600">- Rebase to guestfs-tools 1.52.2
  resolves: RHEL-56812
- Replace Jansson with json-c
  resolves: RHEL-65295</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-3" date="1755086400">- Rebase to guestfs-tools 1.54.0
  resolves: RHEL-81734
- virt-builder, virt-v2v &amp; other tools with -v and --install causes dnf5 error
  resolves: RHEL-83201
- virt-drivers fails on opensuse guest if kernel-source is installed
  resolves: RHEL-92604
- builder: Update link to templates to use https
  resolves: RHEL-94873
- Fix SELinux relabelling in Linux split-/usr
  resolves: RHEL-109129</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-9" date="1770292800">- Synchronize spec file with Fedora
- Fix pnputils after virt-customize --inject-virtio-win
  resolves: RHEL-116537
- Unify spec files between Fedora and RHEL.
- Ensure a minimum version of libguestfs is installed at build and run time.
  resolves: RHEL-116716
- Remove virt-customize subscription-manager options
  resolves: RHEL-122307
- Add AV and GPOs to virt-inspector output
  resolves: RHEL-125955
- Expose XFS version in virt-filesystems
  resolves: RHEL-144074</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-10" date="1778155200">- Fix binary LUKS keys
  resolves: RHEL-174518
- Windows firstboot: Add exit code 250 to skip reboots
  Rework documentation for firstboot feature
  resolves: RHEL-174517
- Write sentinel file after firstboot scripts finish
  related: RHEL-161192
- Fix location of Windows Vista and Windows 2008 Server R1 drivers
  related: RHEL-174513</changelog>
</package>
<package pkgid="c42b1f38744a0272b563a53ddd04d60efe783895d12b3c594b15a060996383ff" name="guestfs-tools-bash-completion" arch="noarch">
  <version epoch="0" ver="1.54.0" rel="9.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.0-4" date="1717156800">- Rebuild for OCaml 5.2</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.0-5" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.52.0-6" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.1-1" date="1724760000">- New stable version 1.52.1
- Rebase on top of patches from RHEL 9.5
- Reboot Windows between each firstboot script to improve reliability
  resolves: RHEL-56319
- customize: Implement --inject-blnsvr operation
  resolves: RHEL-56330
- Add support for nbd+unix:// URIs
  resolves: RHEL-56332</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-2" date="1730289600">- Rebase to guestfs-tools 1.52.2
  resolves: RHEL-56812
- Replace Jansson with json-c
  resolves: RHEL-65295</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-3" date="1755086400">- Rebase to guestfs-tools 1.54.0
  resolves: RHEL-81734
- virt-builder, virt-v2v &amp; other tools with -v and --install causes dnf5 error
  resolves: RHEL-83201
- virt-drivers fails on opensuse guest if kernel-source is installed
  resolves: RHEL-92604
- builder: Update link to templates to use https
  resolves: RHEL-94873
- Fix SELinux relabelling in Linux split-/usr
  resolves: RHEL-109129</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-9" date="1770292800">- Synchronize spec file with Fedora
- Fix pnputils after virt-customize --inject-virtio-win
  resolves: RHEL-116537
- Unify spec files between Fedora and RHEL.
- Ensure a minimum version of libguestfs is installed at build and run time.
  resolves: RHEL-116716
- Remove virt-customize subscription-manager options
  resolves: RHEL-122307
- Add AV and GPOs to virt-inspector output
  resolves: RHEL-125955
- Expose XFS version in virt-filesystems
  resolves: RHEL-144074</changelog>
</package>
<package pkgid="127698c14a244947c95881343010e68de5fb042b3156664371cba4b01caa875a" name="guestfs-tools-man-pages-ja" arch="noarch">
  <version epoch="0" ver="1.54.0" rel="10.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.0-4" date="1717156800">- Rebuild for OCaml 5.2</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.0-5" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.52.0-6" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.1-1" date="1724760000">- New stable version 1.52.1
- Rebase on top of patches from RHEL 9.5
- Reboot Windows between each firstboot script to improve reliability
  resolves: RHEL-56319
- customize: Implement --inject-blnsvr operation
  resolves: RHEL-56330
- Add support for nbd+unix:// URIs
  resolves: RHEL-56332</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-2" date="1730289600">- Rebase to guestfs-tools 1.52.2
  resolves: RHEL-56812
- Replace Jansson with json-c
  resolves: RHEL-65295</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-3" date="1755086400">- Rebase to guestfs-tools 1.54.0
  resolves: RHEL-81734
- virt-builder, virt-v2v &amp; other tools with -v and --install causes dnf5 error
  resolves: RHEL-83201
- virt-drivers fails on opensuse guest if kernel-source is installed
  resolves: RHEL-92604
- builder: Update link to templates to use https
  resolves: RHEL-94873
- Fix SELinux relabelling in Linux split-/usr
  resolves: RHEL-109129</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-9" date="1770292800">- Synchronize spec file with Fedora
- Fix pnputils after virt-customize --inject-virtio-win
  resolves: RHEL-116537
- Unify spec files between Fedora and RHEL.
- Ensure a minimum version of libguestfs is installed at build and run time.
  resolves: RHEL-116716
- Remove virt-customize subscription-manager options
  resolves: RHEL-122307
- Add AV and GPOs to virt-inspector output
  resolves: RHEL-125955
- Expose XFS version in virt-filesystems
  resolves: RHEL-144074</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-10" date="1778155200">- Fix binary LUKS keys
  resolves: RHEL-174518
- Windows firstboot: Add exit code 250 to skip reboots
  Rework documentation for firstboot feature
  resolves: RHEL-174517
- Write sentinel file after firstboot scripts finish
  related: RHEL-161192
- Fix location of Windows Vista and Windows 2008 Server R1 drivers
  related: RHEL-174513</changelog>
</package>
<package pkgid="e7ce46a5ea291abf2d4f6a04f1719bcc57a95f27c45f981e69c0e60d91d0a7d1" name="guestfs-tools-man-pages-ja" arch="noarch">
  <version epoch="0" ver="1.54.0" rel="9.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.0-4" date="1717156800">- Rebuild for OCaml 5.2</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.0-5" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.52.0-6" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.1-1" date="1724760000">- New stable version 1.52.1
- Rebase on top of patches from RHEL 9.5
- Reboot Windows between each firstboot script to improve reliability
  resolves: RHEL-56319
- customize: Implement --inject-blnsvr operation
  resolves: RHEL-56330
- Add support for nbd+unix:// URIs
  resolves: RHEL-56332</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-2" date="1730289600">- Rebase to guestfs-tools 1.52.2
  resolves: RHEL-56812
- Replace Jansson with json-c
  resolves: RHEL-65295</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-3" date="1755086400">- Rebase to guestfs-tools 1.54.0
  resolves: RHEL-81734
- virt-builder, virt-v2v &amp; other tools with -v and --install causes dnf5 error
  resolves: RHEL-83201
- virt-drivers fails on opensuse guest if kernel-source is installed
  resolves: RHEL-92604
- builder: Update link to templates to use https
  resolves: RHEL-94873
- Fix SELinux relabelling in Linux split-/usr
  resolves: RHEL-109129</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-9" date="1770292800">- Synchronize spec file with Fedora
- Fix pnputils after virt-customize --inject-virtio-win
  resolves: RHEL-116537
- Unify spec files between Fedora and RHEL.
- Ensure a minimum version of libguestfs is installed at build and run time.
  resolves: RHEL-116716
- Remove virt-customize subscription-manager options
  resolves: RHEL-122307
- Add AV and GPOs to virt-inspector output
  resolves: RHEL-125955
- Expose XFS version in virt-filesystems
  resolves: RHEL-144074</changelog>
</package>
<package pkgid="b3cb9ecffda10e8d6f09c95075b05b4fe4a5e5cf0584a4ad1def91ecd11c247f" name="guestfs-tools-man-pages-uk" arch="noarch">
  <version epoch="0" ver="1.54.0" rel="10.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.0-4" date="1717156800">- Rebuild for OCaml 5.2</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.0-5" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.52.0-6" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.1-1" date="1724760000">- New stable version 1.52.1
- Rebase on top of patches from RHEL 9.5
- Reboot Windows between each firstboot script to improve reliability
  resolves: RHEL-56319
- customize: Implement --inject-blnsvr operation
  resolves: RHEL-56330
- Add support for nbd+unix:// URIs
  resolves: RHEL-56332</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-2" date="1730289600">- Rebase to guestfs-tools 1.52.2
  resolves: RHEL-56812
- Replace Jansson with json-c
  resolves: RHEL-65295</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-3" date="1755086400">- Rebase to guestfs-tools 1.54.0
  resolves: RHEL-81734
- virt-builder, virt-v2v &amp; other tools with -v and --install causes dnf5 error
  resolves: RHEL-83201
- virt-drivers fails on opensuse guest if kernel-source is installed
  resolves: RHEL-92604
- builder: Update link to templates to use https
  resolves: RHEL-94873
- Fix SELinux relabelling in Linux split-/usr
  resolves: RHEL-109129</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-9" date="1770292800">- Synchronize spec file with Fedora
- Fix pnputils after virt-customize --inject-virtio-win
  resolves: RHEL-116537
- Unify spec files between Fedora and RHEL.
- Ensure a minimum version of libguestfs is installed at build and run time.
  resolves: RHEL-116716
- Remove virt-customize subscription-manager options
  resolves: RHEL-122307
- Add AV and GPOs to virt-inspector output
  resolves: RHEL-125955
- Expose XFS version in virt-filesystems
  resolves: RHEL-144074</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-10" date="1778155200">- Fix binary LUKS keys
  resolves: RHEL-174518
- Windows firstboot: Add exit code 250 to skip reboots
  Rework documentation for firstboot feature
  resolves: RHEL-174517
- Write sentinel file after firstboot scripts finish
  related: RHEL-161192
- Fix location of Windows Vista and Windows 2008 Server R1 drivers
  related: RHEL-174513</changelog>
</package>
<package pkgid="8acbd1ff51cb3d69f3cda97d8242f3f38b594aebc24867abb08d8f3bb97ef8f3" name="guestfs-tools-man-pages-uk" arch="noarch">
  <version epoch="0" ver="1.54.0" rel="9.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.0-4" date="1717156800">- Rebuild for OCaml 5.2</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.0-5" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.52.0-6" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.1-1" date="1724760000">- New stable version 1.52.1
- Rebase on top of patches from RHEL 9.5
- Reboot Windows between each firstboot script to improve reliability
  resolves: RHEL-56319
- customize: Implement --inject-blnsvr operation
  resolves: RHEL-56330
- Add support for nbd+unix:// URIs
  resolves: RHEL-56332</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-2" date="1730289600">- Rebase to guestfs-tools 1.52.2
  resolves: RHEL-56812
- Replace Jansson with json-c
  resolves: RHEL-65295</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-3" date="1755086400">- Rebase to guestfs-tools 1.54.0
  resolves: RHEL-81734
- virt-builder, virt-v2v &amp; other tools with -v and --install causes dnf5 error
  resolves: RHEL-83201
- virt-drivers fails on opensuse guest if kernel-source is installed
  resolves: RHEL-92604
- builder: Update link to templates to use https
  resolves: RHEL-94873
- Fix SELinux relabelling in Linux split-/usr
  resolves: RHEL-109129</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.54.0-9" date="1770292800">- Synchronize spec file with Fedora
- Fix pnputils after virt-customize --inject-virtio-win
  resolves: RHEL-116537
- Unify spec files between Fedora and RHEL.
- Ensure a minimum version of libguestfs is installed at build and run time.
  resolves: RHEL-116716
- Remove virt-customize subscription-manager options
  resolves: RHEL-122307
- Add AV and GPOs to virt-inspector output
  resolves: RHEL-125955
- Expose XFS version in virt-filesystems
  resolves: RHEL-144074</changelog>
</package>
<package pkgid="d42e5fdcf99ebc78a61fcdd38335edff4443c280b8e25334518130e3b3ed7584" name="guice-assistedinject" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-4" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-11" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e242051184096fc35e30bfcb31af06cb762b8f579a8f36af0e5b1ea419e572ad" name="guice-bom" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-4" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-11" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2153bbba9b764fb87eda59b1eaae2dbfe98003ee205d7ea9e535cba050edf854" name="guice-extensions" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-4" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-11" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cf8f53cf1475e9c22033dda96b65e39cf825f8bc4ca81f4674d05d1c32e4f287" name="guice-grapher" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-4" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-11" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2d446462fb7c888f645ccd4b6b49677ff6bca63a5c5924779ac65861f5d4198b" name="guice-jmx" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-4" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-11" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7810a2b2119b07b63e5cce2df59886c4f3e04c47d2e3460bd0d50632d3893d68" name="guice-jndi" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-4" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-11" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="459e3efbcd79ca0de9b83a110229952348b83f70c17055a964f40bea6187b3ed" name="guice-parent" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-4" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-11" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d1e1f2b970682a5836b184b073cee4ad6d501296504b8f8d6cc48c70ac6b43df" name="guice-servlet" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-4" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-11" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3ebe2e5df21dad4c037cee59d62cb3d9c9fcd169f5adc96f97c9ec9502000899" name="guice-throwingproviders" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-4" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-11" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="48f48de054e3ed5fb87a99a65a5f320bfe4159281cc2430f415524cfc979b8f4" name="gutenprint" arch="x86_64">
  <version epoch="0" ver="5.3.4" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 5.3.4-11" date="1680696000">- GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there
- Add other licenses to License tag and use SPDX identifiers to comply with FPG</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.3.4-11" date="1686052800">- Replace python3-chardet with python3-charset-normalizer</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-12" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 5.3.4-13" date="1700136000">- make gutenprint and gutenprint-libs-ui dependant on cups-client - both checks for existence of lp</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 5.3.4-14" date="1704283200">- Backport upstream patch to fix C compatibility issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.4-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.4-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="be4cba75ab998a2f56a1a1a233bb04f653142d82915b56f7221ba9429bac3dcb" name="gutenprint-cups" arch="x86_64">
  <version epoch="0" ver="5.3.4" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 5.3.4-11" date="1680696000">- GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there
- Add other licenses to License tag and use SPDX identifiers to comply with FPG</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.3.4-11" date="1686052800">- Replace python3-chardet with python3-charset-normalizer</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-12" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 5.3.4-13" date="1700136000">- make gutenprint and gutenprint-libs-ui dependant on cups-client - both checks for existence of lp</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 5.3.4-14" date="1704283200">- Backport upstream patch to fix C compatibility issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.4-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.4-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="79e69470b9b5bcfae60ab4c755b74faf94276f311a30b5b8eac04e92cd13dfb8" name="gutenprint-devel" arch="x86_64">
  <version epoch="0" ver="5.3.4" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 5.3.4-11" date="1680696000">- GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there
- Add other licenses to License tag and use SPDX identifiers to comply with FPG</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.3.4-11" date="1686052800">- Replace python3-chardet with python3-charset-normalizer</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-12" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 5.3.4-13" date="1700136000">- make gutenprint and gutenprint-libs-ui dependant on cups-client - both checks for existence of lp</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 5.3.4-14" date="1704283200">- Backport upstream patch to fix C compatibility issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.4-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.4-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4984c216cef5ba0f4057371a7570ac7288b27cc53bdc93e71b7424ce569ae699" name="gutenprint-doc" arch="x86_64">
  <version epoch="0" ver="5.3.4" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 5.3.4-11" date="1680696000">- GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there
- Add other licenses to License tag and use SPDX identifiers to comply with FPG</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.3.4-11" date="1686052800">- Replace python3-chardet with python3-charset-normalizer</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-12" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 5.3.4-13" date="1700136000">- make gutenprint and gutenprint-libs-ui dependant on cups-client - both checks for existence of lp</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 5.3.4-14" date="1704283200">- Backport upstream patch to fix C compatibility issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.4-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.4-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7db270f7397865c33b4918fe9e936f72b1c344da3788ccec6d996c889afdf4a0" name="gutenprint-libs" arch="x86_64">
  <version epoch="0" ver="5.3.4" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 5.3.4-11" date="1680696000">- GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there
- Add other licenses to License tag and use SPDX identifiers to comply with FPG</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.3.4-11" date="1686052800">- Replace python3-chardet with python3-charset-normalizer</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-12" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 5.3.4-13" date="1700136000">- make gutenprint and gutenprint-libs-ui dependant on cups-client - both checks for existence of lp</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 5.3.4-14" date="1704283200">- Backport upstream patch to fix C compatibility issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.4-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.3.4-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="11da398d778506db982083d67bd1af85388e0455a7648e2d0bb256858b942da2" name="gvfs" arch="x86_64">
  <version epoch="0" ver="1.54.4" rel="4.el10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-1" date="1719576000">- Update to 1.54.2</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-2" date="1722254400">- Drop the gvfs-tests subpackage</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-3" date="1722254401">- Drop the gphoto2 and mtp subpackages on s390(x) architectures</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-4" date="1727352000">- Add support for x-gvfs-trash mount option (RHEL-52355)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.54.3-1" date="1727438400">- Update to 1.54.3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.54.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="nmontero &lt;nmontero@redhat.com&gt; - 1.54.4-1" date="1730894400">- Update to 1.54.4</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.4-2" date="1739448000">- Add edit mode support for smb backend (RHEL-71089)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.54.4-3" date="1769428800">- udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.54.4-4" date="1770379200">- udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143935)</changelog>
</package>
<package pkgid="ddda92428ef9b4484099dbaf497506de6eaeae7f49b043c74de27468085bdf1f" name="gvfs-client" arch="x86_64">
  <version epoch="0" ver="1.54.4" rel="4.el10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-1" date="1719576000">- Update to 1.54.2</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-2" date="1722254400">- Drop the gvfs-tests subpackage</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-3" date="1722254401">- Drop the gphoto2 and mtp subpackages on s390(x) architectures</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-4" date="1727352000">- Add support for x-gvfs-trash mount option (RHEL-52355)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.54.3-1" date="1727438400">- Update to 1.54.3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.54.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="nmontero &lt;nmontero@redhat.com&gt; - 1.54.4-1" date="1730894400">- Update to 1.54.4</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.4-2" date="1739448000">- Add edit mode support for smb backend (RHEL-71089)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.54.4-3" date="1769428800">- udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.54.4-4" date="1770379200">- udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143935)</changelog>
</package>
<package pkgid="34475d58654d7a72ff0ee6440f8ed182798fbaed3c38f6a8495eca18b48510f9" name="gvfs-fuse" arch="x86_64">
  <version epoch="0" ver="1.54.4" rel="4.el10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-1" date="1719576000">- Update to 1.54.2</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-2" date="1722254400">- Drop the gvfs-tests subpackage</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-3" date="1722254401">- Drop the gphoto2 and mtp subpackages on s390(x) architectures</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-4" date="1727352000">- Add support for x-gvfs-trash mount option (RHEL-52355)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.54.3-1" date="1727438400">- Update to 1.54.3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.54.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="nmontero &lt;nmontero@redhat.com&gt; - 1.54.4-1" date="1730894400">- Update to 1.54.4</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.4-2" date="1739448000">- Add edit mode support for smb backend (RHEL-71089)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.54.4-3" date="1769428800">- udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.54.4-4" date="1770379200">- udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143935)</changelog>
</package>
<package pkgid="1fbfe524990f69c4714dbc8bc0edf3769687ae71563e98085f24d1640767fbea" name="gvfs-goa" arch="x86_64">
  <version epoch="0" ver="1.54.4" rel="4.el10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-1" date="1719576000">- Update to 1.54.2</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-2" date="1722254400">- Drop the gvfs-tests subpackage</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-3" date="1722254401">- Drop the gphoto2 and mtp subpackages on s390(x) architectures</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-4" date="1727352000">- Add support for x-gvfs-trash mount option (RHEL-52355)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.54.3-1" date="1727438400">- Update to 1.54.3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.54.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="nmontero &lt;nmontero@redhat.com&gt; - 1.54.4-1" date="1730894400">- Update to 1.54.4</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.4-2" date="1739448000">- Add edit mode support for smb backend (RHEL-71089)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.54.4-3" date="1769428800">- udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.54.4-4" date="1770379200">- udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143935)</changelog>
</package>
<package pkgid="cd8717b9918b231d7c316488712ff8693149275317647a09dc5ccbdd01ea2e16" name="gvfs-gphoto2" arch="x86_64">
  <version epoch="0" ver="1.54.4" rel="4.el10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-1" date="1719576000">- Update to 1.54.2</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-2" date="1722254400">- Drop the gvfs-tests subpackage</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-3" date="1722254401">- Drop the gphoto2 and mtp subpackages on s390(x) architectures</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-4" date="1727352000">- Add support for x-gvfs-trash mount option (RHEL-52355)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.54.3-1" date="1727438400">- Update to 1.54.3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.54.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="nmontero &lt;nmontero@redhat.com&gt; - 1.54.4-1" date="1730894400">- Update to 1.54.4</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.4-2" date="1739448000">- Add edit mode support for smb backend (RHEL-71089)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.54.4-3" date="1769428800">- udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.54.4-4" date="1770379200">- udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143935)</changelog>
</package>
<package pkgid="93dcbeaa3700b6a9040100a9401b01f944153f70d85214d4079ee2df4f2c2e18" name="gvfs-mtp" arch="x86_64">
  <version epoch="0" ver="1.54.4" rel="4.el10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-1" date="1719576000">- Update to 1.54.2</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-2" date="1722254400">- Drop the gvfs-tests subpackage</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-3" date="1722254401">- Drop the gphoto2 and mtp subpackages on s390(x) architectures</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-4" date="1727352000">- Add support for x-gvfs-trash mount option (RHEL-52355)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.54.3-1" date="1727438400">- Update to 1.54.3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.54.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="nmontero &lt;nmontero@redhat.com&gt; - 1.54.4-1" date="1730894400">- Update to 1.54.4</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.4-2" date="1739448000">- Add edit mode support for smb backend (RHEL-71089)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.54.4-3" date="1769428800">- udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.54.4-4" date="1770379200">- udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143935)</changelog>
</package>
<package pkgid="b777066db273b037bf4acbff2654e32fc34a3fbf54f043a8f82203ef6b237a8c" name="gvfs-smb" arch="x86_64">
  <version epoch="0" ver="1.54.4" rel="4.el10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-1" date="1719576000">- Update to 1.54.2</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-2" date="1722254400">- Drop the gvfs-tests subpackage</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-3" date="1722254401">- Drop the gphoto2 and mtp subpackages on s390(x) architectures</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.2-4" date="1727352000">- Add support for x-gvfs-trash mount option (RHEL-52355)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.54.3-1" date="1727438400">- Update to 1.54.3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.54.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="nmontero &lt;nmontero@redhat.com&gt; - 1.54.4-1" date="1730894400">- Update to 1.54.4</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.54.4-2" date="1739448000">- Add edit mode support for smb backend (RHEL-71089)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.54.4-3" date="1769428800">- udisks2: Use hash table for quicker lookups in the monitor (RHEL-143935)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.54.4-4" date="1770379200">- udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143935)</changelog>
</package>
<package pkgid="69861e9bbfb9bf64ce653118ea7f45cb0c0d06f5123049c2af6cf78134dae37d" name="gvisor-tap-vsock" arch="x86_64">
  <version epoch="6" ver="0.8.7" rel="1.el10"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:0.8.0-1" date="1731499200">- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
- Resolves: RHEL-67315</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:0.8.1-1" date="1733227200">- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
- Resolves: RHEL-67315</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:0.8.2-1" date="1737374400">- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
- Related: RHEL-58990</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:0.8.3-1" date="1738670400">- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
- Related: RHEL-58990</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:0.8.4-1" date="1741694400">- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
- Resolves: RHEL-83030</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:0.8.5-1" date="1742299200">- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:0.8.6-1" date="1746792000">- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:0.8.6-2" date="1749643200">- rebuild for CVE-2025-22871
- Resolves: RHEL-90008</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:0.8.7-1" date="1756468800">- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
- Resolves: RHEL-111948</changelog>
</package>
<package pkgid="df1b7dad32aa4910cdac7e9b4908084e3107c18c9a3c1d7aa2ce35b604c3a776" name="gvisor-tap-vsock-gvforwarder" arch="x86_64">
  <version epoch="6" ver="0.8.7" rel="1.el10"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:0.8.0-1" date="1731499200">- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
- Resolves: RHEL-67315</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:0.8.1-1" date="1733227200">- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
- Resolves: RHEL-67315</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:0.8.2-1" date="1737374400">- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
- Related: RHEL-58990</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:0.8.3-1" date="1738670400">- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
- Related: RHEL-58990</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:0.8.4-1" date="1741694400">- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
- Resolves: RHEL-83030</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:0.8.5-1" date="1742299200">- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:0.8.6-1" date="1746792000">- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
- Related: RHEL-80817</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:0.8.6-2" date="1749643200">- rebuild for CVE-2025-22871
- Resolves: RHEL-90008</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 6:0.8.7-1" date="1756468800">- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
- Resolves: RHEL-111948</changelog>
</package>
<package pkgid="a422fdc8d716ed3d3e4b5fbc2f960cb1a958f0e8b344485d737fd13f28f6f09e" name="gvnc" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="7.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.3.1-1" date="1673870400">- Update to 1.3.1 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e3b3780154e2b4ca76f257e2215a168e7a96d0d5b386a23c613a1c2455d618f1" name="gvnc-devel" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="7.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.3.1-1" date="1673870400">- Update to 1.3.1 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="33f242c79034f3c7c70ec36f0be44aa20b72ea0313dd15029d85d57aa2a6302f" name="gvnc-tools" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="7.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.3.1-1" date="1673870400">- Update to 1.3.1 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e14a957e855ca1070d6968baad60d0d8c7247a5afef08bbf33a92d486741b6aa" name="gvncpulse" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="7.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.3.1-1" date="1673870400">- Update to 1.3.1 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="09da0b0736add2b036834985bc0195a56f1b42e5e4dea8f912ed117d22478f89" name="gvncpulse-devel" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="7.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.3.1-1" date="1673870400">- Update to 1.3.1 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a19686661ad329ddd94ef61f778508692a4fdb85bc53334fa4ead22947a551d2" name="gzip" arch="x86_64">
  <version epoch="0" ver="1.13" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1.12-4" date="1681387200">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.12-6" date="1690977600">- Enbale the s390x optimizations
Resolves: rhbz#2175699</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.13-1" date="1706788800">- Rebase to gzip 1.13
- There's a bug on s390x: https://lists.gnu.org/archive/html/bug-gzip/2023-10/msg00000.html
- Revert the s390x build options in the next release
Resolves: rhbz#2232890</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.13-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.13-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e6f4f188872e9a715a959bb51e9dc5f683be9dec9e554e5604436a3bfac58b30" name="gzip" arch="x86_64">
  <version epoch="0" ver="1.13" rel="4.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.13-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.13-4" date="1786708800">- Fix an issue with a temporary file creations when mktemp is missing (41991)
- Fix a global buffer overflow vulnerability in the LZH decompression logic (41992)
Resolves: CVE-2026-41991
Resolves: CVE-2026-41992</changelog>
</package>
<package pkgid="380dc557159d2ff3be7eaea6e8dfe5fca55516fab41af4e94ba993dfab49f09f" name="ha-cloud-support" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-10" date="1745841600">- fence_ibm_powervs: fix plaintext token file support
  Resolves: RHEL-88569</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
</package>
<package pkgid="b1f0c73add7979b6d0bf2b1806ac2359b59c9228962e5e5207afe4db5264c04b" name="ha-cloud-support" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-11" date="1749816000">- fence_kubevirt: use hard poweroff
  Resolves: RHEL-95379</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
</package>
<package pkgid="696eed431108d92adc18ec0b86945452cb35c0ebbf2c8a6a4c6ea6a93ac64eab" name="ha-cloud-support" arch="x86_64">
  <version epoch="0" ver="4.16.0" rel="21.el10_2.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-12" date="1755000000">- fence_ibm_vpc: add apikey file support
  Resolves: RHEL-107504</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-13" date="1755691200">- fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff
  Resolves: RHEL-78241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-16" date="1758110400">- fence_ibm_powervs: update description of api-type parameter to show
  correct default value
  Resolves: RHEL-114752</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-17" date="1763467200">- fence_gce: fix node list limit
  Resolves: RHEL-128925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-18" date="1764158400">- fence_virt: print error messages to sderr
  Resolves: RHEL-125959</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-20" date="1769688000">- fence_ibm_vpc: fix missing statuses
  Resolves: RHEL-145086</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21" date="1771243200">- bundled pyasn1: fix CVE-2026-23490
  Resolves: RHEL-142445</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.1" date="1777464000">- bundled pyasn1: replace with dependency to fix CVE-2026-30922
- bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597
  Resolves: RHEL-157187, RHEL-155668</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.2" date="1780920000">- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526
  Resolves: RHEL-182314</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.16.0-21.5" date="1785326400">- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193812</changelog>
</package>
<package pkgid="ecf08633f444dcb6b5a2afbe746aadeff192933fea81e15698e685002ccaa87a" name="hamcrest" arch="noarch">
  <version epoch="0" ver="2.2" rel="17.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.2-10" date="1677153600">- Add Automatic-Module-Name manifest entry</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-11" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2-12" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-13" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-14" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2-16" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="be2595bf68145d10716198b7e2c89cc93077261c664a399bd10b9e50adc0e053" name="hamcrest-javadoc" arch="noarch">
  <version epoch="0" ver="2.2" rel="17.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.2-10" date="1677153600">- Add Automatic-Module-Name manifest entry</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-11" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2-12" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-13" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-14" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2-16" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="368531ba82751af96b2569956c3d4e7966a60583a21952516eb594753b0c3cf2" name="haproxy" arch="x86_64">
  <version epoch="0" ver="3.0.5" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.3-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.3-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 2.9.4-1" date="1707393600">- Update to 2.9.4 (#2250339)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.9.4-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 3.0.3-1" date="1721131200">- Update to 3.0.3 (RHEL-40620)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 3.0.5-1" date="1730289600">- Fix potential infinite loop condition h2_send (CVE-2024-45506, RHEL-57105)</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.0.5-4" date="1736337600">- Fix CVE-2024-53008
  Resolves: RHEL-69415</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.0.5-5" date="1760961600">- Add tmpfiles.d file to make systemd-tmpfiles create/set correct
  ownership/permissions of /var/lib/haproxy
  Resolves: RHEL-120174</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.0.5-6" date="1762430400">- Fix denial of service vulnerability in mjson library (CVE-2025-11230)
  Resolves: RHEL-126653</changelog>
</package>
<package pkgid="f817f6579628de71eacb64d201147aa2847935a88eaa2cca05264a2d7de43fc1" name="haproxy" arch="x86_64">
  <version epoch="0" ver="3.0.5" rel="6.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.9.4-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 3.0.3-1" date="1721131200">- Update to 3.0.3 (RHEL-40620)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 3.0.5-1" date="1730289600">- Fix potential infinite loop condition h2_send (CVE-2024-45506, RHEL-57105)</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.0.5-4" date="1736337600">- Fix CVE-2024-53008
  Resolves: RHEL-69415</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.0.5-5" date="1760961600">- Add tmpfiles.d file to make systemd-tmpfiles create/set correct
  ownership/permissions of /var/lib/haproxy
  Resolves: RHEL-120174</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.0.5-6" date="1762430400">- Fix denial of service vulnerability in mjson library (CVE-2025-11230)
  Resolves: RHEL-126653</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.0.5-6.1" date="1778068800">- peers: fix OOB heap write in dictionary cache update
  Resolves: RHEL-173335</changelog>
</package>
<package pkgid="8a6bb5f3afc88e3da5ce4c0631484ac44b3f33696953d2037c71ef49f41d02b4" name="haproxy" arch="x86_64">
  <version epoch="0" ver="3.0.5" rel="6.el10_2.2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 3.0.5-1" date="1730289600">- Fix potential infinite loop condition h2_send (CVE-2024-45506, RHEL-57105)</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.0.5-4" date="1736337600">- Fix CVE-2024-53008
  Resolves: RHEL-69415</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.0.5-5" date="1760961600">- Add tmpfiles.d file to make systemd-tmpfiles create/set correct
  ownership/permissions of /var/lib/haproxy
  Resolves: RHEL-120174</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.0.5-6" date="1762430400">- Fix denial of service vulnerability in mjson library (CVE-2025-11230)
  Resolves: RHEL-126653</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.0.5-6.1" date="1778068800">- peers: fix OOB heap write in dictionary cache update
  Resolves: RHEL-173335</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.0.5-6.2" date="1786363200">- Fix uint16_t overflow in FCGI demux record length (CVE-2026-55203)
  Resolves: RHEL-211068
- Fix NULL pointer dereference in hpack_dht_insert() (CVE-2026-55204)
  Resolves: RHEL-211081</changelog>
</package>
<package pkgid="bfcfbc9f4cff3c349526e1ccabf0d4fa8d1b27322bc93240f15107159632b47c" name="harfbuzz" arch="x86_64">
  <version epoch="0" ver="8.4.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.3.0-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.3.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 8.3.0-5" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.3.1-1" date="1710763200">- Update to 8.3.1 version (#2270012)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.4.0-1" date="1711886400">- Update to 8.4.0 version (#2272294)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.4.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.4.0-3" date="1723809600">- Resolves: RHEL-45541 - SAST fix</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.4.0-4" date="1724241600">- Resolves: RHEL-55386 - split libharfbuzz-cairo library into harfbuzz-cairo subpackage</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.4.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.4.0-6" date="1737374400">- Resolves: RHEL-74414 - Switch to using meson for build (#2277316)</changelog>
</package>
<package pkgid="5fdcb2e7d2da08ab8c9607387e03cf25e52bda256735b1fe11a37cb1d5c56b48" name="harfbuzz-cairo" arch="x86_64">
  <version epoch="0" ver="8.4.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.3.0-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.3.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 8.3.0-5" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.3.1-1" date="1710763200">- Update to 8.3.1 version (#2270012)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.4.0-1" date="1711886400">- Update to 8.4.0 version (#2272294)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.4.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.4.0-3" date="1723809600">- Resolves: RHEL-45541 - SAST fix</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.4.0-4" date="1724241600">- Resolves: RHEL-55386 - split libharfbuzz-cairo library into harfbuzz-cairo subpackage</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.4.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.4.0-6" date="1737374400">- Resolves: RHEL-74414 - Switch to using meson for build (#2277316)</changelog>
</package>
<package pkgid="0f723712d739084bfae7c8c6ad9d44ffc9ad13c09811ac1e00a2cfedb419f93d" name="harfbuzz-devel" arch="x86_64">
  <version epoch="0" ver="8.4.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.3.0-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.3.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 8.3.0-5" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.3.1-1" date="1710763200">- Update to 8.3.1 version (#2270012)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.4.0-1" date="1711886400">- Update to 8.4.0 version (#2272294)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.4.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.4.0-3" date="1723809600">- Resolves: RHEL-45541 - SAST fix</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.4.0-4" date="1724241600">- Resolves: RHEL-55386 - split libharfbuzz-cairo library into harfbuzz-cairo subpackage</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.4.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.4.0-6" date="1737374400">- Resolves: RHEL-74414 - Switch to using meson for build (#2277316)</changelog>
</package>
<package pkgid="6f6ba75f1ad1f87f4888138e186541cafc4fb998ab3fff69cdbd56d256789428" name="harfbuzz-icu" arch="x86_64">
  <version epoch="0" ver="8.4.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.3.0-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.3.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 8.3.0-5" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.3.1-1" date="1710763200">- Update to 8.3.1 version (#2270012)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.4.0-1" date="1711886400">- Update to 8.4.0 version (#2272294)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.4.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.4.0-3" date="1723809600">- Resolves: RHEL-45541 - SAST fix</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.4.0-4" date="1724241600">- Resolves: RHEL-55386 - split libharfbuzz-cairo library into harfbuzz-cairo subpackage</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.4.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 8.4.0-6" date="1737374400">- Resolves: RHEL-74414 - Switch to using meson for build (#2277316)</changelog>
</package>
<package pkgid="b4b091d76037a67c9a0cde44777a31c0f59b0d339da739d1fe1e1c0f551bdac4" name="hdparm" arch="x86_64">
  <version epoch="0" ver="9.65" rel="6.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 9.63-1" date="1670932800">- New upstream version 9.63</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.63-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 9.65-1" date="1676980800">- New upstream version 9.65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.65-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.65-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.65-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.65-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.65-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="de22723275bea837213e2b5f4d353849d855da65dc762ab9773188b471d34eb5" name="help2man" arch="noarch">
  <version epoch="0" ver="1.49.3" rel="7.el10"/>
  <changelog author="Ralf Cors&#xE9;pius &lt;corsepiu@fedoraproject.org&gt; - 1.49.2-3" date="1669636800">- Convert license to SPDX.</changelog>
  <changelog author="Ralf Cors&#xE9;pius &lt;corsepiu@fedoraproject.org&gt; - 1.49.3-1" date="1671105600">- Upstream update to 1.49.3.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.49.3-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.49.3-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.49.3-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.49.3-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.49.3-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.49.3-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="507f53a3864cf384c8eaa348f7af6c60838e0cd42fe001b9289d3a668aa440f2" name="hexedit" arch="x86_64">
  <version epoch="0" ver="1.6" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="98467d43d20e6afad1966f598ff9fac0d884c6e97cf302d8b5bacce2f6710018" name="hicolor-icon-theme" arch="noarch">
  <version epoch="0" ver="0.17" rel="20.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17-15" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17-17" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17-18" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.17-19" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.17-20" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9f9c2d969534d2142e0728364721c835f15949295bba762fe488456b44400242" name="highlight" arch="x86_64">
  <version epoch="0" ver="4.8" rel="6.el10"/>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 4.6-1" date="1686312000">- update to 4.6</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.6-2" date="1687262400">- Disable Qt5 GUI in RHEL 10 builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.6-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 4.6-5" date="1694260800">- opt-in to autochangelog</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 4.8-1" date="1694260801">- update to 4.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zachar &lt;lzachar@redhat.com&gt; - 4.8-5" date="1722427200">- Add gating and smoke test</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.8-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="9d4af04b633426815198185ed95fa4b50476df9cb7fc22960a906d2c0b28e8a7" name="hivex" arch="x86_64">
  <version epoch="0" ver="1.3.24" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.23-17" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.23-18" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.23-19" date="1716984000">- OCaml 5.2.0 for Fedora 41</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.3.23-20" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.3.23-21" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.23-22" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.23-23" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.23-24" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.24-1" date="1725883200">- Rebase to Fedora Rawhide
  resolves: RHEL-56804</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.24-2" date="1730289600">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c75883ef5769e637d3db2ea48d1aa329485b87e8b61c23295ec966e163743680" name="hivex-devel" arch="x86_64">
  <version epoch="0" ver="1.3.24" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.23-17" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.23-18" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.23-19" date="1716984000">- OCaml 5.2.0 for Fedora 41</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.3.23-20" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.3.23-21" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.23-22" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.23-23" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.23-24" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.24-1" date="1725883200">- Rebase to Fedora Rawhide
  resolves: RHEL-56804</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.24-2" date="1730289600">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8d5f1c153d6b634164f12da3b964f0d38c51f4bf8b5a727feb7a289defad9774" name="hivex-libs" arch="x86_64">
  <version epoch="0" ver="1.3.24" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.23-17" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.23-18" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.23-19" date="1716984000">- OCaml 5.2.0 for Fedora 41</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.3.23-20" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.3.23-21" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.23-22" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.23-23" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.23-24" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.24-1" date="1725883200">- Rebase to Fedora Rawhide
  resolves: RHEL-56804</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.24-2" date="1730289600">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b1ab4d2437ace477b42abdbc6bb16d4befcb31f28bc7613f0ab42edcb9dd9934" name="hostapd" arch="x86_64">
  <version epoch="0" ver="2.11" rel="2.el10"/>
  <changelog author="John W. Linville &lt;linville@redhat.com&gt; - 2.10-6" date="1681214400">- Correct path for example hostapd.conf cited in hostapd.conf.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 2.10-11" date="1720180800">- Fix potential regressions after rebase from f40
- Disable ENGINE API and enable SUITE B-192</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 2.11-1" date="1734004800">- Update to upstream version 2.11
  Resolves: RHEL-58728, RHEL-43497</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 2.11-2" date="1739448000">- Enable CONFIG_IEEE80211BE
  Resolves: RHEL-58728</changelog>
</package>
<package pkgid="0418138fca04f3b10998ad7617a54ed28a34faa2032a1600f1820bcad8d5cc19" name="hostapd-logwatch" arch="x86_64">
  <version epoch="0" ver="2.11" rel="2.el10"/>
  <changelog author="John W. Linville &lt;linville@redhat.com&gt; - 2.10-6" date="1681214400">- Correct path for example hostapd.conf cited in hostapd.conf.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 2.10-11" date="1720180800">- Fix potential regressions after rebase from f40
- Disable ENGINE API and enable SUITE B-192</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 2.11-1" date="1734004800">- Update to upstream version 2.11
  Resolves: RHEL-58728, RHEL-43497</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 2.11-2" date="1739448000">- Enable CONFIG_IEEE80211BE
  Resolves: RHEL-58728</changelog>
</package>
<package pkgid="b906295ec96e69c63302c6a2e439323bf51877a743642ba9d0d4a8308e4c2808" name="hostname" arch="x86_64">
  <version epoch="0" ver="3.23" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.23-10" date="1696248000">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23-11" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23-12" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="212559d13d193efb7f440149d95d963a3157eda4ea17dc03152a39bbad71e97c" name="hplip" arch="x86_64">
  <version epoch="0" ver="3.23.12" rel="10.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-1" date="1704715200">- 2252302 - hplip-3.23.12 is available</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-2" date="1705665600">- add fallback url to hp-plugin-download</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23.12-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23.12-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-5" date="1711022400">- RHEL-29931 hp-plugin-download uses removed curl option</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-6" date="1715083200">- RHEL-35696 Remove/migrate additional license tags</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-9" date="1750161600">- enable following links with curl in all use cases
  Resolves: RHEL-84817
- hp-plugin-download wrongly parsed file type
  Resolves: RHEL-97437</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-10" date="1752235200">- RHEL-102977 rpm -q --changelog hplip no longer lists changelog</changelog>
</package>
<package pkgid="90573ca1db3c307fdf6ac8efaab04c044a367b9b24335c6e74b887bf133ce2c2" name="hplip" arch="x86_64">
  <version epoch="0" ver="3.23.12" rel="10.el10_2.4"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-9" date="1750161600">- enable following links with curl in all use cases
  Resolves: RHEL-84817
- hp-plugin-download wrongly parsed file type
  Resolves: RHEL-97437</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-10" date="1752235200">- RHEL-102977 rpm -q --changelog hplip no longer lists changelog</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.2" date="1781006400">- CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via
  integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.4" date="1781524800">- Fix more leaks in hpcups</changelog>
</package>
<package pkgid="b06d76efecbaf1a6879e9ea40a0e1f19b302908178c13a72156cabb133e2ab22" name="hplip" arch="x86_64">
  <version epoch="0" ver="3.23.12" rel="10.el10_2.5"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-9" date="1750161600">- enable following links with curl in all use cases
  Resolves: RHEL-84817
- hp-plugin-download wrongly parsed file type
  Resolves: RHEL-97437</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-10" date="1752235200">- RHEL-102977 rpm -q --changelog hplip no longer lists changelog</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.2" date="1781006400">- CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via
  integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.4" date="1781524800">- Fix more leaks in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.5" date="1783080000">- RHEL-192007 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631</changelog>
</package>
<package pkgid="eec7a50657178b7d72e409a50b6e615d8c4b437dbcff2d0ad4c2375b15a7d6b5" name="hplip-common" arch="x86_64">
  <version epoch="0" ver="3.23.12" rel="10.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-1" date="1704715200">- 2252302 - hplip-3.23.12 is available</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-2" date="1705665600">- add fallback url to hp-plugin-download</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23.12-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23.12-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-5" date="1711022400">- RHEL-29931 hp-plugin-download uses removed curl option</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-6" date="1715083200">- RHEL-35696 Remove/migrate additional license tags</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-9" date="1750161600">- enable following links with curl in all use cases
  Resolves: RHEL-84817
- hp-plugin-download wrongly parsed file type
  Resolves: RHEL-97437</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-10" date="1752235200">- RHEL-102977 rpm -q --changelog hplip no longer lists changelog</changelog>
</package>
<package pkgid="4c9ad283279b6caea7ac469ad8bed5f6e267c8c317b61e8fc4e17d0389b54534" name="hplip-common" arch="x86_64">
  <version epoch="0" ver="3.23.12" rel="10.el10_2.4"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-9" date="1750161600">- enable following links with curl in all use cases
  Resolves: RHEL-84817
- hp-plugin-download wrongly parsed file type
  Resolves: RHEL-97437</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-10" date="1752235200">- RHEL-102977 rpm -q --changelog hplip no longer lists changelog</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.2" date="1781006400">- CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via
  integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.4" date="1781524800">- Fix more leaks in hpcups</changelog>
</package>
<package pkgid="50843c48818bcf90ebabb0bbeb8e41f5720813ce16ae72ad32d99d0d674ecef9" name="hplip-common" arch="x86_64">
  <version epoch="0" ver="3.23.12" rel="10.el10_2.5"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-9" date="1750161600">- enable following links with curl in all use cases
  Resolves: RHEL-84817
- hp-plugin-download wrongly parsed file type
  Resolves: RHEL-97437</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-10" date="1752235200">- RHEL-102977 rpm -q --changelog hplip no longer lists changelog</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.2" date="1781006400">- CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via
  integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.4" date="1781524800">- Fix more leaks in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.5" date="1783080000">- RHEL-192007 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631</changelog>
</package>
<package pkgid="4fa1e44dd1e7d0c6ddf55648369a269c65ed88ba2402c66dd50b486d78d8bbca" name="hplip-libs" arch="x86_64">
  <version epoch="0" ver="3.23.12" rel="10.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-1" date="1704715200">- 2252302 - hplip-3.23.12 is available</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-2" date="1705665600">- add fallback url to hp-plugin-download</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23.12-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23.12-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-5" date="1711022400">- RHEL-29931 hp-plugin-download uses removed curl option</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-6" date="1715083200">- RHEL-35696 Remove/migrate additional license tags</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-9" date="1750161600">- enable following links with curl in all use cases
  Resolves: RHEL-84817
- hp-plugin-download wrongly parsed file type
  Resolves: RHEL-97437</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-10" date="1752235200">- RHEL-102977 rpm -q --changelog hplip no longer lists changelog</changelog>
</package>
<package pkgid="e056222e9a859236cbb8e78c1d9fdc65196813b63cfd52ea27f78cc34fab77d1" name="hplip-libs" arch="x86_64">
  <version epoch="0" ver="3.23.12" rel="10.el10_2.4"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-9" date="1750161600">- enable following links with curl in all use cases
  Resolves: RHEL-84817
- hp-plugin-download wrongly parsed file type
  Resolves: RHEL-97437</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-10" date="1752235200">- RHEL-102977 rpm -q --changelog hplip no longer lists changelog</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.2" date="1781006400">- CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via
  integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.4" date="1781524800">- Fix more leaks in hpcups</changelog>
</package>
<package pkgid="1c367050d1b71afd4b6a389b7913106f62f88f3272c574fa12c31539a3147407" name="hplip-libs" arch="x86_64">
  <version epoch="0" ver="3.23.12" rel="10.el10_2.5"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-9" date="1750161600">- enable following links with curl in all use cases
  Resolves: RHEL-84817
- hp-plugin-download wrongly parsed file type
  Resolves: RHEL-97437</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-10" date="1752235200">- RHEL-102977 rpm -q --changelog hplip no longer lists changelog</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.2" date="1781006400">- CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via
  integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.4" date="1781524800">- Fix more leaks in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.5" date="1783080000">- RHEL-192007 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631</changelog>
</package>
<package pkgid="6bd240d2d7232cc6ea8b56728bcd2048246bfe8ad17c27eaa7b373aea2fb2bff" name="hscolour" arch="x86_64">
  <version epoch="0" ver="1.24.4" rel="29.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-14" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.24.4-15" date="1655467200">- rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-16" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.24.4-17" date="1676548800">- refresh to cabal-rpm-2.1.0 including SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.24.4-28" date="1690632000">- bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="3084ee3c2a831c4257ab1e8938750f7bb29e3cfb0d2ed10b5903802e0a5a7d28" name="hscolour-common" arch="noarch">
  <version epoch="0" ver="1.24.4" rel="29.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-14" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.24.4-15" date="1655467200">- rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-16" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.24.4-17" date="1676548800">- refresh to cabal-rpm-2.1.0 including SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 1.24.4-28" date="1690632000">- bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24.4-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="3c64d3255865708038d593e78dd601ac9d99ea8ae6b3b6650f34d70da320d200" name="hspell" arch="x86_64">
  <version epoch="0" ver="1.4" rel="23.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-17" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.4-18" date="1688731200">- Migrate to SPDX license expression</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-19" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-20" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-21" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4-22" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4-23" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6265a2b1f1e9e760216e9610988e312364791132c6ccc7b29100caf2a8cdda90" name="hspell-devel" arch="x86_64">
  <version epoch="0" ver="1.4" rel="23.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-17" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.4-18" date="1688731200">- Migrate to SPDX license expression</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-19" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-20" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-21" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4-22" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4-23" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="45908e58756bb2700bfd9989d223ffe7fbccc68ba31b0db2d8e6ddc7cc579540" name="htop" arch="x86_64">
  <version epoch="0" ver="3.3.0" rel="5.el10_0"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.2.1-3" date="1665144000">- platform-python is for rhel8 only.  rhel9 and above follow Fedoras python
  naming</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Mukundan Ragavan &lt;nonamedotc@gmail.com&gt; - 3.2.2-1" date="1676203200">- Update to v3.2.2</changelog>
  <changelog author="topazus &lt;topazus@outlook.com&gt; - 3.2.2-2" date="1676376000">- fix and update the configure options</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mukundan Ragavan &lt;nonamedotc@gmail.com&gt; - 3.3.0-1" date="1705320000">- Update to v3.3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 3.3.0-5" date="1721908800">- convert GPLv2+ license to SPDX</changelog>
</package>
<package pkgid="6ced9b9eb2cba2279781363dd7c0cd3374ce56de16a3fa8862ae640393d30c8c" name="httpcomponents-client" arch="noarch">
  <version epoch="0" ver="4.5.14" rel="9.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.13-8" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.14-1" date="1692187200">- Update to upstream version 4.5.14</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.14-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.14-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.5.14-4" date="1702382400">- Port to Mockito 5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.14-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.14-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.5.14-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.5.14-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.5.14-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c5f8ad96609e7164ab1667309aae69fa9244844a9431130eeb6607b9b64e391d" name="httpcomponents-client-javadoc" arch="noarch">
  <version epoch="0" ver="4.5.14" rel="9.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.13-8" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.14-1" date="1692187200">- Update to upstream version 4.5.14</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.14-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.14-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.5.14-4" date="1702382400">- Port to Mockito 5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.14-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.14-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.5.14-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.5.14-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.5.14-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="635f3f850e4e199672250cc15219315ba4a784d66a4e620c3d056e7dc1a207f7" name="httpcomponents-core" arch="noarch">
  <version epoch="0" ver="4.4.16" rel="9.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-1" date="1692187200">- Update to upstream version 4.4.16</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.4.16-4" date="1702382400">- Port to Mockito 5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.16-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.16-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.16-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.16-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-8" date="1722859200">- Port to OpenJDK 21
- Resolves: RHEL-52711</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.16-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="eaaa67dfded48efb5a203bf775b80b7d7ccfd253ef5fed7641c2773099e30165" name="httpcomponents-core-javadoc" arch="noarch">
  <version epoch="0" ver="4.4.16" rel="9.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-1" date="1692187200">- Update to upstream version 4.4.16</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.4.16-4" date="1702382400">- Port to Mockito 5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.16-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.16-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.16-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.16-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-8" date="1722859200">- Port to OpenJDK 21
- Resolves: RHEL-52711</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.16-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="de42de9c7c73fb6c8b3ee4a547ddfd1bda33501d675cbf6176bd25d72d1d3b08" name="httpcomponents-project" arch="noarch">
  <version epoch="0" ver="13" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 13-1" date="1692187200">- Update to upstream version 13</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 13-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 13-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 13-6" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 13-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4ba539837f1dd0b0718cd36872e299ef7f06bf60c9d90cff338d203dbebcb3a2" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-1" date="1737979200">- new version 2.4.63
- Resolves: RHEL-76358 - httpd rebase to 2.4.63
- Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket)
  configured in .htaccess doesn't work on httpd-2.4.62-1
- Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode
  characters in the name</changelog>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.63-2" date="1753358400">- mod_dav: add dav_get_base_path() API
  Resolves: RHEL-105255</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-3" date="1753704000">- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
</package>
<package pkgid="698b5be10ab17db8061c755e2a146626b5794dff1cf838f53f4aae3496305b86" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.1"/>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.63-2" date="1753358400">- mod_dav: add dav_get_base_path() API
  Resolves: RHEL-105255</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-3" date="1753704000">- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
</package>
<package pkgid="82e63336f1d7db491a94aee9d6b668394811e8788c869154f25b96bc52e0b32d" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.4"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-3" date="1753704000">- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.4" date="1782216000">- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for 
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951</changelog>
</package>
<package pkgid="cde8806a4a18ef57d6b0696d0b3323bfc999a45539cfe40375906429cd343961" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.4" date="1782216000">- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for 
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.5" date="1783598400">- Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
</package>
<package pkgid="99300507daf4f5e6970dc74347836caa03fab430cbe7c5b1f6f20027ea821686" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.4" date="1782216000">- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for 
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.5" date="1783598400">- Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.6" date="1787227200">- Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution
  or denial of service via use-after-free in mod_ldap per-directory
  configuration (CVE-2026-29167)</changelog>
</package>
<package pkgid="e4aa1408257409762f0aaf1f7398a9efa324cf28f2d88bacbf983c1cca291135" name="httpd-core" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-1" date="1737979200">- new version 2.4.63
- Resolves: RHEL-76358 - httpd rebase to 2.4.63
- Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket)
  configured in .htaccess doesn't work on httpd-2.4.62-1
- Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode
  characters in the name</changelog>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.63-2" date="1753358400">- mod_dav: add dav_get_base_path() API
  Resolves: RHEL-105255</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-3" date="1753704000">- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
</package>
<package pkgid="6591788f13efd62d4780bcb5ae916bf24088958cbcbb2697182af1dffa14812b" name="httpd-core" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.1"/>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.63-2" date="1753358400">- mod_dav: add dav_get_base_path() API
  Resolves: RHEL-105255</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-3" date="1753704000">- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
</package>
<package pkgid="31f1e349e02b3b264a04fef768613364f98febd27e85df131dfb9b9c8b92cd1e" name="httpd-core" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.4"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-3" date="1753704000">- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.4" date="1782216000">- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for 
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951</changelog>
</package>
<package pkgid="f97b4143ba6fe4d92b47ce7cb44ec6253bca77bcae4777c7d46056c932e2da80" name="httpd-core" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.4" date="1782216000">- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for 
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.5" date="1783598400">- Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
</package>
<package pkgid="5b77a2c5d39ea6fa04e4fcf5739a128b1e76178d125598db967bf92058c93dfe" name="httpd-core" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.4" date="1782216000">- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for 
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.5" date="1783598400">- Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.6" date="1787227200">- Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution
  or denial of service via use-after-free in mod_ldap per-directory
  configuration (CVE-2026-29167)</changelog>
</package>
<package pkgid="a612f198cf04bfba797f835a62251ad756a384793f39fb04546c0c6d816b8d62" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-1" date="1737979200">- new version 2.4.63
- Resolves: RHEL-76358 - httpd rebase to 2.4.63
- Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket)
  configured in .htaccess doesn't work on httpd-2.4.62-1
- Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode
  characters in the name</changelog>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.63-2" date="1753358400">- mod_dav: add dav_get_base_path() API
  Resolves: RHEL-105255</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-3" date="1753704000">- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
</package>
<package pkgid="5418f52c3fc086e8d661d836ed28956d8d120502e987cbffe7ad191e7175437a" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.1"/>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.63-2" date="1753358400">- mod_dav: add dav_get_base_path() API
  Resolves: RHEL-105255</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-3" date="1753704000">- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
</package>
<package pkgid="41fdb4ab93c77bf769e22c052d16d90df8a911b43517b349e5ec662525534ba3" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.4"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-3" date="1753704000">- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.4" date="1782216000">- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for 
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951</changelog>
</package>
<package pkgid="c4fbdc0a9087cf8deda5eca03c4747c3b6784ccc0a76ea8f1a39f17432763171" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.4" date="1782216000">- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for 
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.5" date="1783598400">- Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
</package>
<package pkgid="b87235e1a1deb97a2ac35aa8216b82851c586816a8bf60ef25ada60457f5a04c" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.4" date="1782216000">- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for 
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.5" date="1783598400">- Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.6" date="1787227200">- Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution
  or denial of service via use-after-free in mod_ldap per-directory
  configuration (CVE-2026-29167)</changelog>
</package>
<package pkgid="620a514bec43f18b7c85431ae58cba1248628be0c583b0668f3abc8f222259ac" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.63" rel="13.el10"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-1" date="1737979200">- new version 2.4.63
- Resolves: RHEL-76358 - httpd rebase to 2.4.63
- Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket)
  configured in .htaccess doesn't work on httpd-2.4.62-1
- Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode
  characters in the name</changelog>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.63-2" date="1753358400">- mod_dav: add dav_get_base_path() API
  Resolves: RHEL-105255</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-3" date="1753704000">- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
</package>
<package pkgid="12f3d622e66025e8b1f93324994cf9d6f15b9ef297208d7299b58c2c25d70d84" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.1"/>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.63-2" date="1753358400">- mod_dav: add dav_get_base_path() API
  Resolves: RHEL-105255</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-3" date="1753704000">- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
</package>
<package pkgid="ca2e34bd838cbcae62e3b8016d136f176d7139be57372b5ec6893ef5f777b8cf" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.4"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-3" date="1753704000">- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.4" date="1782216000">- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for 
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951</changelog>
</package>
<package pkgid="1d03e4b0ceec068133385dbe9391df8ed78d7a5249bf55439e319d083b69c775" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.4" date="1782216000">- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for 
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.5" date="1783598400">- Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
</package>
<package pkgid="a5ba7f194b23d9909332627be60c3fd9085e7dcad396ba94ca35ef98a7d15dc1" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.4" date="1782216000">- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for 
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.5" date="1783598400">- Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.6" date="1787227200">- Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution
  or denial of service via use-after-free in mod_ldap per-directory
  configuration (CVE-2026-29167)</changelog>
</package>
<package pkgid="efcf09331b22950e748243fec1da962b531a1f98efeb01f4cc7f68666e243009" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.63" rel="13.el10"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-1" date="1737979200">- new version 2.4.63
- Resolves: RHEL-76358 - httpd rebase to 2.4.63
- Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket)
  configured in .htaccess doesn't work on httpd-2.4.62-1
- Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode
  characters in the name</changelog>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.63-2" date="1753358400">- mod_dav: add dav_get_base_path() API
  Resolves: RHEL-105255</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-3" date="1753704000">- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
</package>
<package pkgid="720cb79416a3b763521c882b2e5c36923f8e9d8a05fbf06354abaa376556ba4a" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.1"/>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.63-2" date="1753358400">- mod_dav: add dav_get_base_path() API
  Resolves: RHEL-105255</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-3" date="1753704000">- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
</package>
<package pkgid="49f415b3e7032f430319a8047f39e8d1477ba790df8d02b6035044a82e9eae2a" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.4"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-3" date="1753704000">- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.4" date="1782216000">- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for 
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951</changelog>
</package>
<package pkgid="d6e16d6fa208e38bbeb4efa6a072b6b4fcde2ac45366930b374f9ec96304b8ac" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.4" date="1782216000">- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for 
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.5" date="1783598400">- Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
</package>
<package pkgid="2a9af9614debda58ddc105f72636f1f8b89bfa715b1b568e3d6ec5a3dc3b6611" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.4" date="1782216000">- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for 
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.5" date="1783598400">- Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.6" date="1787227200">- Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution
  or denial of service via use-after-free in mod_ldap per-directory
  configuration (CVE-2026-29167)</changelog>
</package>
<package pkgid="51d5b2ccb0d88813424444eaf8d99565a40f55158bc795bae0f847e9ccf7462e" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-1" date="1737979200">- new version 2.4.63
- Resolves: RHEL-76358 - httpd rebase to 2.4.63
- Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket)
  configured in .htaccess doesn't work on httpd-2.4.62-1
- Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode
  characters in the name</changelog>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.63-2" date="1753358400">- mod_dav: add dav_get_base_path() API
  Resolves: RHEL-105255</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-3" date="1753704000">- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
</package>
<package pkgid="3296c4ecc6fcadd7b014cdb6c2ee69ffe8a29524bd2aa25cceaa3fd1c685cc4f" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.1"/>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 2.4.63-2" date="1753358400">- mod_dav: add dav_get_base_path() API
  Resolves: RHEL-105255</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-3" date="1753704000">- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
</package>
<package pkgid="fc9f77989ccafe36762e8fb4ed7e36f84af8c7c3a184d074a94f524505a628b9" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.4"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-3" date="1753704000">- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.4" date="1782216000">- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for 
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951</changelog>
</package>
<package pkgid="06d0b37c417258d2ca7ba4b17f5b82c539f8913d4876bf86eb6243fab2a1a7fa" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-4" date="1755345600">- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.4" date="1782216000">- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for 
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.5" date="1783598400">- Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
</package>
<package pkgid="4994f2e9325f89ed4aa6e2de7e47519ca6d4e7daa888f329263f7093bd65e301" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.63" rel="13.el10_2.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-5" date="1757332800">- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-6" date="1761307200">- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-10" date="1762430400">- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-11" date="1766059200">- Resolves: RHEL-131829 - Fix error page messaging when error handling fails</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-12" date="1767355200">- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13" date="1770897600">- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.1" date="1778500800">- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.4" date="1782216000">- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for 
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.5" date="1783598400">- Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.63-13.6" date="1787227200">- Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution
  or denial of service via use-after-free in mod_ldap per-directory
  configuration (CVE-2026-29167)</changelog>
</package>
<package pkgid="269f4555a6581c61792990bc960bafc6a39a122826fa825720ed6b2c59b7972d" name="hunspell" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="9.el10"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.7.2-1" date="1672401600">- Resolves: rhbz#2157049 latest release</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.7.2-2" date="1673006400">- Resolves: rhbz#2158548 get hunspell-ko working again</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.7.2-4" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-6" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.2-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9f6f0a12b559b83232f59dcb61b341b086cff91810d7ab88e8e94532a5e7377b" name="hunspell-af" arch="noarch">
  <version epoch="0" ver="0.20080825" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080825-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.20080825-28" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080825-29" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080825-30" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080825-31" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20080825-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20080825-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="33a43e4f18cc765ebb73fbaf4be5a047ea8c6ac3daa203e97f71d3b6e94aed30" name="hunspell-ak" arch="noarch">
  <version epoch="0" ver="0.9.1" rel="20.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.1-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.9.1-13" date="1675166400">- Related: rhbz#1788504 drop use of libdb from rdfproc</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.9.1-14" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.1-15" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.9.1-16" date="1696507200">- Drop dependency on redland by dropping CREDITS file</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.1-17" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.1-18" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.1-19" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.1-20" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="030052eeb7d37f9e92e2761b8fe24459c6f70f2b8c02f6f9d99946dcf8b23abd" name="hunspell-am" arch="noarch">
  <version epoch="0" ver="0.20090704" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090704-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.20090704-26" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090704-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090704-28" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090704-29" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20090704-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20090704-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dc6b472bcbcc8f8316252c7f20fa6e635850781f2afe5caf5952c8b00abcd5fc" name="hunspell-ar" arch="noarch">
  <version epoch="0" ver="3.5" rel="24.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5-18" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.2-19" date="1677240000">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5-20" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5-21" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5-22" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5-24" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="97b1df0e7ce6eab316d170ca82c0b8f7d4318bc157a12389e59d9d6635a35db1" name="hunspell-as" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="34.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.0.3-28" date="1669204800">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-29" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-30" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-31" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-32" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.3-33" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.3-34" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0ec291f102428fdb5be98f5031950f9fd7e2894c7c15212c65f39da3f4d624e4" name="hunspell-ast" arch="noarch">
  <version epoch="1" ver="2.0" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.0-11" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0-12" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0-13" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0-14" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="90e7ca3b0a14bc4db3c66670e04de7b128a76b915a0c467241b5fe3d37459891" name="hunspell-az" arch="noarch">
  <version epoch="0" ver="0.20180807" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040827-29" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20040827-30" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20180807-1" date="1688558400">- Use new upstream which provide more wordlist
- Update to new SPDX license
- Resolves:rhbz#2218154 - Drop dependency on aspell</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20180807-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20180807-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20180807-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20180807-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20180807-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6f94c33d97eca9dcbb44eedbad306e9d782a1a603a05e0397fbd69b62e61d939" name="hunspell-be" arch="noarch">
  <version epoch="0" ver="1.1" rel="32.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-26" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1-27" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-30" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1-31" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="51f8f434fd707bc98849e2cb741faa3e6acefece846007cca69cf755faf65649" name="hunspell-ber" arch="noarch">
  <version epoch="0" ver="0.20080210" rel="32.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080210-26" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.20080210-27" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080210-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080210-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080210-30" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20080210-31" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20080210-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="95507d8302ca939ceeef959f3523d0b0ba15b58d0f2eb160339d20c6fa252cfb" name="hunspell-bg" arch="noarch">
  <version epoch="0" ver="4.3" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 4.3-26" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-28" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-29" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="89a88acd136a0848605ce9e7895a692cdf16300b6745f42f6af51bff016d1a3e" name="hunspell-bn" arch="noarch">
  <version epoch="1" ver="1.0.0" rel="27.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:1.0.0-21" date="1669204800">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-24" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-25" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-26" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-27" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6880dbc5536ed7852c92cabf63aa57b157a02714d23ede9e5f6e6feffb8c7b43" name="hunspell-br" arch="noarch">
  <version epoch="1" ver="0.15" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.15-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:0.15-13" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.15-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.15-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.15-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.15-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.15-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7cbe47624ccd0bab2d5568971508b714de038941553e18550fda301f3994d20e" name="hunspell-ca" arch="noarch">
  <version epoch="0" ver="3.0.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 2.3-23" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3-24" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 3.0.8-1" date="1691668800">- Resolves:rh#2230531 - Update to new Upstream Source</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1bd4f3d2d09bd873d01439a2012b76bdfb073e8fa595e870afb554727c6648d9" name="hunspell-cop" arch="noarch">
  <version epoch="0" ver="0.3" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.3-25" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-27" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-28" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3-29" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6bf746d4a34a97f5fd4e49500fc47083bf613a6d74d047a7da837fc0dbbf3496" name="hunspell-cs" arch="noarch">
  <version epoch="0" ver="20080822" rel="25.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20080822-19" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 20080822-20" date="1677240000">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20080822-21" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20080822-22" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20080822-23" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20080822-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20080822-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="32bc5090b5eb197740a1e21cc341f366142aaecb684c163663f62640ed86b23b" name="hunspell-csb" arch="noarch">
  <version epoch="0" ver="0.20190319" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050311-28" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.20050311-29" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20190319-1" date="1688558400">- Use new upstream which provide more wordlist
- Update to new SPDX license
- Resolves:rhbz#2218155 - Drop dependency on aspell</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20190319-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20190319-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20190319-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20190319-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20190319-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="aecb6a26830ad5df4ab2f86da2fc0d3550182db6addbce37263dc6021412b11e" name="hunspell-cv" arch="noarch">
  <version epoch="0" ver="1.06" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.06-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 1.02-13" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.06-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.06-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.06-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.06-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.06-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="52508a7444dd0925f9ba07b93c6c9764df5128879133d250c944acb0ea239bff" name="hunspell-cy" arch="noarch">
  <version epoch="0" ver="0.20040425" rel="35.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040425-29" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.20040425-30" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040425-31" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040425-32" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040425-33" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20040425-34" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20040425-35" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d643e6aeafda690525712e173d893e129771c4a29b44cb3101922e0d2289b5a6" name="hunspell-da" arch="noarch">
  <version epoch="0" ver="1.7.42" rel="26.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.42-20" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.7.42-21" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.42-22" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.42-23" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.42-24" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.42-25" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.42-26" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8e4b6c6f79f59ca489df434afdad4008d0de9460ba72e1e773a86e52b96cf83b" name="hunspell-de" arch="noarch">
  <version epoch="0" ver="20240224" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20161207-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20161207-7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20161207-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20161207-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20161207-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20240224-1" date="1737633600">- Resolves: RHEL-75998 - Backport from Fedora to remove BuildRequires: aspell</changelog>
</package>
<package pkgid="b25d5134b6a88ad0ad3958c3023da1c45552849ee9cb1287b725d12de61ab2df" name="hunspell-devel" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="9.el10"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.7.2-1" date="1672401600">- Resolves: rhbz#2157049 latest release</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.7.2-2" date="1673006400">- Resolves: rhbz#2158548 get hunspell-ko working again</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.7.2-4" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-6" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.2-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="25a13cd5623253c05c710319fb4526cb31d0257cbee1b6ad34fc335b387aa5f8" name="hunspell-dsb" arch="noarch">
  <version epoch="0" ver="1.4.8" rel="17.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.8-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.4.6-13" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.8-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.8-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.8-16" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.8-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0592437a8b5e3d5a897ad47ffa7a4339d409fcd0fbd55472cffa169fa6e2427d" name="hunspell-el" arch="noarch">
  <version epoch="1" ver="0.9" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.9-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.9-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="81a66140e4a1f73714ebac6ab3fb0e5a618080bad784e6cca553aeb4789e2427" name="hunspell-en" arch="noarch">
  <version epoch="0" ver="0.20201207" rel="11.el10"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20201207-2" date="1670414400">- use dict_dirname of hunspell for future rhel, etc.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20201207-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20201207-4" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 0.20201207-5" date="1687953600">- Move BR from aspell to hunspell.</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 0.20201207-6" date="1688558400">- Temporarily revert to aspell.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20201207-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20201207-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20201207-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20201207-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20201207-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="91550b6f7828b1115181d4235bebfc85d1042860d2413caf69c25b9bbe19719a" name="hunspell-en-GB" arch="noarch">
  <version epoch="0" ver="0.20201207" rel="11.el10"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20201207-2" date="1670414400">- use dict_dirname of hunspell for future rhel, etc.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20201207-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20201207-4" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 0.20201207-5" date="1687953600">- Move BR from aspell to hunspell.</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 0.20201207-6" date="1688558400">- Temporarily revert to aspell.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20201207-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20201207-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20201207-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20201207-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20201207-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="93ded86b77cd4059dacaf896357cdc3a1c3c845ed53d9c7b112cc74335ceb04b" name="hunspell-en-US" arch="noarch">
  <version epoch="0" ver="0.20201207" rel="11.el10"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20201207-2" date="1670414400">- use dict_dirname of hunspell for future rhel, etc.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20201207-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20201207-4" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 0.20201207-5" date="1687953600">- Move BR from aspell to hunspell.</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 0.20201207-6" date="1688558400">- Temporarily revert to aspell.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20201207-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20201207-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20201207-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20201207-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20201207-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ddabecc7a7b5c2bfd8a9f561140ddf4e7d2652ef50eea51410af2813bd819132" name="hunspell-eo" arch="noarch">
  <version epoch="1" ver="0.20100218" rel="17.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.20100218-11" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 1:0.20100218-12" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.20100218-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.20100218-14" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.20100218-15" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.20100218-16" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.20100218-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b6de3633e39fefcd370981424c8a21460529322ff7b26e23401e6efd7049fd1c" name="hunspell-es" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1350105212816f9376d52055209e248ad9d4b9cb417b6bd3415e33ce06eeb295" name="hunspell-es-AR" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f9a1e2e0dc6d793c479fb57f6087031aee902f4ea0caf7ebc4f1313b4b0f9f4c" name="hunspell-es-BO" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3292d23fb14d11c01220f2876588a443c47240b2e7e0e05127ce48b1c6dd7899" name="hunspell-es-CL" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3fd3af82ac42cc5a5a6ac1de4d24af7f5ea0ee738a09f02ac7584faa327a71e6" name="hunspell-es-CO" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="466a9c6bbc93f6b4f09072d44e80c3311ad9bfa0a9f813020b1d61d23399eaa5" name="hunspell-es-CR" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9b36187f4e50af60e9f8e64021f57e54fa217986ed607120f41bb4f955e2f523" name="hunspell-es-CU" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="66f0eb68e6631fd3a82fcbcc2f2a955a8362851faa4b69aa77c8a4131fea4841" name="hunspell-es-DO" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="37c0aec733b43d92d3b08959494639931ec1c6ad2656090b255a99d44010c07f" name="hunspell-es-EC" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="07a32d78b06a15a6781dd79cf169e61e758f566cdcfcfb39463252da2dad4820" name="hunspell-es-ES" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6499fee84faa74853f30278dcfc652df35de212ffd88e0f01f8da8998f0da72a" name="hunspell-es-GQ" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="03af2c571cd158f556a44cde816df77b1051219f0a786d62f91880b88cec1c45" name="hunspell-es-GT" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6634e2394ad38a8dc2ef59fe5880787f67dc03058726579ab9b804829de072d6" name="hunspell-es-HN" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a49912ce5cb76cd3844e3e0294d715f55bf1330abd944cd66f9fbc63a2edf7e2" name="hunspell-es-MX" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="58f6c18c1cc3c9244f2c456017b21d0142be7b20e318278777fbd2fcdb5be725" name="hunspell-es-NI" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a8e33f26140567bab6f1bf5c3160bc357ce6ff431ccc7d36d3a3839312b13ed3" name="hunspell-es-PA" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="18ece9befdc80ee3a29289e895f9147fcee1f200d74c86444ef58ace3788da2d" name="hunspell-es-PE" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bac25493fbc8fa82a734e74527c8501a4d32be3f95592826a58c1c29545d242b" name="hunspell-es-PR" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7686ef1c4c5a3c25675f2c3ec8c40852973850d5df72f2ddf67e35fe112037e2" name="hunspell-es-PY" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="858eb19792b9faf77b84e10842bf58bf9a7957f169cfabdc4c5ef42232ba8671" name="hunspell-es-SV" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1f015e2237f2355df64c909d2f1d1a0db0c1dde499c9bc9fee7a8ee222895560" name="hunspell-es-US" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9c256a04af37fdf5302c04846469da50a0dc9f03048ef318f9e425bcf2487713" name="hunspell-es-UY" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b7eb58664c918d9365e00cbc462babb5051778747e26d46f1d18ed7d8bedc1bd" name="hunspell-es-VE" arch="noarch">
  <version epoch="1" ver="2.8" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.2-15" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ismeel Olea &lt;ismael@olea.org&gt; - 1:2.8-1" date="1692705600">* Update to v2.8. Now includes variants for Equatorial Guinea.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.8-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="be196440bd66b8488f6dd4fbaedb3e424045b933f159dfae91d55406dee6924d" name="hunspell-et" arch="noarch">
  <version epoch="0" ver="0.20030606" rel="36.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20030606-30" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20030606-31" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20030606-32" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20030606-33" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20030606-34" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20030606-35" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20030606-36" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ce8ad04b928a57cca172befed2190c3e7d2bbfd735202aa41cb200b67bd604c3" name="hunspell-eu" arch="noarch">
  <version epoch="0" ver="5.1" rel="13.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 5.1-8" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1-10" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a4cd68d5addc19b1f86205a736549187ccdc129fa65f74b842a491bfcfc907f1" name="hunspell-fa" arch="noarch">
  <version epoch="0" ver="0.20070116" rel="36.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20070116-29" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20070116-30" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20070116-31" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20070116-32" date="1691496000">- Use new source archive generated using Farsi aspell dictionary
- Resolves:rhbz#2218158 - Drop dependency on aspell</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20070116-33" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20070116-34" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20070116-35" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20070116-36" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a34c6968b0f780bc8cf2e900acad15829855e7c41bc8c0d6c25d7ea9b35cc8c1" name="hunspell-filesystem" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="9.el10"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.7.2-1" date="1672401600">- Resolves: rhbz#2157049 latest release</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.7.2-2" date="1673006400">- Resolves: rhbz#2158548 get hunspell-ko working again</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.7.2-4" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-6" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.2-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="846c69ab058cde9403bf43f5996fa9720822f62d7e4433938a25a4d3e5963169" name="hunspell-fj" arch="noarch">
  <version epoch="0" ver="1.2" rel="32.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-26" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.2-27" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-30" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2-31" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7a4737ebca0daf5bb22138c1b2cee75db87789125a493d13672552955236a7cd" name="hunspell-fo" arch="noarch">
  <version epoch="0" ver="0.4.2" rel="25.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.2-21" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.2-22" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.2-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.2-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.2-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="732b91548312d1a1a9a3880dd216311c2e2938139f25686d4c17ea9d0b5d248c" name="hunspell-fr" arch="noarch">
  <version epoch="0" ver="6.2" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 6.0.2-13" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a8d2ed6ce64ab7b677b248811f8c8fe84e9b8dbec7e45e3aad5d07e7eb9f7264" name="hunspell-fur" arch="noarch">
  <version epoch="0" ver="0.20050912" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050912-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.20050912-28" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050912-29" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050912-30" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050912-31" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050912-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050912-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a3b7d3b67db46464c09bee6e7cea27395bf62accb6ef0761c4813bd45db843d0" name="hunspell-fy" arch="noarch">
  <version epoch="0" ver="3.0.0" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-13" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.0.0-14" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-15" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-16" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-17" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.0-18" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.0-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="90451ba717f00769db2a9dbf1ee737e43777455e03485a946cc8788256233dd8" name="hunspell-ga" arch="noarch">
  <version epoch="0" ver="5.1" rel="8.el10"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 5.1-1" date="1671192000">- latest release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 5.1-7" date="1722772800">- Resolves:RHEL-52482 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a269747b28a9ae1dff429ff94e5f1456c5a3acb187fd5f310986bcc848d8c3cd" name="hunspell-gd" arch="noarch">
  <version epoch="0" ver="2.6" rel="27.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6-21" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 2.6-22" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6-24" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6-25" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6-26" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6-27" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cd54c8378f76e84d0a357d98f705095291376c9f465680062f64751a02b5ea25" name="hunspell-gl" arch="noarch">
  <version epoch="0" ver="0.20080515" rel="32.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080515-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20080515-28" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080515-29" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080515-30" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20080515-31" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20080515-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="447f84d714c18f5a2c9af6a41e9652ad491ac8a429f913e482d45271dc6b0ada" name="hunspell-grc" arch="noarch">
  <version epoch="0" ver="2.1.5" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.5-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 2.1.5-28" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.5-29" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.5-30" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.5-31" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.5-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.5-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d652dbf74643271ab3127d852b24640e5c36cb9416b8bbff15b105edb68b01a0" name="hunspell-gu" arch="noarch">
  <version epoch="1" ver="1.0.0" rel="26.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:1.0.0-20" date="1669204800">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-21" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-22" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-23" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-24" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-25" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-26" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fd654d147e12fad7a71ac472344633c0cc21aa75a8d4eeeb1c86ca43fe2b190c" name="hunspell-gv" arch="noarch">
  <version epoch="0" ver="0.20040505" rel="35.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040505-28" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20040505-29" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040505-30" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20040505-31" date="1691064000">- Use new source archive generated using Manx aspell dictionary
- Resolves:rhbz#2218159 - Drop dependency on aspell</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040505-32" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040505-33" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20040505-34" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20040505-35" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1c96e6d291334079fb09e2238563977e382c5a281061e4082c522bb4f07ff57f" name="hunspell-haw" arch="noarch">
  <version epoch="0" ver="0.03" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.03-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.03-13" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.03-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.03-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.03-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.03-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.03-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d82dda0e23c1d36594b81ee36a4c16038629f27d644a9cae57a149129bd8af77" name="hunspell-he" arch="x86_64">
  <version epoch="0" ver="1.4" rel="23.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-17" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.4-18" date="1688731200">- Migrate to SPDX license expression</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-19" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-20" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-21" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4-22" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4-23" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5cf5e7034e918243f5de8e4df8eb624c7eb32e98209d894dff705e1104bde7ca" name="hunspell-hi" arch="noarch">
  <version epoch="1" ver="1.0.0" rel="26.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:1.0.0-20" date="1669204800">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-21" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-22" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-23" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-24" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-25" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-26" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0189cb2683802cf0abd8c839bc7a9a71c721b07058a92f1ac0d26fa9ae5f4a80" name="hunspell-hil" arch="noarch">
  <version epoch="1" ver="0.14" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.14-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:0.14-26" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.14-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.14-28" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.14-29" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.14-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.14-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="65e2448c5c7b5d00e3a30db52f16bef8f542b4f500e11f22e03877af3e2aadf8" name="hunspell-hr" arch="noarch">
  <version epoch="1" ver="0.20040608" rel="34.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.20040608-28" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:0.20040608-29" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.20040608-30" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.20040608-31" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.20040608-32" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.20040608-33" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.20040608-34" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="91094946ddfa743f7245cb5f0537003a7187868b324a77ddc6a5d1ed13eeb362" name="hunspell-hsb" arch="noarch">
  <version epoch="0" ver="0.20060327.3" rel="29.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20060327.3-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.0.20060327.3-24" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20060327.3-25" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20060327.3-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20060327.3-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20060327.3-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20060327.3-29" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="740230afad1bf898876e142517cf53600c18b878d3cbed251b379b70b2790689" name="hunspell-ht" arch="noarch">
  <version epoch="0" ver="0.06" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.06-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.06-25" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.06-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.06-27" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.06-28" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.06-29" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.06-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="156f340321ab666ebef83ad55ea30a7f418a31e6fa92de16e1954d331d48b399" name="hunspell-hu" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.6.1-25" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-27" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-28" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.1-29" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.1-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="682fe2ec840ff873d0d52e38de0ae7bd5846ffe51c6828eca270da48cc3329b4" name="hunspell-hy" arch="noarch">
  <version epoch="0" ver="0.20.0" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.0-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20.0-25" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.0-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.0-27" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.0-28" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20.0-29" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20.0-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="750450010d0321dcf23e8469f89ae1374ece0f340ebd6007a8cd9481862f6140" name="hunspell-ia" arch="noarch">
  <version epoch="0" ver="0.20050226" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050226-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20050226-28" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050226-29" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050226-30" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050226-31" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050226-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050226-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d8b675683688b603904501abd71a5c9a4a6d4a48a0b375d6714bc09ddd2ca63f" name="hunspell-id" arch="noarch">
  <version epoch="0" ver="0.20040812" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040812-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20040812-28" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040812-29" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040812-30" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040812-31" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20040812-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20040812-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b8551c5776cb7d23a2ac28d4810a1fbb43acefacb1ab3af27cfd76eb07c2309b" name="hunspell-is" arch="noarch">
  <version epoch="0" ver="0.20090823" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090823-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20090823-26" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090823-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090823-28" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090823-29" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20090823-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20090823-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="94fa345b5b46c121487eab7eb83597c6385d122767951e3581eeed59b5c8b1e7" name="hunspell-it" arch="noarch">
  <version epoch="0" ver="5.1.1" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4-30" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 2.4-31" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Mattia Verga &lt;mattia.verga@proton.me&gt; - 5.1.1-1" date="1686052800">- Use sources from pagure.io project</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.1-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.1-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pooja Yadav &lt;poyadav@redhat.com&gt; - 5.1.1-5" date="1714996800">- adding gating.yaml configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.1-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="cdd6a4ce306f50ce15b038b48d9f055dcc77e4a3b4c71effc0ecdd7fa2f6bcbc" name="hunspell-ka" arch="noarch">
  <version epoch="0" ver="0.1" rel="3.1.el10"/>
  <changelog author="Temuri Doghonadze &lt;temuri.doghonadze@gmail.com&gt; - 0.1-1" date="1740744000">- initial version</changelog>
  <changelog author="Temuri Doghonadze &lt;temuri.doghonadze@gmail.com&gt; - 0.1-2" date="1741089600">- Changed versioning
- spec file cleanup</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.1-3" date="1745496000">- Fix Source and URL tags
- Use correct upstream source tarball
- Add Supplements for langpacks-ka
- Enable this package to be used for EL &lt; 9 version</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.1-3.1" date="1750075200">- Add gating.yaml file</changelog>
</package>
<package pkgid="66520be8fe00bd1379352018df7c27af7525b38ff5518391d9d48d80d3dab2af" name="hunspell-kk" arch="noarch">
  <version epoch="0" ver="1.1" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1-26" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-28" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-29" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="79fe95102d2e0fa857d1596683d86e2a8a92501a6fe530323532bbbebe869bd5" name="hunspell-km" arch="noarch">
  <version epoch="0" ver="1.82" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.82-13" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.82-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.82-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6bebaecd41d993ece3b67953d5c5edfa6bc5e4a74cc5c95a3fa6a6fd7bfadf87" name="hunspell-kn" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara - 1.0.3-28" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-29" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-30" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-31" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.3-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.3-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cc01eddc4757229e46c7236b6122131acb895234d6cc2144f63904c357c18831" name="hunspell-ko" arch="noarch">
  <version epoch="0" ver="0.7.0" rel="21.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-15" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.7.0-16" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-17" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-18" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-19" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.0-20" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.0-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="15a245eb8a26d6e003b3959fbad77d0142aee855b6f0df46bc64c12de12be43c" name="hunspell-ku" arch="noarch">
  <version epoch="0" ver="0.21" rel="35.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21-29" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.21-30" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21-31" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21-32" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21-33" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21-34" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21-35" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5bca0092f7db1a3320d98c125dfee17726e46706fc5f60884e766cdfd4efa5e2" name="hunspell-ky" arch="noarch">
  <version epoch="0" ver="0.20090415" rel="34.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090415-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20090415-28" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20090415-29" date="1688644800">- Use new source archive generated using Kirghiz aspell dictionary
- Resolves:rhbz#2218161 - Drop dependency on aspell</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090415-30" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090415-31" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090415-32" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20090415-33" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20090415-34" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="294b7eb6c0666a6a549f947c845b368530a70ecd76e6d39266c73848b1f6dd2b" name="hunspell-la" arch="noarch">
  <version epoch="0" ver="0.20130331" rel="28.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20130331-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20130331-23" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20130331-24" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20130331-25" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20130331-26" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20130331-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20130331-28" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f3646705b1961772ae07dfadee46aec1159632f60b99538b5fcf342ca4b71e15" name="hunspell-lb" arch="noarch">
  <version epoch="0" ver="0.20121128" rel="26.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20121128-20" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20110821-21" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20121128-22" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20121128-23" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20121128-24" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20121128-25" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20121128-26" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2928065f01e5a23876ebdda18aabed6920554abd892313618a685c588fd44a2a" name="hunspell-ln" arch="noarch">
  <version epoch="0" ver="0.02" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.02-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.02-26" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.02-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.02-28" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.02-29" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.02-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.02-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2c82c0788b875750447acb83fbc29e0838b5d0ec7761b7f16837508a4420a50a" name="hunspell-lt" arch="noarch">
  <version epoch="0" ver="1.2.1" rel="35.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-29" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.2.1-30" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-31" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-32" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-33" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-34" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-35" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d536311fc35a5bbff23bc716bb2f2031e3f5332fb37f69f0449c6ee2335e3155" name="hunspell-lv" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.4.0-4" date="1677240000">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.4.0-8" date="1713182400">- Resolves: RHEL-32831 - The mythes package is not present in RHEL10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1b89b71a4a90b1ea94697911e85443954992e93164eb8750b3bfb15e6e622c76" name="hunspell-mai" arch="noarch">
  <version epoch="0" ver="1.0.1" rel="32.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.0.1-26" date="1669204800">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-30" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.1-31" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.1-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6bf0319dd8e08cba8716d7073b91bd0727e680bd042e627340c2e92dff8b7025" name="hunspell-mg" arch="noarch">
  <version epoch="0" ver="0.20050109" rel="35.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050109-29" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20050109-30" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050109-31" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050109-32" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050109-33" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050109-34" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050109-35" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1795ceb1c01c8923cf837d61b33c1c027c86ab58bb825726bab11d9e6ef3832f" name="hunspell-mi" arch="noarch">
  <version epoch="0" ver="0.20080630" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080630-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20080630-28" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080630-29" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080630-30" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080630-31" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20080630-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20080630-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1f80060bb6fd9080f359b2480a96b1c68ff82644f520a6e5891bcc64a33cd91a" name="hunspell-mk" arch="noarch">
  <version epoch="0" ver="0.20051126" rel="34.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20051126-28" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20051126-29" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20051126-30" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20051126-31" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20051126-32" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20051126-33" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20051126-34" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="16ba1c61ab86d833b140fefae062fda230202a55fc2be8fa22a2f8f3c1eeb46e" name="hunspell-ml" arch="noarch">
  <version epoch="0" ver="0.1" rel="35.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.1-29" date="1669204800">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1-30" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1-31" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1-32" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1-33" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1-34" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1-35" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3713ece030ad2a37c35dda1f0ae7ef43290dcd9b13a4b95c8468b116701a91e2" name="hunspell-mn" arch="noarch">
  <version epoch="0" ver="0.20080709" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080709-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20080709-28" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080709-29" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080709-30" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080709-31" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20080709-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20080709-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="76f5266b8664be142bde9dbf07c7ae07efbfeca2fc496794775fd852a4ece30f" name="hunspell-mos" arch="noarch">
  <version epoch="0" ver="0.20101130" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20101130-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20101130-25" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20101130-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20101130-27" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20101130-28" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20101130-29" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20101130-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="88de718d04423fe78105fd02e683fcc0d3abd948ae0536917f20a3efecf0811a" name="hunspell-mr" arch="noarch">
  <version epoch="1" ver="8.0" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:8.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:8.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:8.0-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:8.0-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:8.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:8.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d3a203e30adedfa8a59ff17416d56116b125ca2ab0963bc4b727bf6940759af7" name="hunspell-ms" arch="noarch">
  <version epoch="0" ver="0.20050117" rel="34.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050117-28" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20050117-29" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050117-30" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050117-31" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050117-32" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050117-33" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050117-34" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5c43c589e003cb9614877245c015c3fb969ef0eb5d7e0d61eecef9fd15049c2b" name="hunspell-mt" arch="noarch">
  <version epoch="0" ver="0.20110414" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110414-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20020708-13" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110414-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110414-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110414-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20110414-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20110414-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6c36b272f605ef2d3f98dd18e14d7ab3fd086e4f761202ea035b462c6bd1dfae" name="hunspell-nb" arch="noarch">
  <version epoch="1" ver="2.0.10" rel="26.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.10-18" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.0.10-19" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.10-20" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.10-21" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.10-22" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:2.0.10-23" date="1713182400">- Resolves: RHEL-32832 - The mythes package is not present in RHEL10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.10-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:2.0.10-25" date="1722859200">- Resolves:RHEL-52487 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.10-26" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a048c88441d904536bb032d7366a60f56c0d4a2aaf08cb4da29d1a1097ef30d9" name="hunspell-nds" arch="noarch">
  <version epoch="0" ver="0.1" rel="32.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1-26" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.1-27" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1-30" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1-31" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d4d15a2371f1427d5dd09d991443d74246d8de5b7f6395c2daa398ace36e3b3f" name="hunspell-ne" arch="noarch">
  <version epoch="0" ver="20080425" rel="34.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20080425-28" date="1669204800">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20080425-29" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20080425-30" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20080425-31" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20080425-32" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20080425-33" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20080425-34" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ab21606ef0d3a48e7ed129ffb3c06da422d6ac84edbb4889e1999b4e33545c74" name="hunspell-nl" arch="noarch">
  <version epoch="0" ver="2.20.19" rel="15.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.19-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 2.20.19-9" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.19-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.19-11" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.19-12" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.20.19-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.20.19-14" date="1722772800">- Resolves:RHEL-52797 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.20.19-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0a44ab042e3ff6ffc28f80097986fb10440ce721e46219784465ff702afcf337" name="hunspell-nn" arch="noarch">
  <version epoch="1" ver="2.0.10" rel="26.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.10-18" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.0.10-19" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.10-20" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.10-21" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.10-22" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:2.0.10-23" date="1713182400">- Resolves: RHEL-32832 - The mythes package is not present in RHEL10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.10-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:2.0.10-25" date="1722859200">- Resolves:RHEL-52487 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.10-26" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0aaf2da17bc73b778a150fcc8b022e4d6ae59f0af699020ec57ebda08d36ec60" name="hunspell-nr" arch="noarch">
  <version epoch="0" ver="0.20091030" rel="32.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20091030-26" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-28" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-29" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20091030-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20091030-31" date="1722600000">- Resolves:RHEL-52488 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20091030-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f5a7a93de705973cb6e749d1a391b7b2c92923944f6e7daa4d2ab1a3b733d2da" name="hunspell-nso" arch="noarch">
  <version epoch="0" ver="0.20091201" rel="32.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091201-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20091201-26" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091201-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091201-28" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091201-29" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20091201-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20091201-31" date="1722600000">- Resolves:RHEL-52489 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20091201-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c83d8b0097bda14c4fc90bf1101cf79125220afb8c8897793da3df9c85cea1e8" name="hunspell-ny" arch="noarch">
  <version epoch="1" ver="0.01" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.01-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:0.01-25" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.01-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.01-27" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.01-28" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.01-29" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:0.01-30" date="1722600000">- Resolves:RHEL-52490 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.01-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="96d3b9ca27a4edb2430f85e1a32662b8e7a8095126bdc8d82c73494383693519" name="hunspell-oc" arch="noarch">
  <version epoch="0" ver="1.5" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.6.2-13" date="1675166400">- Related: rhbz#1788504 drop use of libdb from rdfproc</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.6.2-14" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-15" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.5-1" date="1696507200">- Update to new upstream release 1.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.5-5" date="1722600000">- Resolves:RHEL-52493 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="42dbb856bffc05fbbd786d4993239b5fdb74a2edcc1dbbf56f0a49be8970410b" name="hunspell-om" arch="noarch">
  <version epoch="1" ver="0.04" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.04-26" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:0.04-27" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.04-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.04-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.04-30" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.04-31" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:0.04-32" date="1723464000">- Resolves:RHEL-52495 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.04-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1797918db38883141b124598ce6e0f776d1569e151c622aabc2a990d2270eee9" name="hunspell-or" arch="noarch">
  <version epoch="1" ver="1.0.0" rel="27.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:1.0.0-20" date="1669204800">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-21" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-22" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-23" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-24" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-25" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:1.0.0-26" date="1722686400">- Resolves:RHEL-52301 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-27" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="00c13ada08e9dce6d3df4e382d9b8895f07f99cb69cb9ce93873403f0bab0a9a" name="hunspell-pa" arch="noarch">
  <version epoch="1" ver="1.0.0" rel="27.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:1.0.0-20" date="1669204800">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-21" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-22" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-23" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-24" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-25" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:1.0.0-26" date="1722686400">- Resolves:RHEL-52302 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-27" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="681e43acdb5d7c5d33144ca007234e6fb242f4e15c4e690182510311fc9ceb4f" name="hunspell-pl" arch="noarch">
  <version epoch="0" ver="0.20240301" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20180707-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20160720-13" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Pawe&#x142; Marciniak &lt;sunwire+repo@gmail.com&gt; - 0.20230601-1" date="1686225600">- Update to the latest version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20230601-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20230601-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20230601-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20240301-1" date="1710849600">- Update to new upstream release 20240301 (#2270165)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20240301-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20240301-3" date="1723464000">- Resolves:RHEL-52496 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20240301-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="be2536cf432869cef479e5b55a6ac272f1eb71f19500e9f586299cdadfbcfd40" name="hunspell-pt" arch="noarch">
  <version epoch="0" ver="0.20131030" rel="15.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20131030-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20131030-9" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20131030-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20131030-11" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20131030-12" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20131030-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20131030-14" date="1723464000">- Resolves:RHEL-52497 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20131030-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="33d6b91cb761dd9ae6bb5e268a2524a18a31f28a2fcbb7c173d898d48b28125a" name="hunspell-pt-BR" arch="noarch">
  <version epoch="0" ver="0.20131030" rel="15.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20131030-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20131030-9" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20131030-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20131030-11" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20131030-12" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20131030-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20131030-14" date="1723464000">- Resolves:RHEL-52497 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20131030-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="209ed8476cda5af8f162074e6433361333a0698889edaf5c606551973222fa0f" name="hunspell-qu" arch="noarch">
  <version epoch="0" ver="0.9" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.9-25" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9-27" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9-28" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9-29" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.9-30" date="1723464000">- Resolves:RHEL-52498 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0d07e53fba538ac64c214a8ec1b50fa676cdb32794d2d2339b05776a802d3dda" name="hunspell-quh" arch="noarch">
  <version epoch="0" ver="0.20110816" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110816-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20110816-25" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110816-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110816-27" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110816-28" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20110816-29" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20110816-30" date="1723464000">- Resolves:RHEL-52499 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20110816-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="87f5c700a29497691fb1013e3c2c77e4edbe77aff074fb6fe5c94e5b24da6303" name="hunspell-ro" arch="noarch">
  <version epoch="0" ver="3.3.10" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 3.3.10-4" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-6" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.10-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 3.3.10-9" date="1723464000">- Resolves:RHEL-52500 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.10-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="38ce2101fbb0dbce2dcd73f1019fab581bfa1f77cef622d2ee118a5b51aea5e3" name="hunspell-ru" arch="noarch">
  <version epoch="1" ver="0.99g5" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.99g5-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamar &lt;caolanm@redhat.com&gt; 1:0.99g5-25" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.99g5-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.99g5-27" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.99g5-28" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.99g5-29" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:0.99g5-30" date="1723464000">- Resolves:RHEL-52501 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.99g5-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e5ed54a4d11ad69479ac67d81511a0d5399f0c428a54a7cde4cb3d23a4f60fe1" name="hunspell-rw" arch="noarch">
  <version epoch="0" ver="0.20050109" rel="34.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050109-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20050109-28" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050109-29" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050109-30" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050109-31" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050109-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20050109-33" date="1723464000">- Resolves:RHEL-52502 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050109-34" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6e6577ef583fe85236a2b90cc41fa9ed5e868a5186cb1072264224b7129776c3" name="hunspell-sc" arch="noarch">
  <version epoch="0" ver="0.20081101" rel="37.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20081101-30" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20081101-31" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20081101-32" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20081101-33" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20081101-34" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20081101-35" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20081101-36" date="1723464000">- Resolves:RHEL-52504 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20081101-37" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="02ae5a015ced04296874c98b767ee9fe01aebd31a2243fa952e95e667b7c7d7a" name="hunspell-se" arch="noarch">
  <version epoch="0" ver="1.0" rel="0.32.beta7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-0.25.beta7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.0-0.26.beta7" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-0.27.beta7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-0.28.beta7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-0.29.beta7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0-0.30.beta7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.0-0.31.beta7" date="1723464000">- Resolves:RHEL-52505 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0-0.32.beta7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b8ae765969e78aa0d6472e9f25959d2c59c76aa9280052e61c37d1d1751a406d" name="hunspell-shs" arch="noarch">
  <version epoch="0" ver="0.20090828" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090828-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20090828-25" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090828-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090828-27" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090828-28" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20090828-29" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20090828-30" date="1723464000">- Resolves:RHEL-52506 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20090828-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f6d58faba463ab7889cf247004849e155b0df143ac00f164c569041974bf87ff" name="hunspell-si" arch="noarch">
  <version epoch="0" ver="0.2.1" rel="34.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.2.1-27" date="1669204800">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.1-28" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.1-29" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.1-30" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.1-31" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.1-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.2.1-33" date="1722686400">- Resolves:RHEL-52303 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.1-34" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1e3d504b2196d3eff75d29fa4c9cd8a1346a4551b0e07c76cc0ffa1f3883742c" name="hunspell-sk" arch="noarch">
  <version epoch="1" ver="0.20110228" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.20110228-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:0.20110228-24" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.20110228-25" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.20110228-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.20110228-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.20110228-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:0.20110228-29" date="1723464000">- Resolves:RHEL-52507 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.20110228-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="aac0d90c8cb4a28bfeabe476fa3ad9d60648c5cd8cb781523f7c347ca62dceca" name="hunspell-sl" arch="noarch">
  <version epoch="0" ver="0.20070127" rel="36.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20070127-29" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20070127-30" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20070127-31" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20070127-32" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20070127-33" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20070127-34" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20070127-35" date="1723464000">- Resolves:RHEL-52508 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20070127-36" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e704ab7dd9f8a6c5f66b8aff97e450123eafb280a55dbc4a1cce417c1784857c" name="hunspell-smj" arch="noarch">
  <version epoch="0" ver="1.0" rel="0.32.beta7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-0.25.beta7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.0-0.26.beta7" date="1677153600">- initial version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-0.27.beta7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-0.28.beta7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-0.29.beta7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0-0.30.beta7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.0-0.31.beta7" date="1723464000">- Resolves:RHEL-52509 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0-0.32.beta7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a1355282483315a1a060ddbac31c9220f0f4dac22c037e4bcee6b4751a81772a" name="hunspell-so" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.0.2-25" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-27" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-28" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.2-29" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.0.2-30" date="1723464000">- Resolves:RHEL-52510 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.2-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7f097793d08cec731d974014a0341de516593858ed3df434455fe7b5387cbda9" name="hunspell-sq" arch="noarch">
  <version epoch="0" ver="1.6.4" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.6.4-24" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-25" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.4-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.6.4-29" date="1723464000">- Resolves:RHEL-52511 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.4-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="75b640085969e2f2938728b93f5d0f7eb31d8452df8abe664622bc35441f460a" name="hunspell-sr" arch="noarch">
  <version epoch="0" ver="0.20130330" rel="28.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20130330-21" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20130330-22" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20130330-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20130330-24" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20130330-25" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20130330-26" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20130330-27" date="1723464000">- Resolves:RHEL-52512 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20130330-28" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fc4b5393b4bc0788ed64b8af502d556daaf99ae06a15537a75acdbda4f776025" name="hunspell-ss" arch="noarch">
  <version epoch="0" ver="0.20091030" rel="32.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20091030-26" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-28" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-29" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20091030-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20091030-31" date="1723464000">- Resolves:RHEL-52513 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20091030-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b239bcd15038a5e08570ef56d02a4c2d910288eea02518b01f56603295d57b0a" name="hunspell-st" arch="noarch">
  <version epoch="0" ver="0.20091030" rel="32.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20091030-26" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-28" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-29" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20091030-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20091030-31" date="1723464000">- Resolves:RHEL-52514 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20091030-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="33aaef19288b3f6fb680fad90d1c111d18f7fc1b972223b3ce0ab0ea14e8f45a" name="hunspell-sv" arch="noarch">
  <version epoch="0" ver="2.28" rel="26.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.28-19" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 2.28-20" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.28-21" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.28-22" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.28-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.28-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.28-25" date="1723464000">- Resolves:RHEL-52515 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.28-26" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="eeddafbfb84068e67a2fe531c159eea0b8257bd1b12e49f1e46cdf6c820ffbe9" name="hunspell-sw" arch="noarch">
  <version epoch="0" ver="0.20050819" rel="34.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050819-28" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20050819-29" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050819-30" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050819-31" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050819-32" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050819-33" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050819-34" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ce2e4e9e86b978adbe39b4af739473a62e1a49d3d88cb8b5c55f38a5fd4ce736" name="hunspell-ta" arch="noarch">
  <version epoch="1" ver="1.0.0" rel="26.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:1.0.0-20" date="1669204800">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-21" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-22" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-23" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-24" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-25" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-26" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e04939e4caa9361eaabd9e7fb26e0cee7ae31a8539f2c145146fd1f9f13dfb4a" name="hunspell-te" arch="noarch">
  <version epoch="1" ver="1.0.0" rel="26.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:1.0.0-20" date="1669204800">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-21" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-22" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-23" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.0.0-24" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-25" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-26" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d59ba1df4b1e1ed1e84b092f7db0e1150c1b85586ab2ab16b7e58189a6c16513" name="hunspell-tet" arch="noarch">
  <version epoch="0" ver="0.20050108" rel="35.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050108-29" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20050108-30" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050108-31" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050108-32" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050108-33" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050108-34" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050108-35" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f41d8aa36b28788be84fe5a00730cd01b82dd34d3a43181a323413498fba734f" name="hunspell-th" arch="noarch">
  <version epoch="0" ver="0.20061212" rel="34.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20061212-28" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20061212-29" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20061212-30" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20061212-31" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20061212-32" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20061212-33" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20061212-34" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="71009cf4a314161666ab8a3194cba80e95847b0e4c112164d091536394ecf2d4" name="hunspell-ti" arch="noarch">
  <version epoch="0" ver="0.20090911" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090911-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20090911-25" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090911-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090911-27" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090911-28" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20090911-29" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20090911-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="79a5fb55c6aa47b78f8d82db7f61fa6f946d8ecf6fa4d5e5e778bb24570a3287" name="hunspell-tk" arch="noarch">
  <version epoch="1" ver="0.02" rel="29.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.02-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:0.02-24" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.02-25" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.02-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.02-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.02-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.02-29" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b44fa2dab50cb076672d7b516619bda8d2d075aab1d48e659039a291154de3b3" name="hunspell-tl" arch="noarch">
  <version epoch="0" ver="0.20050109" rel="34.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050109-28" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20050109-29" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050109-30" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050109-31" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050109-32" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050109-33" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050109-34" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4a10741b045d8f97affb5db52a821c6c51bcb2717308de53d15fc203a9ef6e69" name="hunspell-tn" arch="noarch">
  <version epoch="0" ver="0.20150904" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20150904-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20091101-13" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20150904-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20150904-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20150904-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20150904-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20150904-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="04bb82082bfd1e52312ab350f4ab94aac13f69dbdf1e1b461f32ddbaf0cdab6f" name="hunspell-tpi" arch="noarch">
  <version epoch="0" ver="0.07" rel="27.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.07-21" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.07-22" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.07-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.07-24" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.07-25" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.07-26" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.07-27" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ecc385dc0ebae1817ea79c1bc546af4dbab1a0f643952c6d76b92fcd5d1852a3" name="hunspell-tr" arch="noarch">
  <version epoch="0" ver="1.1.0" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.0-4" date="1677240000">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-6" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.0-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f290aaabbd4e825d72a587f6eca02f03992a20eb326c19def2d4b3bc88af9a45" name="hunspell-ts" arch="noarch">
  <version epoch="0" ver="0.20110323.1" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110323.1-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20091101-13" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110323.1-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110323.1-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110323.1-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20110323.1-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20110323.1-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="67b853ca61c92765c9a76a7c3c83aed10e7a26e6d7e034f37d5235170838561d" name="hunspell-uk" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.6.6-13" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.0-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.0-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e0573d7d317485976a4d4e765ebf03dd6805f2c414d60b541041b7e66c1ded07" name="hunspell-ur" arch="noarch">
  <version epoch="0" ver="0.64" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.64-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.64-26" date="1675166400">- Related: rhbz#1788504 drop use of libdb from rdfproc</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.64-27" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.64-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.64-29" date="1696507200">- Drop dependency on redland by dropping CREDITS file</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.64-30" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.64-31" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.64-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.64-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2d8e5f865d8d7faef15b3a6926584d1bc9914089fbe9c251c74cc32114a25d85" name="hunspell-uz" arch="noarch">
  <version epoch="0" ver="0.6" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.6-28" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-29" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-30" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-31" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="84b6f998190868b5546d2fea030e38302dbd72a4cbfeccdf0f992754e8dec75e" name="hunspell-ve" arch="noarch">
  <version epoch="0" ver="0.20091030" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20091030-26" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-28" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-29" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20091030-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20091030-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="870354716f5650b961dcad7fd3f33e9e048c28d3b694e55d99cc0f7fb93d8656" name="hunspell-vi" arch="noarch">
  <version epoch="0" ver="0.20120418" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20120418-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20080604-13" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20120418-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20120418-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20120418-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20120418-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20120418-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="93d2b3ec48f5d6d6a13e19be702f7111d73ac92287f451462a5fe5c435683027" name="hunspell-wa" arch="noarch">
  <version epoch="0" ver="0.4.17" rel="26.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.17-20" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.4.17-21" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.17-22" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.17-23" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.17-24" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.17-25" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.17-26" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="318229f7d0ac16953d9ae819833224f45e2625fe535b46b165b3de0b2d4682a8" name="hunspell-xh" arch="noarch">
  <version epoch="0" ver="0.20091030" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20091030-26" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-28" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20091030-29" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20091030-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20091030-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1c71f0644ca6071842823fb76ba5c90a61732966aa3bd24de7e41439252b49d2" name="hunspell-yi" arch="noarch">
  <version epoch="0" ver="1.1" rel="32.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-26" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1-27" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-30" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1-31" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ed658d3cb6eda105221e3ddcafacf8be51c0cb3e86294e25042c53b5772a2639" name="hunspell-zu" arch="noarch">
  <version epoch="0" ver="0.20100126" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20100126-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20100126-28" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20100126-29" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20100126-30" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20100126-31" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20100126-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20100126-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7ab33323e6186162d0a94a822db38f6d0c1ec027e625b190a7338712dd612fcf" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.379" rel="10.8.el10"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.379-10.0" date="1718625600">- Update pci, usb and vendor ids
  Resolves: RHEL-42416</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.379-10.1" date="1724068800">- Update pci, usb and vendor ids
  Resolves: RHEL-42439</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.379-10.2" date="1733486400">- Update pci, usb and vendor ids
  Resolves: RHEL-57032</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.379-10.3" date="1738843200">- Update pci, usb and vendor ids
  Resolves: RHEL-57033</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.379-10.4" date="1739361600">- Update pci and vendor ids
  Resolves: RHEL-57033</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.379-10.5" date="1750075200">- Update pci, usb and vendor ids
  Resolves: RHEL-78366</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.379-10.6" date="1755518400">- Update pci, usb and vendor ids
  Resolves: RHEL-78367</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.379-10.7" date="1765800000">- Update pci, usb and vendor ids
  Resolves: RHEL-110937</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.379-10.8" date="1771243200">- Update pci and vendor ids
  Resolves: RHEL-110938</changelog>
</package>
<package pkgid="52b6037757016a9fc22bad39da19972dde3863c5e9cb404ef5c43f4749620198" name="hwdata-devel" arch="noarch">
  <version epoch="0" ver="0.379" rel="10.8.el10"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.379-10.0" date="1718625600">- Update pci, usb and vendor ids
  Resolves: RHEL-42416</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.379-10.1" date="1724068800">- Update pci, usb and vendor ids
  Resolves: RHEL-42439</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.379-10.2" date="1733486400">- Update pci, usb and vendor ids
  Resolves: RHEL-57032</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.379-10.3" date="1738843200">- Update pci, usb and vendor ids
  Resolves: RHEL-57033</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.379-10.4" date="1739361600">- Update pci and vendor ids
  Resolves: RHEL-57033</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.379-10.5" date="1750075200">- Update pci, usb and vendor ids
  Resolves: RHEL-78366</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.379-10.6" date="1755518400">- Update pci, usb and vendor ids
  Resolves: RHEL-78367</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.379-10.7" date="1765800000">- Update pci, usb and vendor ids
  Resolves: RHEL-110937</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.379-10.8" date="1771243200">- Update pci and vendor ids
  Resolves: RHEL-110938</changelog>
</package>
<package pkgid="5acde39c9f191f3a6af9b02c8ea1b6f427436b17c68a0fed94890f9d47a83ab5" name="hwloc" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="4.el10"/>
  <changelog author="Krzysztof Pawlinski &lt;kpawlins@redhat.com&gt; - 2.5.0-6" date="1760702400">- utils/gather-topology: fix a grep warning when matching octal sequence</changelog>
</package>
<package pkgid="5ac41baf9dfa12ad514b0082a750c79164bf9255acd84b98b166f8a65ffefd19" name="hwloc-devel" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="4.el10"/>
  <changelog author="Krzysztof Pawlinski &lt;kpawlins@redhat.com&gt; - 2.5.0-6" date="1760702400">- utils/gather-topology: fix a grep warning when matching octal sequence</changelog>
</package>
<package pkgid="07ef4bd768756b611d760a78a371e88d75fcf8c053f19083cb500229fdcf40ad" name="hwloc-gui" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="4.el10"/>
  <changelog author="Krzysztof Pawlinski &lt;kpawlins@redhat.com&gt; - 2.5.0-6" date="1760702400">- utils/gather-topology: fix a grep warning when matching octal sequence</changelog>
</package>
<package pkgid="f39c8903295938aadba4b8903fed74c38d7afea57e95a51767a01f2b7bbf900e" name="hwloc-libs" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="4.el10"/>
  <changelog author="Krzysztof Pawlinski &lt;kpawlins@redhat.com&gt; - 2.5.0-6" date="1760702400">- utils/gather-topology: fix a grep warning when matching octal sequence</changelog>
</package>
<package pkgid="6d626033635baa27a81248279aa80837ef1fc9987a7838c1350bcb73b6774271" name="hyperv-daemons" arch="x86_64">
  <version epoch="0" ver="0" rel="0.50.20220731git.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.42.20220731git" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.43.20220731git" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.44.20220731git" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0-0.45.20220731git" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.46.20220731git" date="1719489600">- hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679]
- hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679]
- hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679]
- hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679]
- hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679]
- hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679]
- hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679]
- hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679]
- hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679]
- hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679]
- hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679]
- hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679]
- hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679]
- hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679]
- Resolves: RHEL-40107
  ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.)
- Resolves: RHEL-40679
  ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.47.20220731git" date="1720785600">- hpvd-Add-support-for-newer-fcopy-UIO-hyperv-daemons-modul.patch [RHEL-44617]
- hpvd-Update-main-package-dep-on-hypervfcopyd-to-be-arch-d.patch [RHEL-44617]
- hpvd-Particularize-hypervfcopyd-service-requirements.patch [RHEL-44617]
- Resolves: RHEL-44617
  ([RHEL-10] Add support for fcopy UIO userland module in hyperv-daemons)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0-0.48.20220731git" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.49.20220731git" date="1732190400">- hpvd-Use-NetworkManager-information-to-report-DHCP-settin.patch [RHEL-65434]
- hpvd-Use-NetworkManager-information-to-report-DNS-setting.patch [RHEL-65434]
- Resolves: RHEL-65434
  ([Hyper-V][RHEL-10]KVP daemon inspects /etc/sysconfig/network-scripts/ifcfg-* files to get DHCP information)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.50.20220731git" date="1750420800">- hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95811]
- Resolves: RHEL-95811
  ([RHEL-10]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 10)</changelog>
</package>
<package pkgid="d8fc4bb5fa2ae7ce008071d93ddba9e2825dabff66c9d831745f58cf9fb7a4a0" name="hyperv-daemons-license" arch="noarch">
  <version epoch="0" ver="0" rel="0.50.20220731git.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.42.20220731git" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.43.20220731git" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.44.20220731git" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0-0.45.20220731git" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.46.20220731git" date="1719489600">- hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679]
- hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679]
- hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679]
- hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679]
- hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679]
- hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679]
- hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679]
- hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679]
- hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679]
- hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679]
- hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679]
- hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679]
- hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679]
- hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679]
- Resolves: RHEL-40107
  ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.)
- Resolves: RHEL-40679
  ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.47.20220731git" date="1720785600">- hpvd-Add-support-for-newer-fcopy-UIO-hyperv-daemons-modul.patch [RHEL-44617]
- hpvd-Update-main-package-dep-on-hypervfcopyd-to-be-arch-d.patch [RHEL-44617]
- hpvd-Particularize-hypervfcopyd-service-requirements.patch [RHEL-44617]
- Resolves: RHEL-44617
  ([RHEL-10] Add support for fcopy UIO userland module in hyperv-daemons)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0-0.48.20220731git" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.49.20220731git" date="1732190400">- hpvd-Use-NetworkManager-information-to-report-DHCP-settin.patch [RHEL-65434]
- hpvd-Use-NetworkManager-information-to-report-DNS-setting.patch [RHEL-65434]
- Resolves: RHEL-65434
  ([Hyper-V][RHEL-10]KVP daemon inspects /etc/sysconfig/network-scripts/ifcfg-* files to get DHCP information)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.50.20220731git" date="1750420800">- hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95811]
- Resolves: RHEL-95811
  ([RHEL-10]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 10)</changelog>
</package>
<package pkgid="f7bd682032a806518d213f8c98293cea5b97dbe818ed860187152be2d38494d7" name="hyperv-tools" arch="noarch">
  <version epoch="0" ver="0" rel="0.50.20220731git.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.42.20220731git" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.43.20220731git" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.44.20220731git" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0-0.45.20220731git" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.46.20220731git" date="1719489600">- hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679]
- hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679]
- hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679]
- hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679]
- hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679]
- hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679]
- hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679]
- hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679]
- hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679]
- hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679]
- hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679]
- hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679]
- hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679]
- hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679]
- Resolves: RHEL-40107
  ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.)
- Resolves: RHEL-40679
  ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.47.20220731git" date="1720785600">- hpvd-Add-support-for-newer-fcopy-UIO-hyperv-daemons-modul.patch [RHEL-44617]
- hpvd-Update-main-package-dep-on-hypervfcopyd-to-be-arch-d.patch [RHEL-44617]
- hpvd-Particularize-hypervfcopyd-service-requirements.patch [RHEL-44617]
- Resolves: RHEL-44617
  ([RHEL-10] Add support for fcopy UIO userland module in hyperv-daemons)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0-0.48.20220731git" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.49.20220731git" date="1732190400">- hpvd-Use-NetworkManager-information-to-report-DHCP-settin.patch [RHEL-65434]
- hpvd-Use-NetworkManager-information-to-report-DNS-setting.patch [RHEL-65434]
- Resolves: RHEL-65434
  ([Hyper-V][RHEL-10]KVP daemon inspects /etc/sysconfig/network-scripts/ifcfg-* files to get DHCP information)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.50.20220731git" date="1750420800">- hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95811]
- Resolves: RHEL-95811
  ([RHEL-10]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 10)</changelog>
</package>
<package pkgid="26834f6f55e6747ab18cf612c38344d8006d924acf55b691d61fa2d5ae7ba1c4" name="hypervfcopyd" arch="x86_64">
  <version epoch="0" ver="0" rel="0.50.20220731git.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.42.20220731git" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.43.20220731git" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.44.20220731git" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0-0.45.20220731git" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.46.20220731git" date="1719489600">- hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679]
- hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679]
- hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679]
- hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679]
- hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679]
- hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679]
- hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679]
- hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679]
- hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679]
- hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679]
- hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679]
- hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679]
- hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679]
- hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679]
- Resolves: RHEL-40107
  ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.)
- Resolves: RHEL-40679
  ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.47.20220731git" date="1720785600">- hpvd-Add-support-for-newer-fcopy-UIO-hyperv-daemons-modul.patch [RHEL-44617]
- hpvd-Update-main-package-dep-on-hypervfcopyd-to-be-arch-d.patch [RHEL-44617]
- hpvd-Particularize-hypervfcopyd-service-requirements.patch [RHEL-44617]
- Resolves: RHEL-44617
  ([RHEL-10] Add support for fcopy UIO userland module in hyperv-daemons)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0-0.48.20220731git" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.49.20220731git" date="1732190400">- hpvd-Use-NetworkManager-information-to-report-DHCP-settin.patch [RHEL-65434]
- hpvd-Use-NetworkManager-information-to-report-DNS-setting.patch [RHEL-65434]
- Resolves: RHEL-65434
  ([Hyper-V][RHEL-10]KVP daemon inspects /etc/sysconfig/network-scripts/ifcfg-* files to get DHCP information)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.50.20220731git" date="1750420800">- hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95811]
- Resolves: RHEL-95811
  ([RHEL-10]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 10)</changelog>
</package>
<package pkgid="b8ed28489e1b7836a67f6cc606e0dec6b18e7aaeb23d4d2fec68c5fc300f7af7" name="hypervkvpd" arch="x86_64">
  <version epoch="0" ver="0" rel="0.50.20220731git.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.42.20220731git" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.43.20220731git" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.44.20220731git" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0-0.45.20220731git" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.46.20220731git" date="1719489600">- hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679]
- hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679]
- hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679]
- hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679]
- hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679]
- hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679]
- hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679]
- hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679]
- hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679]
- hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679]
- hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679]
- hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679]
- hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679]
- hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679]
- Resolves: RHEL-40107
  ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.)
- Resolves: RHEL-40679
  ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.47.20220731git" date="1720785600">- hpvd-Add-support-for-newer-fcopy-UIO-hyperv-daemons-modul.patch [RHEL-44617]
- hpvd-Update-main-package-dep-on-hypervfcopyd-to-be-arch-d.patch [RHEL-44617]
- hpvd-Particularize-hypervfcopyd-service-requirements.patch [RHEL-44617]
- Resolves: RHEL-44617
  ([RHEL-10] Add support for fcopy UIO userland module in hyperv-daemons)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0-0.48.20220731git" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.49.20220731git" date="1732190400">- hpvd-Use-NetworkManager-information-to-report-DHCP-settin.patch [RHEL-65434]
- hpvd-Use-NetworkManager-information-to-report-DNS-setting.patch [RHEL-65434]
- Resolves: RHEL-65434
  ([Hyper-V][RHEL-10]KVP daemon inspects /etc/sysconfig/network-scripts/ifcfg-* files to get DHCP information)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.50.20220731git" date="1750420800">- hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95811]
- Resolves: RHEL-95811
  ([RHEL-10]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 10)</changelog>
</package>
<package pkgid="fd21bc409f6b012ccc7977351693184cfbda7ff574e61e333ab13de683d775eb" name="hypervvssd" arch="x86_64">
  <version epoch="0" ver="0" rel="0.50.20220731git.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.42.20220731git" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.43.20220731git" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.44.20220731git" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0-0.45.20220731git" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.46.20220731git" date="1719489600">- hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679]
- hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679]
- hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679]
- hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679]
- hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679]
- hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679]
- hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679]
- hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679]
- hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679]
- hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679]
- hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679]
- hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679]
- hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679]
- hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679]
- Resolves: RHEL-40107
  ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.)
- Resolves: RHEL-40679
  ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.47.20220731git" date="1720785600">- hpvd-Add-support-for-newer-fcopy-UIO-hyperv-daemons-modul.patch [RHEL-44617]
- hpvd-Update-main-package-dep-on-hypervfcopyd-to-be-arch-d.patch [RHEL-44617]
- hpvd-Particularize-hypervfcopyd-service-requirements.patch [RHEL-44617]
- Resolves: RHEL-44617
  ([RHEL-10] Add support for fcopy UIO userland module in hyperv-daemons)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0-0.48.20220731git" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.49.20220731git" date="1732190400">- hpvd-Use-NetworkManager-information-to-report-DHCP-settin.patch [RHEL-65434]
- hpvd-Use-NetworkManager-information-to-report-DNS-setting.patch [RHEL-65434]
- Resolves: RHEL-65434
  ([Hyper-V][RHEL-10]KVP daemon inspects /etc/sysconfig/network-scripts/ifcfg-* files to get DHCP information)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0-0.50.20220731git" date="1750420800">- hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95811]
- Resolves: RHEL-95811
  ([RHEL-10]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 10)</changelog>
</package>
<package pkgid="1a66389481c505e1d3aa27b3f52b54275f8018c2762cf2060cced3c5c2b3494f" name="hyphen" arch="x86_64">
  <version epoch="0" ver="2.8.8" rel="26.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-19" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 2.8.8-20" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-21" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-22" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2.8.8-24" date="1709726400">- Properly check valgrind arches</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.8-25" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.8-26" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f93bbb5da16778764a719f8ded41ae16e765bd883491beaadefe39c5c1397d5f" name="hyphen-af" arch="noarch">
  <version epoch="0" ver="0" rel="0.31.20080714svn.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.26.20080714svn" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0-0.27.20080714svn" date="1677240000">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.28.20080714svn" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.29.20080714svn" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0-0.30.20080714svn" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0-0.31.20080714svn" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d76a3a0937a2ad5b5cdd6f475096b76bb815a4dfa70fa029f1d459e5aa46f362" name="hyphen-as" arch="noarch">
  <version epoch="1" ver="0.7.0" rel="27.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:0.7.0-21" date="1669896000">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-24" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-25" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-26" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-27" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f82aa94a9cbbce813b0c4cfb148a71ab217e13249bad532d4485de74e064e41c" name="hyphen-be" arch="noarch">
  <version epoch="0" ver="1.1" rel="32.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-26" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1-27" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-30" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1-31" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b4de069dd7c989085a41f429f30b5ed35a1e7bf9f0db8406fdbc4b49885d1063" name="hyphen-bg" arch="noarch">
  <version epoch="0" ver="4.3" rel="248.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 4.3-24" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-244" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-245" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-246" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-247" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-248" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6d0547b9e0446b1139cc0a86e6b8a538e8472a7a564e80b38c4cb47ac2944e4b" name="hyphen-bn" arch="noarch">
  <version epoch="1" ver="0.7.0" rel="27.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:0.7.0-21" date="1669896000">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-24" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-25" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-26" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-27" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6b0df912f16dde8821f976cf091263d7c1fd2d61cd1c191e876537d1d1276063" name="hyphen-ca" arch="noarch">
  <version epoch="1" ver="1.5" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.3-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:0.9.3-25" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.3-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:1.5-1" date="1691668800">- Resolves:rh#2230536 - Update to new Upstream Source</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.5-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.5-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.5-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.5-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9c086d7c9d550da31659803699ac51c7727e2f189ff7fb2e50e26c81860cd013" name="hyphen-cs" arch="noarch">
  <version epoch="0" ver="20080822" rel="25.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20080822-19" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 20080822-20" date="1677240000">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20080822-21" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20080822-22" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20080822-23" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20080822-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20080822-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8796610a7ca3b9610cb96cc496ea9459ee030f8eba0fd028d6a76e3c2120723b" name="hyphen-cy" arch="noarch">
  <version epoch="0" ver="0.20110620" rel="28.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110620-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20110620-23" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110620-24" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110620-25" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110620-26" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20110620-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20110620-28" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ba952d43d49b0815f35bd693eb34a7da0d9077857727e6f06f25764fdefa3029" name="hyphen-da" arch="noarch">
  <version epoch="0" ver="0.20070903" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20070903-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20070903-28" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20070903-29" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20070903-30" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20070903-31" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20070903-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20070903-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f014bdd4c26a9155d78a4ecf58d70c1c8c632f5cba15ecf6ee631212caf4be29" name="hyphen-de" arch="noarch">
  <version epoch="0" ver="0.20060120" rel="35.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20060120-31" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20060120-32" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20060120-33" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20060120-34" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20060120-35" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="906f7c36a31570000b65297401078f08d4374f572e557099524405d498266f57" name="hyphen-devel" arch="x86_64">
  <version epoch="0" ver="2.8.8" rel="26.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-19" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 2.8.8-20" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-21" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-22" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2.8.8-24" date="1709726400">- Properly check valgrind arches</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.8-25" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.8-26" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="40053ef17efd1c64f8df12dd37a71f39a3dfd2db3abcc3d6dcd3b36b274fba76" name="hyphen-el" arch="noarch">
  <version epoch="0" ver="0.20051018" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20051018-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20051018-28" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20051018-29" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20051018-30" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20051018-31" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20051018-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20051018-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0d9563d9022c0a2a46ceb683159342ae291c10d5d1a21c0b77c50d4a235832c2" name="hyphen-en" arch="noarch">
  <version epoch="0" ver="2.8.8" rel="26.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-19" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 2.8.8-20" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-21" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-22" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2.8.8-24" date="1709726400">- Properly check valgrind arches</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.8-25" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.8-26" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8bda2f9fcfaa1b38cb91eee1101044ed7d23f4bd152e9bc2511b7373915db443" name="hyphen-eo" arch="noarch">
  <version epoch="0" ver="0.20180330" rel="17.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20180330-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20180330-11" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20180330-12" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20180330-13" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20180330-14" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20180330-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20180330-16" date="1723550400">- Drop unwanted mythes-eo package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20180330-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="769dc357bc4296ebc6dde7dd034d660aa0ffa21ce1dbb4c475b4904e1de33e10" name="hyphen-es" arch="noarch">
  <version epoch="0" ver="2.3" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3-13" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 2.3-14" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3-15" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3-16" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3-17" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3-18" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d63f5eb5a2d9770ec552fb17bc6dab96ce86cca469730546d8374e3cd03d48af" name="hyphen-et" arch="noarch">
  <version epoch="0" ver="0.20030606" rel="36.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20030606-30" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20030606-31" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20030606-32" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20030606-33" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20030606-34" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20030606-35" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20030606-36" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7cafbf95c2eb1e94ee7e73052dc976ce17ea23d8cb523d6356492beb2f4206b3" name="hyphen-eu" arch="noarch">
  <version epoch="0" ver="0.20190406" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20190406-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20110620-6" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20190406-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20190406-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20190406-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20190406-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20190406-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c7f1fdfee8fa09fd33f00ea60ebe830168ff4fb65fe4c6d793c2bfc9e3be00b0" name="hyphen-fa" arch="noarch">
  <version epoch="0" ver="0.20130404" rel="25.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20130404-19" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20130404-20" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20130404-21" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20130404-22" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20130404-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20130404-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20130404-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a94f9d11b17cd547483e9aed5d2e6c222ff5576e7157a51563baae547c47a6ce" name="hyphen-fo" arch="noarch">
  <version epoch="0" ver="0.20040420" rel="29.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040420-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 0.20040420-24" date="1679918400">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040420-25" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040420-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040420-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20040420-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20040420-29" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cbdb49f5c3dfe9e4bbe0da70f10669208738b5be39afe8ae027f645e968071da" name="hyphen-fr" arch="noarch">
  <version epoch="0" ver="3.0" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 3.0-13" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="77fdda97e0f67decf6b368b57f162a3caea2cbd7708638e88a712a2e0801ed9f" name="hyphen-ga" arch="noarch">
  <version epoch="0" ver="0.20040220" rel="32.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040220-26" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20040220-27" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040220-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040220-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040220-30" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20040220-31" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20040220-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="355922b1719225f4df8c6458cfb6cbeccc2f325095a7ad67b85a80aed971a823" name="hyphen-gl" arch="noarch">
  <version epoch="0" ver="0.99" rel="32.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.99-26" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.99-27" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.99-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.99-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.99-30" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.99-31" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.99-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="819341f34d141e9bcceb2cb1f85cd45b12424af8869ff8722ca86c743542de6e" name="hyphen-grc" arch="noarch">
  <version epoch="0" ver="0.20110913" rel="29.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110913-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20110913-24" date="1679918400">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110913-25" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110913-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110913-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20110913-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20110913-29" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d20700700e732b57e03b5a0eb2fa691686b697f3b689546c144e3d32cfaaafad" name="hyphen-gu" arch="noarch">
  <version epoch="1" ver="0.7.0" rel="27.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:0.7.0-21" date="1669896000">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-24" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-25" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-26" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-27" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a80a6b88630b06b238252c0226a4c96adf0cb80ea179535f8e8fc3cf48e654c3" name="hyphen-hi" arch="noarch">
  <version epoch="1" ver="0.7.0" rel="27.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:0.7.0-21" date="1669896000">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-24" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-25" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-26" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-27" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5f072c0b0e7c781613e87ed001c207a88ed277bd1ca56b4853c9436f94128ae5" name="hyphen-hr" arch="noarch">
  <version epoch="1" ver="0.20040608" rel="34.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.20040608-28" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:0.20040608-29" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.20040608-30" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.20040608-31" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.20040608-32" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.20040608-33" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.20040608-34" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a0835fb06d0086ae39d7eb5da0c699241b0f4ce3a40e4b1583b2b79ef42ac93d" name="hyphen-hsb" arch="noarch">
  <version epoch="0" ver="0.20110620" rel="28.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110620-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20110620-23" date="1679918400">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110620-24" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110620-25" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110620-26" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20110620-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20110620-28" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="921d2ce1ff5cb19a610abd64c422c4da8866b6b7a13a15591a1abc55482d4f1a" name="hyphen-hu" arch="noarch">
  <version epoch="0" ver="0.20090612" rel="35.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090612-29" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20090612-30" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090612-31" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090612-32" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20090612-33" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20090612-34" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20090612-35" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c6067a3586c9806ac45747be2546f069938c0cccc0911781f0b5423fe0d9a7e8" name="hyphen-ia" arch="noarch">
  <version epoch="0" ver="0.20050628" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050628-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20050628-25" date="1680004800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050628-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050628-27" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050628-28" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050628-29" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050628-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3bf7d5a36a1e373764f9b9b719084fa6411820786da32f328f9f4439fefb4ca0" name="hyphen-id" arch="noarch">
  <version epoch="0" ver="0.20040812" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040812-25" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040812-26" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20040812-27" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040812-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040812-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20040812-30" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20040812-31" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="6ac13ea80663b69c2f66a78db2b87da1e7e5dd96050caac3db9f5e482a5b2624" name="hyphen-is" arch="noarch">
  <version epoch="0" ver="0.20030920" rel="35.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20030920-29" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20030920-30" date="1680004800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20030920-31" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20030920-32" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20030920-33" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20030920-34" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20030920-35" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e5dd442ab555177b08b895d17817a93f82d05b87f00e9bba8e49715caa6a396f" name="hyphen-it" arch="noarch">
  <version epoch="0" ver="5.1.1" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20071127-28" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20071127-29" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Mattia Verga &lt;mattia.verga@proton.me&gt; - 5.1.1-1" date="1685880000">- Switch to libreoffice dictionaries from libreitalia.org</changelog>
  <changelog author="Mattia Verga &lt;mattia.verga@proton.me&gt; - 5.1.1-2" date="1685880001">- Use sources from pagure.io project</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.1-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.1-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pooja Yadav &lt;poyadav@redhat.com&gt; - 5.1.1-6" date="1715688000">- adding gating.yaml configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.1-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.1.1-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="8b75c5a93631e70611a8d6517e250333936e787b2c414598a0e98d228d067754" name="hyphen-kn" arch="noarch">
  <version epoch="1" ver="0.7.0" rel="27.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:0.7.0-21" date="1669896000">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-24" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-25" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-26" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-27" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c307b7ea11c3587be325ad9ab0c536169faa92c2ac928f5ad08510c72d72e917" name="hyphen-ku" arch="noarch">
  <version epoch="0" ver="1.71.2" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.71.2-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.71.2-26" date="1680004800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.71.2-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.71.2-28" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.71.2-29" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.71.2-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.71.2-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f0582e7391939313eb07258bb596b8264dabdca89cdd557a09d832e244b50a0d" name="hyphen-lt" arch="noarch">
  <version epoch="0" ver="0.20100531" rel="29.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20100531-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20100531-24" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20100531-25" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20100531-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20100531-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20100531-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20100531-29" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7bcd9bf4ad58e07e394025f6bdf866ecc68a8d3c7255e98f55d24fc25f06806e" name="hyphen-lv" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.4.0-4" date="1677240000">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.4.0-8" date="1713182400">- Resolves: RHEL-32831 - The mythes package is not present in RHEL10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dff5f1a0f8924a924c0e85885cc099627c015b80f85b76ccaf7a586ee5e95941" name="hyphen-mi" arch="noarch">
  <version epoch="0" ver="0.20080630" rel="32.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080630-26" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20080630-27" date="1680004800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080630-28" date="1691064000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080630-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20080630-30" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20080630-31" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20080630-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="85d64be3377829056a159682c54c2d28b16a54e4e56711d788ff05fe49d44308" name="hyphen-ml" arch="noarch">
  <version epoch="1" ver="0.7.0" rel="27.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:0.7.0-21" date="1669896000">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-24" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-25" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-26" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-27" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="62734b1c30e70e50092b325c69934fcb29e8c1becc1fd1a6043cb49538dc2472" name="hyphen-mn" arch="noarch">
  <version epoch="0" ver="0.20100531" rel="29.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20100531-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20100531-24" date="1680004800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20100531-25" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20100531-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20100531-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20100531-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20100531-29" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="995a8ffa0b98034d47a2371b652815129ecad365e9e215c0e9f5360d0ef1ba32" name="hyphen-mr" arch="noarch">
  <version epoch="1" ver="0.7.0" rel="27.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:0.7.0-21" date="1669896000">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-24" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-25" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-26" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-27" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="815e81e611267075903cba92dbc511a521ded5927628466b6c34263099864fc7" name="hyphen-nb" arch="noarch">
  <version epoch="1" ver="2.0.10" rel="26.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.10-18" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.0.10-19" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.10-20" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.10-21" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.10-22" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:2.0.10-23" date="1713182400">- Resolves: RHEL-32832 - The mythes package is not present in RHEL10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.10-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:2.0.10-25" date="1722859200">- Resolves:RHEL-52487 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.10-26" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="01309026afea34ca485dc7be21ffe48b25700e0eadb7a9a00ecab29d3f3b1589" name="hyphen-nl" arch="noarch">
  <version epoch="0" ver="0.20050617" rel="34.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050617-28" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20050617-29" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050617-30" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050617-31" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20050617-32" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050617-33" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20050617-34" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a9bc2d41d90b40ebb4950fae1ee566db384a304d23a0d7902c83c1aad9ce8839" name="hyphen-nn" arch="noarch">
  <version epoch="1" ver="2.0.10" rel="26.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.10-18" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:2.0.10-19" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.10-20" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.10-21" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.10-22" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:2.0.10-23" date="1713182400">- Resolves: RHEL-32832 - The mythes package is not present in RHEL10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.10-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:2.0.10-25" date="1722859200">- Resolves:RHEL-52487 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.10-26" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ec3f0fa8f745203acfb34d20605318e3fd5ee2fc582809e5048d2e94732019e4" name="hyphen-or" arch="noarch">
  <version epoch="1" ver="0.7.0" rel="28.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:0.7.0-22" date="1669896000">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-24" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-25" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-26" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-28" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="62ddc19656faeb249fc8ac2c9eb19ee86100dfbabf179f3516f35a564a75d722" name="hyphen-pa" arch="noarch">
  <version epoch="1" ver="0.7.0" rel="27.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:0.7.0-21" date="1669896000">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-24" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-25" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-26" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-27" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="356a6b73cc10d9cb6124718732cd6fa0d26e4c68af307a474762127c190a1167" name="hyphen-pl" arch="noarch">
  <version epoch="0" ver="0.20060726" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20060726-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20060726-28" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20060726-29" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20060726-30" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20060726-31" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20060726-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20060726-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="35523d7dc94680cfe02d6914ccd4726a099682884e0db927a41522bf0ecbf59a" name="hyphen-pt" arch="noarch">
  <version epoch="0" ver="0.20140727" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20140727-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20140727-5" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20140727-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20140727-7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20140727-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20140727-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20140727-10" date="1721044800">- Resolves: RHEL-46908 - Fix file hyph_pt_PT.dic permission</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20140727-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="483b75cadc453a80421f3a7b4a4a8da54508d28c6160a2472ca7eaecac9a1dbc" name="hyphen-pt-BR" arch="noarch">
  <version epoch="0" ver="0.20140727" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20140727-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20140727-5" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20140727-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20140727-7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20140727-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20140727-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20140727-10" date="1721044800">- Resolves: RHEL-46908 - Fix file hyph_pt_PT.dic permission</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20140727-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="98611189c603a6267c19704a074779fae7b8caa13296e3a72d93e0a498a8ab0f" name="hyphen-ro" arch="noarch">
  <version epoch="0" ver="3.3.6" rel="29.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.6-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.3.6-24" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.6-25" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.6-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.6-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.6-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.3.6-29" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5cdbaea930d210ae99acd6dcbf8d3639055b8af44825357957414ab623823cef" name="hyphen-ru" arch="noarch">
  <version epoch="0" ver="0.20200325" rel="13.el10"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20200325-6" date="1669723200">- Resolves: rhbz#2148806 fix changelog dates</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20200325-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20200325-8" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20200325-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20200325-10" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20200325-11" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20200325-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20200325-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bf614ce16bd050a362d3a60e1dad78d67e1d01711980a1ca6c4199ba09a562a9" name="hyphen-sa" arch="noarch">
  <version epoch="0" ver="0.20110915" rel="29.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110915-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20110915-24" date="1680004800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110915-25" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110915-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110915-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20110915-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20110915-29" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="325607ec654ac935fa5817a960d370714136063216403624ddb04c521f1adc06" name="hyphen-sk" arch="noarch">
  <version epoch="0" ver="0.20031227" rel="34.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20031227-28" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20031227-29" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20031227-30" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20031227-31" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20031227-32" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20031227-33" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20031227-34" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="524c64fd8c2155368d4a248b985aa8cec752587e72f2f56d7f11da2d33015d26" name="hyphen-sl" arch="noarch">
  <version epoch="0" ver="0.20070127" rel="32.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20070127-26" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20070127-27" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20070127-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20070127-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20070127-30" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20070127-31" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20070127-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="68c001a188c2b4c61a0130a5288d7e2c5f8196443a925bd17dffba7d76c1b29e" name="hyphen-sr" arch="noarch">
  <version epoch="0" ver="0.20130330" rel="28.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20130330-21" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20130330-22" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20130330-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20130330-24" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20130330-25" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20130330-26" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.20130330-27" date="1723464000">- Resolves:RHEL-52512 - Add conditional for RHEL for using hunspell directory
- Add tmt CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20130330-28" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="28ac8d785f404aa931d5d81e28ba395a9f746065843718b9c0929a7c862a6cb5" name="hyphen-sv" arch="noarch">
  <version epoch="0" ver="1.00.1" rel="36.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.00.1-29" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.00.1-30" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.00.1-31" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.00.1-32" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.00.1-33" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.00.1-34" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.00.1-35" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.00.1-36" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3dd5d99402bf7f9ebaa983586fdd7cfcfbe472854acaf91eb420faf66901771d" name="hyphen-ta" arch="noarch">
  <version epoch="1" ver="0.7.0" rel="27.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:0.7.0-21" date="1669896000">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-24" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-25" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-26" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-27" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fdf132e44ebffb4afe0b65a753974495bb01d5abf8287a07e9bb058bdbb3125c" name="hyphen-te" arch="noarch">
  <version epoch="1" ver="0.7.0" rel="27.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1:0.7.0-21" date="1669896000">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-24" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.7.0-25" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-26" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.7.0-27" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="df4036b4bc34ff902e42e6823c5c9bcb34bdda4d21cc3a35eeeafac73d7f9610" name="hyphen-tk" arch="noarch">
  <version epoch="0" ver="0.20210322" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20110620-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20210322-1" date="1680004800">- latest version with clarified license
- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20210322-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20210322-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20210322-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20210322-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20210322-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e17e2a12b50918ad1e26c7a6ccd41b841c6a3828cc31bc51efcd1fc1c3f22a75" name="hyphen-uk" arch="noarch">
  <version epoch="0" ver="0.20030903" rel="32.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20030903-26" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.20030903-27" date="1677153600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20030903-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20030903-29" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20030903-30" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20030903-31" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20030903-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bd5e128c4b80eebbf1fd5fa78be94f760b5037dbe8e3e0ac47a8b0e0292f6c77" name="hyphen-zu" arch="noarch">
  <version epoch="0" ver="0" rel="0.31.20080714svn.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.26.20080714svn" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0-0.27.20080714svn" date="1677240000">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.28.20080714svn" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.29.20080714svn" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0-0.30.20080714svn" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0-0.31.20080714svn" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="59a99ce20c8234a53cc53f9c46c8d661efd54c42300566e1b96dbcffd02e1aa5" name="i2c-tools" arch="x86_64">
  <version epoch="0" ver="4.3" rel="14.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.3-6" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 4.3-8" date="1695988800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-9" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-10" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 4.3-11" date="1715256000">- Fix SPDX license identifiers</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 4.3-14" date="1739534400">- Do not run modprobe in %post if the system is not running
- Resolves: RHEL-78695</changelog>
</package>
<package pkgid="2cfa039644a64b726a48501a463876bf7ae8dd735a27acd084184d57da8b1b6f" name="i2c-tools-perl" arch="x86_64">
  <version epoch="0" ver="4.3" rel="14.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.3-6" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 4.3-8" date="1695988800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-9" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-10" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 4.3-11" date="1715256000">- Fix SPDX license identifiers</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 4.3-14" date="1739534400">- Do not run modprobe in %post if the system is not running
- Resolves: RHEL-78695</changelog>
</package>
<package pkgid="6a68c6b29cfc60a96a9e9e0b55e0f220e4294ccf8ed7dc3465e68aa12c8dd5fd" name="ibacm" arch="x86_64">
  <version epoch="0" ver="61.0" rel="1.el10"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1768478400">- Rebase to upstream release 61.0</changelog>
</package>
<package pkgid="82caca95e15773f6377d35816cf70244c58c6fa63974ff269b519e764350874d" name="ibus" arch="x86_64">
  <version epoch="0" ver="1.5.32" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.31~beta1-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-9" date="1722081600">- Update CI for RHEL packages</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-10" date="1722081601">- Replace GNOME Xorg with GNOME Wayland in CI
- Replace STI with TMT in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-11" date="1722254400">- Disable ibus-panel rich condition in RHEL
- Delete ibus-xx-desktop-testing-mutter.patch
- Delete libXtst-devel dependency
- Replace gnome-terminal with ptyxis
- Install gnome-desktop-testing for RHEL
- Delete xorg-x11-server-Xvfb gnome-session-xsession
- Delete build packages for gnome-desktop-testing for RHEL
- Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
- Fix CI test case conditions
- Add no-overview@fthx until gnome-shell-extension-no-overview is available
- Add gnome-headless-session@.service until GDM will provide it</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-12" date="1722513600">- Delete tmt installation for RHEL10 CI</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.31~beta1-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-1" date="1731412800">- Bump to 1.5.31
- Delete RHEL specific packages
- Update installed packages in CI
- configure option for Flatpak build
- Move xinit post scripts
- Require gnome-shell-extension-no-overview in RHEL</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-2" date="1731499200">- Move gnome-calendar &amp; gnome-epub-thumbnailer to Fedora specific in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-3" date="1731585600">- Rebuild to export GSK_RENDERER=cairo in CentOS but not RHEL for Vulkan</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.32-1" date="1744286400">- Resolves: RHEL-83888 Bump to 1.5.32</changelog>
</package>
<package pkgid="80d26ffeb36376fd3f294b0a25df962524e7108e72057e7e302256774d5faa3f" name="ibus-anthy" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="1.el10"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-14" date="1726574400">- Support GNOME Wayland and GTK4 in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-15" date="1726574401">- Replace STI with TMT in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-16" date="1726574402">- tests: Update packages with comps-f41
- Add base-graphical
- Add fonts default
- Delete libcanberra-gtk3, libproxy-duktape
- Delete tmt for RHEL CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-17" date="1726574403">- tests: Delete RHEL specific packages</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-18" date="1726574404">- Update CI for RHEL10
- Add no-overview@fthx until gnome-shell-extension-no-overview is available
- Add gnome-headless-session@.service until GDM will provide it</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-19" date="1726574405">- tests: gdm-47~alpha-4 provides headless files</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-20" date="1726574406">- tests: Add gnome-shell-47 to no-overview extension</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-21" date="1726574407">- tests: Move gnome-calendar and gnome-epub-thumbnailer to Fedora only</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.16-22" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-1" date="1742385600">- Bump to 1.5.17</changelog>
</package>
<package pkgid="f24ead86f33c310086f1bdb60f722b0b109b37c14f8cd5a1463636b0b8b6e4f1" name="ibus-anthy-devel" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="1.el10"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-14" date="1726574400">- Support GNOME Wayland and GTK4 in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-15" date="1726574401">- Replace STI with TMT in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-16" date="1726574402">- tests: Update packages with comps-f41
- Add base-graphical
- Add fonts default
- Delete libcanberra-gtk3, libproxy-duktape
- Delete tmt for RHEL CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-17" date="1726574403">- tests: Delete RHEL specific packages</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-18" date="1726574404">- Update CI for RHEL10
- Add no-overview@fthx until gnome-shell-extension-no-overview is available
- Add gnome-headless-session@.service until GDM will provide it</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-19" date="1726574405">- tests: gdm-47~alpha-4 provides headless files</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-20" date="1726574406">- tests: Add gnome-shell-47 to no-overview extension</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-21" date="1726574407">- tests: Move gnome-calendar and gnome-epub-thumbnailer to Fedora only</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.16-22" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-1" date="1742385600">- Bump to 1.5.17</changelog>
</package>
<package pkgid="863a43139adb0a4362c830324f8c9c91415b1dd507af4f3d9767b5b13e11e2dc" name="ibus-anthy-python" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="1.el10"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-14" date="1726574400">- Support GNOME Wayland and GTK4 in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-15" date="1726574401">- Replace STI with TMT in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-16" date="1726574402">- tests: Update packages with comps-f41
- Add base-graphical
- Add fonts default
- Delete libcanberra-gtk3, libproxy-duktape
- Delete tmt for RHEL CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-17" date="1726574403">- tests: Delete RHEL specific packages</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-18" date="1726574404">- Update CI for RHEL10
- Add no-overview@fthx until gnome-shell-extension-no-overview is available
- Add gnome-headless-session@.service until GDM will provide it</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-19" date="1726574405">- tests: gdm-47~alpha-4 provides headless files</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-20" date="1726574406">- tests: Add gnome-shell-47 to no-overview extension</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-21" date="1726574407">- tests: Move gnome-calendar and gnome-epub-thumbnailer to Fedora only</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.16-22" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-1" date="1742385600">- Bump to 1.5.17</changelog>
</package>
<package pkgid="16ee57af9a21015df9e834791c14a2614de0f1876d515b2361ed0ab260e3543c" name="ibus-anthy-tests" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="1.el10"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-14" date="1726574400">- Support GNOME Wayland and GTK4 in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-15" date="1726574401">- Replace STI with TMT in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-16" date="1726574402">- tests: Update packages with comps-f41
- Add base-graphical
- Add fonts default
- Delete libcanberra-gtk3, libproxy-duktape
- Delete tmt for RHEL CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-17" date="1726574403">- tests: Delete RHEL specific packages</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-18" date="1726574404">- Update CI for RHEL10
- Add no-overview@fthx until gnome-shell-extension-no-overview is available
- Add gnome-headless-session@.service until GDM will provide it</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-19" date="1726574405">- tests: gdm-47~alpha-4 provides headless files</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-20" date="1726574406">- tests: Add gnome-shell-47 to no-overview extension</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.16-21" date="1726574407">- tests: Move gnome-calendar and gnome-epub-thumbnailer to Fedora only</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.16-22" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-1" date="1742385600">- Bump to 1.5.17</changelog>
</package>
<package pkgid="4bf06db71ad14dae442aa167846aeb209e2d132f7870818a3e11e4069a528be3" name="ibus-desktop-testing" arch="noarch">
  <version epoch="0" ver="1.5.32" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.31~beta1-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-9" date="1722081600">- Update CI for RHEL packages</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-10" date="1722081601">- Replace GNOME Xorg with GNOME Wayland in CI
- Replace STI with TMT in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-11" date="1722254400">- Disable ibus-panel rich condition in RHEL
- Delete ibus-xx-desktop-testing-mutter.patch
- Delete libXtst-devel dependency
- Replace gnome-terminal with ptyxis
- Install gnome-desktop-testing for RHEL
- Delete xorg-x11-server-Xvfb gnome-session-xsession
- Delete build packages for gnome-desktop-testing for RHEL
- Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
- Fix CI test case conditions
- Add no-overview@fthx until gnome-shell-extension-no-overview is available
- Add gnome-headless-session@.service until GDM will provide it</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-12" date="1722513600">- Delete tmt installation for RHEL10 CI</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.31~beta1-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-1" date="1731412800">- Bump to 1.5.31
- Delete RHEL specific packages
- Update installed packages in CI
- configure option for Flatpak build
- Move xinit post scripts
- Require gnome-shell-extension-no-overview in RHEL</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-2" date="1731499200">- Move gnome-calendar &amp; gnome-epub-thumbnailer to Fedora specific in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-3" date="1731585600">- Rebuild to export GSK_RENDERER=cairo in CentOS but not RHEL for Vulkan</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.32-1" date="1744286400">- Resolves: RHEL-83888 Bump to 1.5.32</changelog>
</package>
<package pkgid="b5475917fa1e4923443880d92e9de79ef61692d2d5df9bf46e63fbb3b3ed79ed" name="ibus-devel" arch="x86_64">
  <version epoch="0" ver="1.5.32" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.31~beta1-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-9" date="1722081600">- Update CI for RHEL packages</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-10" date="1722081601">- Replace GNOME Xorg with GNOME Wayland in CI
- Replace STI with TMT in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-11" date="1722254400">- Disable ibus-panel rich condition in RHEL
- Delete ibus-xx-desktop-testing-mutter.patch
- Delete libXtst-devel dependency
- Replace gnome-terminal with ptyxis
- Install gnome-desktop-testing for RHEL
- Delete xorg-x11-server-Xvfb gnome-session-xsession
- Delete build packages for gnome-desktop-testing for RHEL
- Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
- Fix CI test case conditions
- Add no-overview@fthx until gnome-shell-extension-no-overview is available
- Add gnome-headless-session@.service until GDM will provide it</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-12" date="1722513600">- Delete tmt installation for RHEL10 CI</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.31~beta1-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-1" date="1731412800">- Bump to 1.5.31
- Delete RHEL specific packages
- Update installed packages in CI
- configure option for Flatpak build
- Move xinit post scripts
- Require gnome-shell-extension-no-overview in RHEL</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-2" date="1731499200">- Move gnome-calendar &amp; gnome-epub-thumbnailer to Fedora specific in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-3" date="1731585600">- Rebuild to export GSK_RENDERER=cairo in CentOS but not RHEL for Vulkan</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.32-1" date="1744286400">- Resolves: RHEL-83888 Bump to 1.5.32</changelog>
</package>
<package pkgid="808e04e9d491abb2448fd17b3f9cef31e55132cb662f27edbcf3bc1afa794945" name="ibus-devel-docs" arch="noarch">
  <version epoch="0" ver="1.5.32" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.31~beta1-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-9" date="1722081600">- Update CI for RHEL packages</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-10" date="1722081601">- Replace GNOME Xorg with GNOME Wayland in CI
- Replace STI with TMT in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-11" date="1722254400">- Disable ibus-panel rich condition in RHEL
- Delete ibus-xx-desktop-testing-mutter.patch
- Delete libXtst-devel dependency
- Replace gnome-terminal with ptyxis
- Install gnome-desktop-testing for RHEL
- Delete xorg-x11-server-Xvfb gnome-session-xsession
- Delete build packages for gnome-desktop-testing for RHEL
- Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
- Fix CI test case conditions
- Add no-overview@fthx until gnome-shell-extension-no-overview is available
- Add gnome-headless-session@.service until GDM will provide it</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-12" date="1722513600">- Delete tmt installation for RHEL10 CI</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.31~beta1-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-1" date="1731412800">- Bump to 1.5.31
- Delete RHEL specific packages
- Update installed packages in CI
- configure option for Flatpak build
- Move xinit post scripts
- Require gnome-shell-extension-no-overview in RHEL</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-2" date="1731499200">- Move gnome-calendar &amp; gnome-epub-thumbnailer to Fedora specific in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-3" date="1731585600">- Rebuild to export GSK_RENDERER=cairo in CentOS but not RHEL for Vulkan</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.32-1" date="1744286400">- Resolves: RHEL-83888 Bump to 1.5.32</changelog>
</package>
<package pkgid="ddfba3c26ecb65e1fe7629a58dc556b98468ab99fe81bfa9a70a843d87834e92" name="ibus-gtk3" arch="x86_64">
  <version epoch="0" ver="1.5.32" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.31~beta1-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-9" date="1722081600">- Update CI for RHEL packages</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-10" date="1722081601">- Replace GNOME Xorg with GNOME Wayland in CI
- Replace STI with TMT in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-11" date="1722254400">- Disable ibus-panel rich condition in RHEL
- Delete ibus-xx-desktop-testing-mutter.patch
- Delete libXtst-devel dependency
- Replace gnome-terminal with ptyxis
- Install gnome-desktop-testing for RHEL
- Delete xorg-x11-server-Xvfb gnome-session-xsession
- Delete build packages for gnome-desktop-testing for RHEL
- Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
- Fix CI test case conditions
- Add no-overview@fthx until gnome-shell-extension-no-overview is available
- Add gnome-headless-session@.service until GDM will provide it</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-12" date="1722513600">- Delete tmt installation for RHEL10 CI</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.31~beta1-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-1" date="1731412800">- Bump to 1.5.31
- Delete RHEL specific packages
- Update installed packages in CI
- configure option for Flatpak build
- Move xinit post scripts
- Require gnome-shell-extension-no-overview in RHEL</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-2" date="1731499200">- Move gnome-calendar &amp; gnome-epub-thumbnailer to Fedora specific in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-3" date="1731585600">- Rebuild to export GSK_RENDERER=cairo in CentOS but not RHEL for Vulkan</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.32-1" date="1744286400">- Resolves: RHEL-83888 Bump to 1.5.32</changelog>
</package>
<package pkgid="f302cbdb171e735cae64fba8e2b28b9e76fc20111a81755ea9da7ceeff046dcb" name="ibus-gtk4" arch="x86_64">
  <version epoch="0" ver="1.5.32" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.31~beta1-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-9" date="1722081600">- Update CI for RHEL packages</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-10" date="1722081601">- Replace GNOME Xorg with GNOME Wayland in CI
- Replace STI with TMT in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-11" date="1722254400">- Disable ibus-panel rich condition in RHEL
- Delete ibus-xx-desktop-testing-mutter.patch
- Delete libXtst-devel dependency
- Replace gnome-terminal with ptyxis
- Install gnome-desktop-testing for RHEL
- Delete xorg-x11-server-Xvfb gnome-session-xsession
- Delete build packages for gnome-desktop-testing for RHEL
- Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
- Fix CI test case conditions
- Add no-overview@fthx until gnome-shell-extension-no-overview is available
- Add gnome-headless-session@.service until GDM will provide it</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-12" date="1722513600">- Delete tmt installation for RHEL10 CI</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.31~beta1-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-1" date="1731412800">- Bump to 1.5.31
- Delete RHEL specific packages
- Update installed packages in CI
- configure option for Flatpak build
- Move xinit post scripts
- Require gnome-shell-extension-no-overview in RHEL</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-2" date="1731499200">- Move gnome-calendar &amp; gnome-epub-thumbnailer to Fedora specific in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-3" date="1731585600">- Rebuild to export GSK_RENDERER=cairo in CentOS but not RHEL for Vulkan</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.32-1" date="1744286400">- Resolves: RHEL-83888 Bump to 1.5.32</changelog>
</package>
<package pkgid="bea265e728e26d1cc5cfa09d41b72c13913dd42751354dd1b9c0a0fce4ced807" name="ibus-hangul" arch="x86_64">
  <version epoch="0" ver="1.5.5" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.4-15" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.5.5-1" date="1683201600">- Update to 1.5.5</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.5.5-2" date="1683633600">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.5-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.5-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.5-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.5-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.5-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.5.5-8" date="1733745600">- Update CI tests
- Resolves: RHEL-70370</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.5.5-9" date="1734955200">- Fix some issue with On Screen Keyboard
- Add ibus-hangul-fixes-osk.patch
- Resolves: RHEL-69510</changelog>
</package>
<package pkgid="839dbb348b27656d1267a641b8f5343a3db79fa55831c8d386671be014db9d94" name="ibus-hangul-tests" arch="x86_64">
  <version epoch="0" ver="1.5.5" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.4-15" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.5.5-1" date="1683201600">- Update to 1.5.5</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.5.5-2" date="1683633600">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.5-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.5-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.5-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.5-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.5-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.5.5-8" date="1733745600">- Update CI tests
- Resolves: RHEL-70370</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.5.5-9" date="1734955200">- Fix some issue with On Screen Keyboard
- Add ibus-hangul-fixes-osk.patch
- Resolves: RHEL-69510</changelog>
</package>
<package pkgid="ff518ab8032d8be1a82e6581df8e5f103ed4347d1d8b9097e38ca52542de98c1" name="ibus-libpinyin" arch="x86_64">
  <version epoch="0" ver="1.15.7" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.3-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.15.4-1" date="1693828800">- Update to 1.15.4
- Update network dictionary
- Fix Caps Lock for English mode</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.15.5-1" date="1701086400">- Update to 1.15.5
- bug fixes</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.15.6-1" date="1702641600">- Update to 1.15.6
- bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.6-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.15.6-3" date="1705838400">- Add pointer casts for C89 compatibility</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.6-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.15.7-1" date="1706788800">- Update to 1.15.7
- bug fixes</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.15.7-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.15.7-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3cafe48ee0193f820fbaf9283a20d079dd706b19f17bee31d771d7b18f14be42" name="ibus-libs" arch="x86_64">
  <version epoch="0" ver="1.5.32" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.31~beta1-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-9" date="1722081600">- Update CI for RHEL packages</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-10" date="1722081601">- Replace GNOME Xorg with GNOME Wayland in CI
- Replace STI with TMT in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-11" date="1722254400">- Disable ibus-panel rich condition in RHEL
- Delete ibus-xx-desktop-testing-mutter.patch
- Delete libXtst-devel dependency
- Replace gnome-terminal with ptyxis
- Install gnome-desktop-testing for RHEL
- Delete xorg-x11-server-Xvfb gnome-session-xsession
- Delete build packages for gnome-desktop-testing for RHEL
- Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
- Fix CI test case conditions
- Add no-overview@fthx until gnome-shell-extension-no-overview is available
- Add gnome-headless-session@.service until GDM will provide it</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-12" date="1722513600">- Delete tmt installation for RHEL10 CI</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.31~beta1-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-1" date="1731412800">- Bump to 1.5.31
- Delete RHEL specific packages
- Update installed packages in CI
- configure option for Flatpak build
- Move xinit post scripts
- Require gnome-shell-extension-no-overview in RHEL</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-2" date="1731499200">- Move gnome-calendar &amp; gnome-epub-thumbnailer to Fedora specific in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-3" date="1731585600">- Rebuild to export GSK_RENDERER=cairo in CentOS but not RHEL for Vulkan</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.32-1" date="1744286400">- Resolves: RHEL-83888 Bump to 1.5.32</changelog>
</package>
<package pkgid="79e3c5e04b17661bc9b5a03d1df5c205428005cda57e5087ffd9f5b7a71c7a3a" name="ibus-libzhuyin" arch="x86_64">
  <version epoch="0" ver="1.10.3" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.10.2-1" date="1673870400">- Update to 1.10.2
- bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.2-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.10.2-3" date="1684497600">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.2-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.2-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.10.3-1" date="1706097600">- Update to 1.10.3
- bug fixes</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.3-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="36cb546528ce96441173ee73516bbb11e000d334a9b44e428b46c962e1e15d5f" name="ibus-m17n" arch="x86_64">
  <version epoch="0" ver="1.4.29" rel="6.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.4.27-1" date="1701518400">- Update to 1.4.27
- Prefer commit to "return FALSE;" for space, and other keys
  where the msymbol name is exactly one character, add a
  sleep for Return.  This is to avoid ordering problems in
  mutter.
  (Resolves: https://github.com/ibus/ibus-m17n/issues/72)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.27-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.27-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.4.28-1" date="1707998400">- Update to 1.4.28
- Translation update from Weblate (Russian (ru), new, 100%)
- Build against gtk3 by default (Resolves:
  https://github.com/ibus/ibus-m17n/issues/73)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.4.29-1" date="1714132800">- Update to 1.4.29
- Translation update from Weblate (Malayalam (ml), new, 100%, Swedish (sv)
  100%)</changelog>
  <changelog author="Twinkle Pardeshi &lt;tpardesh@tpardesh-thinkpadp1gen4i.pnq.csb&gt; - 1.4.29-2" date="1717502400">- Resolves:RHELMISC-3924 - adding gating configuration</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.4.29-3" date="1718107200">- Fix CI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.29-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.4.29-5" date="1720612800">- Resolves: RHELMISC-5984 Fix CI tests better: Check for existence of
  directory instead of checking Fedora version.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.29-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="bb00de24ac10d00918c3e5e32ff875f96b9eab42d924f1f2e05c42cb2655bc2f" name="ibus-panel" arch="x86_64">
  <version epoch="0" ver="1.5.32" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.31~beta1-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-9" date="1722081600">- Update CI for RHEL packages</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-10" date="1722081601">- Replace GNOME Xorg with GNOME Wayland in CI
- Replace STI with TMT in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-11" date="1722254400">- Disable ibus-panel rich condition in RHEL
- Delete ibus-xx-desktop-testing-mutter.patch
- Delete libXtst-devel dependency
- Replace gnome-terminal with ptyxis
- Install gnome-desktop-testing for RHEL
- Delete xorg-x11-server-Xvfb gnome-session-xsession
- Delete build packages for gnome-desktop-testing for RHEL
- Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
- Fix CI test case conditions
- Add no-overview@fthx until gnome-shell-extension-no-overview is available
- Add gnome-headless-session@.service until GDM will provide it</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-12" date="1722513600">- Delete tmt installation for RHEL10 CI</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.31~beta1-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-1" date="1731412800">- Bump to 1.5.31
- Delete RHEL specific packages
- Update installed packages in CI
- configure option for Flatpak build
- Move xinit post scripts
- Require gnome-shell-extension-no-overview in RHEL</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-2" date="1731499200">- Move gnome-calendar &amp; gnome-epub-thumbnailer to Fedora specific in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-3" date="1731585600">- Rebuild to export GSK_RENDERER=cairo in CentOS but not RHEL for Vulkan</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.32-1" date="1744286400">- Resolves: RHEL-83888 Bump to 1.5.32</changelog>
</package>
<package pkgid="240f6e19d9c54655a240cd440d960a3aa2bd71504b258667f3f472e00f669086" name="ibus-setup" arch="noarch">
  <version epoch="0" ver="1.5.32" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.31~beta1-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-9" date="1722081600">- Update CI for RHEL packages</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-10" date="1722081601">- Replace GNOME Xorg with GNOME Wayland in CI
- Replace STI with TMT in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-11" date="1722254400">- Disable ibus-panel rich condition in RHEL
- Delete ibus-xx-desktop-testing-mutter.patch
- Delete libXtst-devel dependency
- Replace gnome-terminal with ptyxis
- Install gnome-desktop-testing for RHEL
- Delete xorg-x11-server-Xvfb gnome-session-xsession
- Delete build packages for gnome-desktop-testing for RHEL
- Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
- Fix CI test case conditions
- Add no-overview@fthx until gnome-shell-extension-no-overview is available
- Add gnome-headless-session@.service until GDM will provide it</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-12" date="1722513600">- Delete tmt installation for RHEL10 CI</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.31~beta1-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-1" date="1731412800">- Bump to 1.5.31
- Delete RHEL specific packages
- Update installed packages in CI
- configure option for Flatpak build
- Move xinit post scripts
- Require gnome-shell-extension-no-overview in RHEL</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-2" date="1731499200">- Move gnome-calendar &amp; gnome-epub-thumbnailer to Fedora specific in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-3" date="1731585600">- Rebuild to export GSK_RENDERER=cairo in CentOS but not RHEL for Vulkan</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.32-1" date="1744286400">- Resolves: RHEL-83888 Bump to 1.5.32</changelog>
</package>
<package pkgid="d77a7028dcc50a163a0cb14e76849c5a0bb081ecfbf9a2c479e38372f46c2541" name="ibus-table" arch="noarch">
  <version epoch="0" ver="1.17.6" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.17.2-1" date="1692619200">- Update to 1.17.2
- Translation update from Weblate (de 100%, tr 100%)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.17.3-1" date="1694692800">- Update to 1.17.3
- Support several backends for playing sounds
  Resolves: rhbz#2237674 https://bugzilla.redhat.com/show_bug.cgi?id=2237674
- Update Unihan_Variants.txt and regenerate engine/chinese_variants.py to Unicode Version 15.1.0</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.17.4-1" date="1699617600">- Update to 1.17.4
- Fix compose support for ibus &gt;= 1.5.28
  (Resolves: https://github.com/mike-fabian/ibus-table/issues/145)
- Translation update from Weblate (New language, Russian, (ru) 80%)
- Use “&lt;developer&gt;&lt;name&gt;…&lt;/name&gt;&lt;/developer&gt;” in ibus-table.appdata.xml instead of “&lt;developer_name&gt;…&lt;/developer_name&gt;”
  Because &lt;/developer_name&gt; is deprecated and it makes the build fail on Fedora rawhide.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.4-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.4-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.5-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.17.6-1" date="1719921600">- Update to 1.17.6</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.17.6-2" date="1720526400">- Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome-
  shell-extension-no-overview for the CI test</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.6-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="5010bf89c1e692255eb00c9e2505831fbbc1ae0479d52d0007aeba335cb86b7a" name="ibus-table-chinese" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="7.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.11-1" date="1667131200">- Update to 1.8.11
- Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
  (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
- Improve “improve_jyutping.py” to allow comments in the table
- Update of jyutping.txt for Unicode 15.0.0 final release</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.12-1" date="1670846400">- Update to 1.8.12
- appdata.xml files are now included upstream, remove from the .spec file
- Migrate license tags to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="eb62694ff21dbac6877700fcdf144050df86461d91a3d7e6b61061be6a1da662" name="ibus-table-chinese-array" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="7.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.11-1" date="1667131200">- Update to 1.8.11
- Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
  (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
- Improve “improve_jyutping.py” to allow comments in the table
- Update of jyutping.txt for Unicode 15.0.0 final release</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.12-1" date="1670846400">- Update to 1.8.12
- appdata.xml files are now included upstream, remove from the .spec file
- Migrate license tags to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="689344c84e3ac854425b1fcb15c880b9dd7afaade606a8f0bfb8e8a8cccd579b" name="ibus-table-chinese-cangjie" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="7.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.11-1" date="1667131200">- Update to 1.8.11
- Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
  (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
- Improve “improve_jyutping.py” to allow comments in the table
- Update of jyutping.txt for Unicode 15.0.0 final release</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.12-1" date="1670846400">- Update to 1.8.12
- appdata.xml files are now included upstream, remove from the .spec file
- Migrate license tags to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9750596e1eec73464500d1ed6df4257e350c71f8788a4c1eb8ba042aa0086a44" name="ibus-table-chinese-cantonese" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="7.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.11-1" date="1667131200">- Update to 1.8.11
- Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
  (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
- Improve “improve_jyutping.py” to allow comments in the table
- Update of jyutping.txt for Unicode 15.0.0 final release</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.12-1" date="1670846400">- Update to 1.8.12
- appdata.xml files are now included upstream, remove from the .spec file
- Migrate license tags to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="36df4e22c6cbe4bf1bbc99027c75c0ab314f4660c75224c7b10515ea1f419088" name="ibus-table-chinese-cantonyale" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="7.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.11-1" date="1667131200">- Update to 1.8.11
- Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
  (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
- Improve “improve_jyutping.py” to allow comments in the table
- Update of jyutping.txt for Unicode 15.0.0 final release</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.12-1" date="1670846400">- Update to 1.8.12
- appdata.xml files are now included upstream, remove from the .spec file
- Migrate license tags to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="165d49a7bdc898201f1e8f2d3833a1a36377301a6469b4a5dd82975d9956590d" name="ibus-table-chinese-easy" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="7.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.11-1" date="1667131200">- Update to 1.8.11
- Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
  (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
- Improve “improve_jyutping.py” to allow comments in the table
- Update of jyutping.txt for Unicode 15.0.0 final release</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.12-1" date="1670846400">- Update to 1.8.12
- appdata.xml files are now included upstream, remove from the .spec file
- Migrate license tags to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8d671029203bd116c077385ec844386c579e1e1f6522c605f78870c89a56d622" name="ibus-table-chinese-erbi" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="7.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.11-1" date="1667131200">- Update to 1.8.11
- Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
  (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
- Improve “improve_jyutping.py” to allow comments in the table
- Update of jyutping.txt for Unicode 15.0.0 final release</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.12-1" date="1670846400">- Update to 1.8.12
- appdata.xml files are now included upstream, remove from the .spec file
- Migrate license tags to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cf31564825cb787103ee6fadd78b161b7c1542a1c9a4a5be17f924eaeadd56e0" name="ibus-table-chinese-quick" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="7.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.11-1" date="1667131200">- Update to 1.8.11
- Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
  (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
- Improve “improve_jyutping.py” to allow comments in the table
- Update of jyutping.txt for Unicode 15.0.0 final release</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.12-1" date="1670846400">- Update to 1.8.12
- appdata.xml files are now included upstream, remove from the .spec file
- Migrate license tags to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7023c328711886938f17dc16311804438a3fc0751d601f82e84fa9bc82fc11f2" name="ibus-table-chinese-scj" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="7.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.11-1" date="1667131200">- Update to 1.8.11
- Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
  (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
- Improve “improve_jyutping.py” to allow comments in the table
- Update of jyutping.txt for Unicode 15.0.0 final release</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.12-1" date="1670846400">- Update to 1.8.12
- appdata.xml files are now included upstream, remove from the .spec file
- Migrate license tags to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="45f9cb7f7aed4d26aff90f8ac4e052bc64c07f62dd15089aa901185b4ee18381" name="ibus-table-chinese-stroke5" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="7.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.11-1" date="1667131200">- Update to 1.8.11
- Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
  (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
- Improve “improve_jyutping.py” to allow comments in the table
- Update of jyutping.txt for Unicode 15.0.0 final release</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.12-1" date="1670846400">- Update to 1.8.12
- appdata.xml files are now included upstream, remove from the .spec file
- Migrate license tags to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e828af147d8da2f278e8bf947034537cd0d5cf01ebcb11b4f32a554c8d1a0d4c" name="ibus-table-chinese-wu" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="7.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.11-1" date="1667131200">- Update to 1.8.11
- Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
  (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
- Improve “improve_jyutping.py” to allow comments in the table
- Update of jyutping.txt for Unicode 15.0.0 final release</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.12-1" date="1670846400">- Update to 1.8.12
- appdata.xml files are now included upstream, remove from the .spec file
- Migrate license tags to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c7e4804f31e4d036f7f6f8e54d814674cf54111c141e1a240539bd38add4d6ae" name="ibus-table-chinese-wubi-haifeng" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="7.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.11-1" date="1667131200">- Update to 1.8.11
- Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
  (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
- Improve “improve_jyutping.py” to allow comments in the table
- Update of jyutping.txt for Unicode 15.0.0 final release</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.12-1" date="1670846400">- Update to 1.8.12
- appdata.xml files are now included upstream, remove from the .spec file
- Migrate license tags to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="09d9ef2b3f09d76de98a99809c96b2f1b9f042102bcf89ba5cb7eca5586e3caa" name="ibus-table-chinese-wubi-jidian" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="7.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.11-1" date="1667131200">- Update to 1.8.11
- Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
  (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
- Improve “improve_jyutping.py” to allow comments in the table
- Update of jyutping.txt for Unicode 15.0.0 final release</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.12-1" date="1670846400">- Update to 1.8.12
- appdata.xml files are now included upstream, remove from the .spec file
- Migrate license tags to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4a598e826f7b6ea44483051cdd6aea1416ece34f4fb38e1f1794252712b95699" name="ibus-table-chinese-yong" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="7.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.11-1" date="1667131200">- Update to 1.8.11
- Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
  (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
- Improve “improve_jyutping.py” to allow comments in the table
- Update of jyutping.txt for Unicode 15.0.0 final release</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.12-1" date="1670846400">- Update to 1.8.12
- appdata.xml files are now included upstream, remove from the .spec file
- Migrate license tags to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.12-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.12-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="80ca11d01fa88ca4a0a9e3b16cb70ec12b45e339554f47ca0e9eab2521f6476a" name="ibus-table-code" arch="noarch">
  <version epoch="0" ver="1.3.17" rel="5.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.14-1" date="1669464000">- Update to latest upstream 1.3.14
- Migrate license tags to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.15-1" date="1677067200">- Update to latest upstream 1.3.15
- Remove { and } from VALID_INPUT_CHARS in latex.txt
- Add “Mongol bichig” to README</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.16-1" date="1688472000">- Update to latest upstream 1.3.16
- hu-old-hungarian-rovas: several improvements,
  most of them suggested by Viktor Kovács &lt;kov.h.vik@gmail.com&gt;
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/33
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/34
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/30
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/31
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/35
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/32
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/29</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.16-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.17-1" date="1691582400">- Update to latest upstream 1.3.17
- Rename emoji-table to emoticon-table
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/15
- Remove useless m4/as-version.m4
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.17-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.17-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.17-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.17-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ff9fb111928e49fabc0b5889fc0919d77150efc6085c0c00d38f0173f8ea3e1e" name="ibus-table-cyrillic" arch="noarch">
  <version epoch="0" ver="1.3.17" rel="5.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.14-1" date="1669464000">- Update to latest upstream 1.3.14
- Migrate license tags to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.15-1" date="1677067200">- Update to latest upstream 1.3.15
- Remove { and } from VALID_INPUT_CHARS in latex.txt
- Add “Mongol bichig” to README</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.16-1" date="1688472000">- Update to latest upstream 1.3.16
- hu-old-hungarian-rovas: several improvements,
  most of them suggested by Viktor Kovács &lt;kov.h.vik@gmail.com&gt;
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/33
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/34
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/30
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/31
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/35
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/32
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/29</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.16-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.17-1" date="1691582400">- Update to latest upstream 1.3.17
- Rename emoji-table to emoticon-table
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/15
- Remove useless m4/as-version.m4
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.17-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.17-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.17-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.17-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ecc788d563aea0fd17b51245162b6b437057434098a98bd11849db1a4c0999a2" name="ibus-table-devel" arch="noarch">
  <version epoch="0" ver="1.17.6" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.17.2-1" date="1692619200">- Update to 1.17.2
- Translation update from Weblate (de 100%, tr 100%)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.17.3-1" date="1694692800">- Update to 1.17.3
- Support several backends for playing sounds
  Resolves: rhbz#2237674 https://bugzilla.redhat.com/show_bug.cgi?id=2237674
- Update Unihan_Variants.txt and regenerate engine/chinese_variants.py to Unicode Version 15.1.0</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.17.4-1" date="1699617600">- Update to 1.17.4
- Fix compose support for ibus &gt;= 1.5.28
  (Resolves: https://github.com/mike-fabian/ibus-table/issues/145)
- Translation update from Weblate (New language, Russian, (ru) 80%)
- Use “&lt;developer&gt;&lt;name&gt;…&lt;/name&gt;&lt;/developer&gt;” in ibus-table.appdata.xml instead of “&lt;developer_name&gt;…&lt;/developer_name&gt;”
  Because &lt;/developer_name&gt; is deprecated and it makes the build fail on Fedora rawhide.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.4-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.4-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.5-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.17.6-1" date="1719921600">- Update to 1.17.6</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.17.6-2" date="1720526400">- Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome-
  shell-extension-no-overview for the CI test</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.6-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="768d484d780de6eccb4f29b098e3ff8fe810a7417516073a8b0809da5f2bf811" name="ibus-table-latin" arch="noarch">
  <version epoch="0" ver="1.3.17" rel="5.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.14-1" date="1669464000">- Update to latest upstream 1.3.14
- Migrate license tags to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.15-1" date="1677067200">- Update to latest upstream 1.3.15
- Remove { and } from VALID_INPUT_CHARS in latex.txt
- Add “Mongol bichig” to README</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.16-1" date="1688472000">- Update to latest upstream 1.3.16
- hu-old-hungarian-rovas: several improvements,
  most of them suggested by Viktor Kovács &lt;kov.h.vik@gmail.com&gt;
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/33
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/34
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/30
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/31
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/35
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/32
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/29</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.16-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.17-1" date="1691582400">- Update to latest upstream 1.3.17
- Rename emoji-table to emoticon-table
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/15
- Remove useless m4/as-version.m4
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.17-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.17-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.17-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.17-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="31b8e13e15b04eefb8913d20e8eb46ab3a6cd4ad13d361c86fdcdeff4bad5aef" name="ibus-table-mathwriter" arch="noarch">
  <version epoch="0" ver="1.3.17" rel="5.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.14-1" date="1669464000">- Update to latest upstream 1.3.14
- Migrate license tags to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.15-1" date="1677067200">- Update to latest upstream 1.3.15
- Remove { and } from VALID_INPUT_CHARS in latex.txt
- Add “Mongol bichig” to README</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.16-1" date="1688472000">- Update to latest upstream 1.3.16
- hu-old-hungarian-rovas: several improvements,
  most of them suggested by Viktor Kovács &lt;kov.h.vik@gmail.com&gt;
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/33
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/34
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/30
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/31
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/35
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/32
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/29</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.16-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.17-1" date="1691582400">- Update to latest upstream 1.3.17
- Rename emoji-table to emoticon-table
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/15
- Remove useless m4/as-version.m4
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.17-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.17-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.17-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.17-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4cff1e5f3217ab1dbe0850f36e85bf3ba033a0dc55b5280b26fd3267cfd36ea7" name="ibus-table-mongol" arch="noarch">
  <version epoch="0" ver="1.3.17" rel="5.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.14-1" date="1669464000">- Update to latest upstream 1.3.14
- Migrate license tags to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.15-1" date="1677067200">- Update to latest upstream 1.3.15
- Remove { and } from VALID_INPUT_CHARS in latex.txt
- Add “Mongol bichig” to README</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.16-1" date="1688472000">- Update to latest upstream 1.3.16
- hu-old-hungarian-rovas: several improvements,
  most of them suggested by Viktor Kovács &lt;kov.h.vik@gmail.com&gt;
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/33
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/34
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/30
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/31
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/35
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/32
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/29</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.16-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.17-1" date="1691582400">- Update to latest upstream 1.3.17
- Rename emoji-table to emoticon-table
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/15
- Remove useless m4/as-version.m4
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.17-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.17-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.17-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.17-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3b871c1376ff7de73d12b1802ba6d2ed1087fa9d1dd2787ec21d73daeb9343e9" name="ibus-table-others" arch="noarch">
  <version epoch="0" ver="1.3.17" rel="5.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.14-1" date="1669464000">- Update to latest upstream 1.3.14
- Migrate license tags to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.15-1" date="1677067200">- Update to latest upstream 1.3.15
- Remove { and } from VALID_INPUT_CHARS in latex.txt
- Add “Mongol bichig” to README</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.16-1" date="1688472000">- Update to latest upstream 1.3.16
- hu-old-hungarian-rovas: several improvements,
  most of them suggested by Viktor Kovács &lt;kov.h.vik@gmail.com&gt;
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/33
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/34
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/30
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/31
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/35
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/32
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/29</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.16-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.17-1" date="1691582400">- Update to latest upstream 1.3.17
- Rename emoji-table to emoticon-table
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/15
- Remove useless m4/as-version.m4
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.17-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.17-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.17-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.17-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="370f662739df38e81078683f1231da65a47bfad7eaf4b2769a25b4108b9de8fd" name="ibus-table-tests" arch="noarch">
  <version epoch="0" ver="1.17.6" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.17.2-1" date="1692619200">- Update to 1.17.2
- Translation update from Weblate (de 100%, tr 100%)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.17.3-1" date="1694692800">- Update to 1.17.3
- Support several backends for playing sounds
  Resolves: rhbz#2237674 https://bugzilla.redhat.com/show_bug.cgi?id=2237674
- Update Unihan_Variants.txt and regenerate engine/chinese_variants.py to Unicode Version 15.1.0</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.17.4-1" date="1699617600">- Update to 1.17.4
- Fix compose support for ibus &gt;= 1.5.28
  (Resolves: https://github.com/mike-fabian/ibus-table/issues/145)
- Translation update from Weblate (New language, Russian, (ru) 80%)
- Use “&lt;developer&gt;&lt;name&gt;…&lt;/name&gt;&lt;/developer&gt;” in ibus-table.appdata.xml instead of “&lt;developer_name&gt;…&lt;/developer_name&gt;”
  Because &lt;/developer_name&gt; is deprecated and it makes the build fail on Fedora rawhide.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.4-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.4-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.5-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.17.6-1" date="1719921600">- Update to 1.17.6</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.17.6-2" date="1720526400">- Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome-
  shell-extension-no-overview for the CI test</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.6-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="14afb31e6f520b653f5618aef6899d245108fda339c222b8bd332ba09ba55a90" name="ibus-table-translit" arch="noarch">
  <version epoch="0" ver="1.3.17" rel="5.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.14-1" date="1669464000">- Update to latest upstream 1.3.14
- Migrate license tags to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.15-1" date="1677067200">- Update to latest upstream 1.3.15
- Remove { and } from VALID_INPUT_CHARS in latex.txt
- Add “Mongol bichig” to README</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.16-1" date="1688472000">- Update to latest upstream 1.3.16
- hu-old-hungarian-rovas: several improvements,
  most of them suggested by Viktor Kovács &lt;kov.h.vik@gmail.com&gt;
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/33
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/34
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/30
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/31
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/35
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/32
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/29</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.16-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.17-1" date="1691582400">- Update to latest upstream 1.3.17
- Rename emoji-table to emoticon-table
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/15
- Remove useless m4/as-version.m4
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.17-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.17-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.17-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.17-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1a46d6fc0fa0d0e78036ea6c410b058cc70445b9e5e49f49153a0be7f54db7ca" name="ibus-table-tv" arch="noarch">
  <version epoch="0" ver="1.3.17" rel="5.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.14-1" date="1669464000">- Update to latest upstream 1.3.14
- Migrate license tags to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.14-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.15-1" date="1677067200">- Update to latest upstream 1.3.15
- Remove { and } from VALID_INPUT_CHARS in latex.txt
- Add “Mongol bichig” to README</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.16-1" date="1688472000">- Update to latest upstream 1.3.16
- hu-old-hungarian-rovas: several improvements,
  most of them suggested by Viktor Kovács &lt;kov.h.vik@gmail.com&gt;
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/33
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/34
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/30
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/31
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/35
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/32
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/29</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.16-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.3.17-1" date="1691582400">- Update to latest upstream 1.3.17
- Rename emoji-table to emoticon-table
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/15
- Remove useless m4/as-version.m4
  Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.17-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.17-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.17-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.17-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6ac70a40d77245acd53a4cb71621e65151782512b81ebc3137929a5604690ac7" name="ibus-tests" arch="x86_64">
  <version epoch="0" ver="1.5.32" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.31~beta1-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-9" date="1722081600">- Update CI for RHEL packages</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-10" date="1722081601">- Replace GNOME Xorg with GNOME Wayland in CI
- Replace STI with TMT in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-11" date="1722254400">- Disable ibus-panel rich condition in RHEL
- Delete ibus-xx-desktop-testing-mutter.patch
- Delete libXtst-devel dependency
- Replace gnome-terminal with ptyxis
- Install gnome-desktop-testing for RHEL
- Delete xorg-x11-server-Xvfb gnome-session-xsession
- Delete build packages for gnome-desktop-testing for RHEL
- Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
- Fix CI test case conditions
- Add no-overview@fthx until gnome-shell-extension-no-overview is available
- Add gnome-headless-session@.service until GDM will provide it</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-12" date="1722513600">- Delete tmt installation for RHEL10 CI</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.31~beta1-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-1" date="1731412800">- Bump to 1.5.31
- Delete RHEL specific packages
- Update installed packages in CI
- configure option for Flatpak build
- Move xinit post scripts
- Require gnome-shell-extension-no-overview in RHEL</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-2" date="1731499200">- Move gnome-calendar &amp; gnome-epub-thumbnailer to Fedora specific in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-3" date="1731585600">- Rebuild to export GSK_RENDERER=cairo in CentOS but not RHEL for Vulkan</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.32-1" date="1744286400">- Resolves: RHEL-83888 Bump to 1.5.32</changelog>
</package>
<package pkgid="37932ac77360d138b33022ec146d362b0fb139d76dbfcacb92347753736e3ff8" name="ibus-typing-booster" arch="noarch">
  <version epoch="0" ver="2.25.13" rel="2.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.4-1" date="1713182400">- Resolves: RHEL-31506 Update to 2.25.4
- Pass key which triggered cancel command to application if
  self._min_char_complete == 0 and there are no candidates (Resolves:
  https://github.com/mike-fabian/ibus-typing-booster/issues/505)
- Update emoji annotations from CLDR
- Translation update from Weblate (ka 100%)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.6-1" date="1713182401">- Resolves: RHEL-31506 Update to 2.25.6
- If Shift+something is pressed and then released, do not swallow the
  release of the Shift key (Resolves: https://github.com/mike-fabian/ibus-
  typing-booster/issues/504)
- Decrease grid_row_spacing from 5 to 1 pixels to make the setup tool still
  fit on a 1024x768 pixel screen</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.7-1" date="1713182402">- Resolves: RHEL-31506 Release 2.25.7
- Don’t use forward_key_event() on Gnome Wayland if the key might be a
  keyboard shortcut using a modifier (Resolves: https://github.com/mike-
  fabian/ibus-typing-booster/issues/507)</changelog>
  <changelog author="Pooja Yadav &lt;poyadav@redhat.com&gt; - 2.25.7-2" date="1713960000">- adding gating.yaml</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.9-1" date="1718798400">- Resolves: RHEL-36638 Update to 2.25.9 and Remove dependency on Xvfb from
  CI tests
- Translation update from Weblate (cs 100%)
- Update emoji annotations from CLDR
- Drop Python &lt; 3.6 support
- Fix test_0_gtk.py: typing booster now avoids clearing the input in
  do_reset() when the preedit is empty
- Remove dependency on Xvfb from ibus-typing-booster.spec
- Support compose sequences containing ASCII keys written as &lt;U00XX&gt; code
  points (Resolves: https://github.com/mike-fabian/ibus-typing-
  booster/issues/510)
- Translation update from Weblate (pt 91.3%)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.25.9-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.11-1" date="1719921600">- Resolves: RHEL-31506 Update to 2.25.11
- Yet another fix to make it possible again to use keys with Unicode
  keysyms in keybindings and make it work with all known versions of ibus
  (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/497)
- Use NFC when doing the cursor correction after committing a preedit using
  space (Resolves: https://github.com/mike-fabian/ibus-typing-
  booster/issues/515)
- Fix for ibus-1.5.30: Make it possible again to use keys with Unicode
  keysyms in keybindings (Resolves: https://github.com/mike-fabian/ibus-
  typing-booster/issues/497)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.12-1" date="1720526400">- Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome-
  desktop-testing, ibus-desktop-testing, gnome-shell-extension-no-overview
  for the CI test</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.13-1" date="1721390400">- Resolves: RHEL-36638 Fix CI test</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.25.13-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="a39e60b44c524d65fb91c820fb7e95476378b5514db8a3f69d940a97153fe4ca" name="ibus-typing-booster-tests" arch="noarch">
  <version epoch="0" ver="2.25.13" rel="2.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.4-1" date="1713182400">- Resolves: RHEL-31506 Update to 2.25.4
- Pass key which triggered cancel command to application if
  self._min_char_complete == 0 and there are no candidates (Resolves:
  https://github.com/mike-fabian/ibus-typing-booster/issues/505)
- Update emoji annotations from CLDR
- Translation update from Weblate (ka 100%)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.6-1" date="1713182401">- Resolves: RHEL-31506 Update to 2.25.6
- If Shift+something is pressed and then released, do not swallow the
  release of the Shift key (Resolves: https://github.com/mike-fabian/ibus-
  typing-booster/issues/504)
- Decrease grid_row_spacing from 5 to 1 pixels to make the setup tool still
  fit on a 1024x768 pixel screen</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.7-1" date="1713182402">- Resolves: RHEL-31506 Release 2.25.7
- Don’t use forward_key_event() on Gnome Wayland if the key might be a
  keyboard shortcut using a modifier (Resolves: https://github.com/mike-
  fabian/ibus-typing-booster/issues/507)</changelog>
  <changelog author="Pooja Yadav &lt;poyadav@redhat.com&gt; - 2.25.7-2" date="1713960000">- adding gating.yaml</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.9-1" date="1718798400">- Resolves: RHEL-36638 Update to 2.25.9 and Remove dependency on Xvfb from
  CI tests
- Translation update from Weblate (cs 100%)
- Update emoji annotations from CLDR
- Drop Python &lt; 3.6 support
- Fix test_0_gtk.py: typing booster now avoids clearing the input in
  do_reset() when the preedit is empty
- Remove dependency on Xvfb from ibus-typing-booster.spec
- Support compose sequences containing ASCII keys written as &lt;U00XX&gt; code
  points (Resolves: https://github.com/mike-fabian/ibus-typing-
  booster/issues/510)
- Translation update from Weblate (pt 91.3%)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.25.9-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.11-1" date="1719921600">- Resolves: RHEL-31506 Update to 2.25.11
- Yet another fix to make it possible again to use keys with Unicode
  keysyms in keybindings and make it work with all known versions of ibus
  (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/497)
- Use NFC when doing the cursor correction after committing a preedit using
  space (Resolves: https://github.com/mike-fabian/ibus-typing-
  booster/issues/515)
- Fix for ibus-1.5.30: Make it possible again to use keys with Unicode
  keysyms in keybindings (Resolves: https://github.com/mike-fabian/ibus-
  typing-booster/issues/497)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.12-1" date="1720526400">- Resolves: RHEL-36633 Do not require gnome-session, gnome-shell, gnome-
  desktop-testing, ibus-desktop-testing, gnome-shell-extension-no-overview
  for the CI test</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.25.13-1" date="1721390400">- Resolves: RHEL-36638 Fix CI test</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.25.13-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="9a3aa833e0cb0e2b805752875a94768500a1cfd5edb266c753ce8bad493ab035" name="ibus-wayland" arch="x86_64">
  <version epoch="0" ver="1.5.32" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.31~beta1-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-9" date="1722081600">- Update CI for RHEL packages</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-10" date="1722081601">- Replace GNOME Xorg with GNOME Wayland in CI
- Replace STI with TMT in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-11" date="1722254400">- Disable ibus-panel rich condition in RHEL
- Delete ibus-xx-desktop-testing-mutter.patch
- Delete libXtst-devel dependency
- Replace gnome-terminal with ptyxis
- Install gnome-desktop-testing for RHEL
- Delete xorg-x11-server-Xvfb gnome-session-xsession
- Delete build packages for gnome-desktop-testing for RHEL
- Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
- Fix CI test case conditions
- Add no-overview@fthx until gnome-shell-extension-no-overview is available
- Add gnome-headless-session@.service until GDM will provide it</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-12" date="1722513600">- Delete tmt installation for RHEL10 CI</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.31~beta1-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-1" date="1731412800">- Bump to 1.5.31
- Delete RHEL specific packages
- Update installed packages in CI
- configure option for Flatpak build
- Move xinit post scripts
- Require gnome-shell-extension-no-overview in RHEL</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-2" date="1731499200">- Move gnome-calendar &amp; gnome-epub-thumbnailer to Fedora specific in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-3" date="1731585600">- Rebuild to export GSK_RENDERER=cairo in CentOS but not RHEL for Vulkan</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.32-1" date="1744286400">- Resolves: RHEL-83888 Bump to 1.5.32</changelog>
</package>
<package pkgid="591a81268e1334fc161bee30e6711c790573f6ba779759f846c537bd49adc2f3" name="ibus-xinit" arch="noarch">
  <version epoch="0" ver="1.5.32" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.31~beta1-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-9" date="1722081600">- Update CI for RHEL packages</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-10" date="1722081601">- Replace GNOME Xorg with GNOME Wayland in CI
- Replace STI with TMT in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-11" date="1722254400">- Disable ibus-panel rich condition in RHEL
- Delete ibus-xx-desktop-testing-mutter.patch
- Delete libXtst-devel dependency
- Replace gnome-terminal with ptyxis
- Install gnome-desktop-testing for RHEL
- Delete xorg-x11-server-Xvfb gnome-session-xsession
- Delete build packages for gnome-desktop-testing for RHEL
- Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
- Fix CI test case conditions
- Add no-overview@fthx until gnome-shell-extension-no-overview is available
- Add gnome-headless-session@.service until GDM will provide it</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31~beta1-12" date="1722513600">- Delete tmt installation for RHEL10 CI</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.31~beta1-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-1" date="1731412800">- Bump to 1.5.31
- Delete RHEL specific packages
- Update installed packages in CI
- configure option for Flatpak build
- Move xinit post scripts
- Require gnome-shell-extension-no-overview in RHEL</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-2" date="1731499200">- Move gnome-calendar &amp; gnome-epub-thumbnailer to Fedora specific in CI</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.31-3" date="1731585600">- Rebuild to export GSK_RENDERER=cairo in CentOS but not RHEL for Vulkan</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.32-1" date="1744286400">- Resolves: RHEL-83888 Bump to 1.5.32</changelog>
</package>
<package pkgid="76e7b7b303ddd23188e86725dade55f7c3074c2bf442954e922754cf524c51c6" name="icoutils" arch="x86_64">
  <version epoch="0" ver="0.32.3" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.32.3-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.32.3-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; - 0.32.3-14" date="1690200000">- updated License field (https://src.fedoraproject.org/rpms/icoutils/pull-request/2)
- updated %patch to new syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.32.3-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.32.3-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.32.3-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.32.3-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="28b7470c6797c0a17d056fc51f5c89f7770173507c39ec915b151304799e3b58" name="icu" arch="x86_64">
  <version epoch="0" ver="74.2" rel="5.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 73.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 73.2-3" date="1702468800">- Fix broken TestHebrewCalendarInTemporalLeapYear</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 73.2-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 73.2-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 74.1-1" date="1706529600">- Update to 74.1</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 74.2-1" date="1706702400">- Update to 74.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 74.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 74.2-3" date="1726833600">- Resolves: RHEL-59365 Fix coverity warnings</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 74.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 74.2-5" date="1751976000">- ICU-22973 Fix buffer overflow by using CharString
  Resolves: RHEL-96667</changelog>
</package>
<package pkgid="e0c526f01d22e7d14f0a01637aa88dbbc42da971e7d272ec3863dbe5ca27881d" name="idm-jss" arch="x86_64">
  <version epoch="0" ver="5.9.0" rel="3.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 5.5.0-3" date="1723636800">- Rebuilt with java-21-openjdk as default JDK:
  https://issues.redhat.com/browse/RHEL-34597
- Resolves: RHEL-54331</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.5.0-3.1" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.6.0-alpha1" date="1733400000">- Rebase to JSS 5.6.0-alpha1</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt;- 5.6.0-1" date="1739620800">- Rebase to JSS 5.6.0</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.7.0-2" date="1754481600">- Rebase to JSS 5.7.0
- Jira Ticket RHCS-98721 ACME server: RFC 8555 violation: Support ES256 #4638 [rhel-10]
- Jira Ticket IDM-2428 build encountered: PQC alg defs to match with NSS V3.112</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-1-beta1" date="1768996800">- Rebase to JSS 5.9.0-beta1
- Resolves RHEL-143049: Add support to ML-DSA</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-1-beta2" date="1770379200">- Rebase to JSS 5.9.0-beta2
- Resolves RHEL-143049: Add support to ML-DSA</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-1" date="1772798400">- Rebase to JSS 5.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
</package>
<package pkgid="9741b13326e4f41a7e79e1d3484bc3fa1e80e2bc2086a52e3874a987826fc479" name="idm-jss-javadoc" arch="x86_64">
  <version epoch="0" ver="5.9.0" rel="3.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 5.5.0-3" date="1723636800">- Rebuilt with java-21-openjdk as default JDK:
  https://issues.redhat.com/browse/RHEL-34597
- Resolves: RHEL-54331</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.5.0-3.1" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.6.0-alpha1" date="1733400000">- Rebase to JSS 5.6.0-alpha1</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt;- 5.6.0-1" date="1739620800">- Rebase to JSS 5.6.0</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.7.0-2" date="1754481600">- Rebase to JSS 5.7.0
- Jira Ticket RHCS-98721 ACME server: RFC 8555 violation: Support ES256 #4638 [rhel-10]
- Jira Ticket IDM-2428 build encountered: PQC alg defs to match with NSS V3.112</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-1-beta1" date="1768996800">- Rebase to JSS 5.9.0-beta1
- Resolves RHEL-143049: Add support to ML-DSA</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-1-beta2" date="1770379200">- Rebase to JSS 5.9.0-beta2
- Resolves RHEL-143049: Add support to ML-DSA</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-1" date="1772798400">- Rebase to JSS 5.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
</package>
<package pkgid="91ff60eff369b913f2d19cac6ec5457a6b7d1b6d518a3dac8ea284f04ec9e9a4" name="idm-jss-tomcat" arch="x86_64">
  <version epoch="0" ver="5.9.0" rel="3.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 5.5.0-3" date="1723636800">- Rebuilt with java-21-openjdk as default JDK:
  https://issues.redhat.com/browse/RHEL-34597
- Resolves: RHEL-54331</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.5.0-3.1" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.6.0-alpha1" date="1733400000">- Rebase to JSS 5.6.0-alpha1</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt;- 5.6.0-1" date="1739620800">- Rebase to JSS 5.6.0</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.7.0-2" date="1754481600">- Rebase to JSS 5.7.0
- Jira Ticket RHCS-98721 ACME server: RFC 8555 violation: Support ES256 #4638 [rhel-10]
- Jira Ticket IDM-2428 build encountered: PQC alg defs to match with NSS V3.112</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-1-beta1" date="1768996800">- Rebase to JSS 5.9.0-beta1
- Resolves RHEL-143049: Add support to ML-DSA</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-1-beta2" date="1770379200">- Rebase to JSS 5.9.0-beta2
- Resolves RHEL-143049: Add support to ML-DSA</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-1" date="1772798400">- Rebase to JSS 5.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
</package>
<package pkgid="25ef32c3835421af0a06efab86813c49bb9597e1a49550e9e886e4114eaad901" name="idm-jss-tools" arch="x86_64">
  <version epoch="0" ver="5.9.0" rel="3.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 5.5.0-3" date="1723636800">- Rebuilt with java-21-openjdk as default JDK:
  https://issues.redhat.com/browse/RHEL-34597
- Resolves: RHEL-54331</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.5.0-3.1" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.6.0-alpha1" date="1733400000">- Rebase to JSS 5.6.0-alpha1</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt;- 5.6.0-1" date="1739620800">- Rebase to JSS 5.6.0</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.7.0-2" date="1754481600">- Rebase to JSS 5.7.0
- Jira Ticket RHCS-98721 ACME server: RFC 8555 violation: Support ES256 #4638 [rhel-10]
- Jira Ticket IDM-2428 build encountered: PQC alg defs to match with NSS V3.112</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-1-beta1" date="1768996800">- Rebase to JSS 5.9.0-beta1
- Resolves RHEL-143049: Add support to ML-DSA</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-1-beta2" date="1770379200">- Rebase to JSS 5.9.0-beta2
- Resolves RHEL-143049: Add support to ML-DSA</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-1" date="1772798400">- Rebase to JSS 5.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
</package>
<package pkgid="c74c52d59a4253cdf57c378d7a694ec3873a69fa4b98ae7c2ddc7a37ada10808" name="idm-ldapjdk" arch="noarch">
  <version epoch="0" ver="5.6.0" rel="1.el10"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-2" date="1715342400">- Rebase to LDAP SDK 5.5.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.5.0-2.1" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 5.5.0-3" date="1723636800">- Rebuilt with java-21-openjdk as default JDK:
  https://issues.redhat.com/browse/RHEL-34597
- Resolves: RHEL-54333</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.5.0-3.1" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.6.0-alpha1" date="1733745600">- Rebase to LDAP SDK 5.6.0-alpha1</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.6.0-1" date="1739534400">- Rebase to LDAP SDK 5.6.0</changelog>
</package>
<package pkgid="ee5e35a6b424ed29c75ca05afe04ea5e4956456bf6a032eff5459108788829e7" name="idm-ldapjdk-javadoc" arch="noarch">
  <version epoch="0" ver="5.6.0" rel="1.el10"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-2" date="1715342400">- Rebase to LDAP SDK 5.5.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.5.0-2.1" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 5.5.0-3" date="1723636800">- Rebuilt with java-21-openjdk as default JDK:
  https://issues.redhat.com/browse/RHEL-34597
- Resolves: RHEL-54333</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.5.0-3.1" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.6.0-alpha1" date="1733745600">- Rebase to LDAP SDK 5.6.0-alpha1</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.6.0-1" date="1739534400">- Rebase to LDAP SDK 5.6.0</changelog>
</package>
<package pkgid="59cb614b98e13eb8cca660d9d5b594cf78e843882911fd05759e6778d79216a9" name="idm-pki" arch="x86_64">
  <version epoch="0" ver="11.9.0" rel="3.el10_2.rocky.0.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 11.6.0-0.3.alpha2" date="1738756800">- update to use tomcat9
  Resolves: RHEL-78038
- fix FTBFS</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-1" date="1739707200">- Rebase to PKI 11.6.0
- Resolves: RHEL-70108
- Resolves: RHEL-75585
- Resolves: RHEL-75546
- Resolves: RHEL-74371
- Resolves: RHEL-63015</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.0-2" date="1754481600">- Rebase to PKI 11.7.0
- Resolves: RHEL-99832</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.1-1" date="1763380800">- Rebase to PKI 11.7.1
- Resolves: RHEL-76752
- Resolves: RHEL-108293
- Resolves: RHEL-27181</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta1" date="1769083200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta2" date="1770379200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552
- Resolves: RHEL-75980</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-1" date="1772798400">- Rebase to PKI 11.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 11.9.0-3.rocky.0.1" date="1776686400">- Add rocky as a build.sh option</changelog>
</package>
<package pkgid="a0f8df639ec418ac38ba46cffe3edd111be3c6c4d003ea8c42d9d27a379e916c" name="idm-pki" arch="x86_64">
  <version epoch="0" ver="11.9.0" rel="4.el10_2.rocky.0.1"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-1" date="1739707200">- Rebase to PKI 11.6.0
- Resolves: RHEL-70108
- Resolves: RHEL-75585
- Resolves: RHEL-75546
- Resolves: RHEL-74371
- Resolves: RHEL-63015</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.0-2" date="1754481600">- Rebase to PKI 11.7.0
- Resolves: RHEL-99832</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.1-1" date="1763380800">- Rebase to PKI 11.7.1
- Resolves: RHEL-76752
- Resolves: RHEL-108293
- Resolves: RHEL-27181</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta1" date="1769083200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta2" date="1770379200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552
- Resolves: RHEL-75980</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-1" date="1772798400">- Rebase to PKI 11.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-4" date="1784203200">- Update jackson bundled to 2.21.4 
- Resolves: RHEL-188290
- Resolves: RHEL-190906</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 11.9.0-4.rocky.0.1" date="1784721600">- Add rocky as a build.sh option</changelog>
</package>
<package pkgid="dac2f99ceeacfb0e895f0354378768c8d5ffb93444c4576333b6cecc95b53be6" name="idm-pki-acme" arch="noarch">
  <version epoch="0" ver="11.9.0" rel="3.el10_2.rocky.0.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 11.6.0-0.3.alpha2" date="1738756800">- update to use tomcat9
  Resolves: RHEL-78038
- fix FTBFS</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-1" date="1739707200">- Rebase to PKI 11.6.0
- Resolves: RHEL-70108
- Resolves: RHEL-75585
- Resolves: RHEL-75546
- Resolves: RHEL-74371
- Resolves: RHEL-63015</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.0-2" date="1754481600">- Rebase to PKI 11.7.0
- Resolves: RHEL-99832</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.1-1" date="1763380800">- Rebase to PKI 11.7.1
- Resolves: RHEL-76752
- Resolves: RHEL-108293
- Resolves: RHEL-27181</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta1" date="1769083200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta2" date="1770379200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552
- Resolves: RHEL-75980</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-1" date="1772798400">- Rebase to PKI 11.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 11.9.0-3.rocky.0.1" date="1776686400">- Add rocky as a build.sh option</changelog>
</package>
<package pkgid="41dc615c14ce67d13c3be27d9c24a7100f843ed26c8fec95ce234fdeb91b31e4" name="idm-pki-acme" arch="noarch">
  <version epoch="0" ver="11.9.0" rel="4.el10_2.rocky.0.1"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-1" date="1739707200">- Rebase to PKI 11.6.0
- Resolves: RHEL-70108
- Resolves: RHEL-75585
- Resolves: RHEL-75546
- Resolves: RHEL-74371
- Resolves: RHEL-63015</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.0-2" date="1754481600">- Rebase to PKI 11.7.0
- Resolves: RHEL-99832</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.1-1" date="1763380800">- Rebase to PKI 11.7.1
- Resolves: RHEL-76752
- Resolves: RHEL-108293
- Resolves: RHEL-27181</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta1" date="1769083200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta2" date="1770379200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552
- Resolves: RHEL-75980</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-1" date="1772798400">- Rebase to PKI 11.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-4" date="1784203200">- Update jackson bundled to 2.21.4 
- Resolves: RHEL-188290
- Resolves: RHEL-190906</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 11.9.0-4.rocky.0.1" date="1784721600">- Add rocky as a build.sh option</changelog>
</package>
<package pkgid="968e576e5129725bc94ebf1351a1986b614bf3d58afe9fd63de2181970f59df9" name="idm-pki-base" arch="noarch">
  <version epoch="0" ver="11.9.0" rel="3.el10_2.rocky.0.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 11.6.0-0.3.alpha2" date="1738756800">- update to use tomcat9
  Resolves: RHEL-78038
- fix FTBFS</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-1" date="1739707200">- Rebase to PKI 11.6.0
- Resolves: RHEL-70108
- Resolves: RHEL-75585
- Resolves: RHEL-75546
- Resolves: RHEL-74371
- Resolves: RHEL-63015</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.0-2" date="1754481600">- Rebase to PKI 11.7.0
- Resolves: RHEL-99832</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.1-1" date="1763380800">- Rebase to PKI 11.7.1
- Resolves: RHEL-76752
- Resolves: RHEL-108293
- Resolves: RHEL-27181</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta1" date="1769083200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta2" date="1770379200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552
- Resolves: RHEL-75980</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-1" date="1772798400">- Rebase to PKI 11.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 11.9.0-3.rocky.0.1" date="1776686400">- Add rocky as a build.sh option</changelog>
</package>
<package pkgid="8e8f843ddc2bfa4ac5bec288a009b178cfc44779ed69cc1db066d9060f497b4f" name="idm-pki-base" arch="noarch">
  <version epoch="0" ver="11.9.0" rel="4.el10_2.rocky.0.1"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-1" date="1739707200">- Rebase to PKI 11.6.0
- Resolves: RHEL-70108
- Resolves: RHEL-75585
- Resolves: RHEL-75546
- Resolves: RHEL-74371
- Resolves: RHEL-63015</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.0-2" date="1754481600">- Rebase to PKI 11.7.0
- Resolves: RHEL-99832</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.1-1" date="1763380800">- Rebase to PKI 11.7.1
- Resolves: RHEL-76752
- Resolves: RHEL-108293
- Resolves: RHEL-27181</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta1" date="1769083200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta2" date="1770379200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552
- Resolves: RHEL-75980</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-1" date="1772798400">- Rebase to PKI 11.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-4" date="1784203200">- Update jackson bundled to 2.21.4 
- Resolves: RHEL-188290
- Resolves: RHEL-190906</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 11.9.0-4.rocky.0.1" date="1784721600">- Add rocky as a build.sh option</changelog>
</package>
<package pkgid="33787fdd2fe68a0bff5e78d1bd790dbaa3697842d11f14be750d9a72fc9e2c51" name="idm-pki-ca" arch="noarch">
  <version epoch="0" ver="11.9.0" rel="3.el10_2.rocky.0.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 11.6.0-0.3.alpha2" date="1738756800">- update to use tomcat9
  Resolves: RHEL-78038
- fix FTBFS</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-1" date="1739707200">- Rebase to PKI 11.6.0
- Resolves: RHEL-70108
- Resolves: RHEL-75585
- Resolves: RHEL-75546
- Resolves: RHEL-74371
- Resolves: RHEL-63015</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.0-2" date="1754481600">- Rebase to PKI 11.7.0
- Resolves: RHEL-99832</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.1-1" date="1763380800">- Rebase to PKI 11.7.1
- Resolves: RHEL-76752
- Resolves: RHEL-108293
- Resolves: RHEL-27181</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta1" date="1769083200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta2" date="1770379200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552
- Resolves: RHEL-75980</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-1" date="1772798400">- Rebase to PKI 11.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 11.9.0-3.rocky.0.1" date="1776686400">- Add rocky as a build.sh option</changelog>
</package>
<package pkgid="8f32674a96a6f47411d51b52a365a4260cb026923f042dfe6cb12c98a01b2a4d" name="idm-pki-ca" arch="noarch">
  <version epoch="0" ver="11.9.0" rel="4.el10_2.rocky.0.1"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-1" date="1739707200">- Rebase to PKI 11.6.0
- Resolves: RHEL-70108
- Resolves: RHEL-75585
- Resolves: RHEL-75546
- Resolves: RHEL-74371
- Resolves: RHEL-63015</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.0-2" date="1754481600">- Rebase to PKI 11.7.0
- Resolves: RHEL-99832</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.1-1" date="1763380800">- Rebase to PKI 11.7.1
- Resolves: RHEL-76752
- Resolves: RHEL-108293
- Resolves: RHEL-27181</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta1" date="1769083200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta2" date="1770379200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552
- Resolves: RHEL-75980</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-1" date="1772798400">- Rebase to PKI 11.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-4" date="1784203200">- Update jackson bundled to 2.21.4 
- Resolves: RHEL-188290
- Resolves: RHEL-190906</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 11.9.0-4.rocky.0.1" date="1784721600">- Add rocky as a build.sh option</changelog>
</package>
<package pkgid="59c8c565c119bc7c219a4c3efebac47031c5f1a108640cc43c25c1c47a08799a" name="idm-pki-java" arch="noarch">
  <version epoch="0" ver="11.9.0" rel="3.el10_2.rocky.0.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 11.6.0-0.3.alpha2" date="1738756800">- update to use tomcat9
  Resolves: RHEL-78038
- fix FTBFS</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-1" date="1739707200">- Rebase to PKI 11.6.0
- Resolves: RHEL-70108
- Resolves: RHEL-75585
- Resolves: RHEL-75546
- Resolves: RHEL-74371
- Resolves: RHEL-63015</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.0-2" date="1754481600">- Rebase to PKI 11.7.0
- Resolves: RHEL-99832</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.1-1" date="1763380800">- Rebase to PKI 11.7.1
- Resolves: RHEL-76752
- Resolves: RHEL-108293
- Resolves: RHEL-27181</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta1" date="1769083200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta2" date="1770379200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552
- Resolves: RHEL-75980</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-1" date="1772798400">- Rebase to PKI 11.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 11.9.0-3.rocky.0.1" date="1776686400">- Add rocky as a build.sh option</changelog>
</package>
<package pkgid="656c272e766b97cf08111b999807872bbb6e897bf9a83897f73e95355f4bb6f9" name="idm-pki-java" arch="noarch">
  <version epoch="0" ver="11.9.0" rel="4.el10_2.rocky.0.1"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-1" date="1739707200">- Rebase to PKI 11.6.0
- Resolves: RHEL-70108
- Resolves: RHEL-75585
- Resolves: RHEL-75546
- Resolves: RHEL-74371
- Resolves: RHEL-63015</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.0-2" date="1754481600">- Rebase to PKI 11.7.0
- Resolves: RHEL-99832</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.1-1" date="1763380800">- Rebase to PKI 11.7.1
- Resolves: RHEL-76752
- Resolves: RHEL-108293
- Resolves: RHEL-27181</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta1" date="1769083200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta2" date="1770379200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552
- Resolves: RHEL-75980</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-1" date="1772798400">- Rebase to PKI 11.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-4" date="1784203200">- Update jackson bundled to 2.21.4 
- Resolves: RHEL-188290
- Resolves: RHEL-190906</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 11.9.0-4.rocky.0.1" date="1784721600">- Add rocky as a build.sh option</changelog>
</package>
<package pkgid="4a01eafd61ed178f253614d0496feb00345e4e3a245904d15bb74dca8b342c78" name="idm-pki-kra" arch="noarch">
  <version epoch="0" ver="11.9.0" rel="3.el10_2.rocky.0.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 11.6.0-0.3.alpha2" date="1738756800">- update to use tomcat9
  Resolves: RHEL-78038
- fix FTBFS</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-1" date="1739707200">- Rebase to PKI 11.6.0
- Resolves: RHEL-70108
- Resolves: RHEL-75585
- Resolves: RHEL-75546
- Resolves: RHEL-74371
- Resolves: RHEL-63015</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.0-2" date="1754481600">- Rebase to PKI 11.7.0
- Resolves: RHEL-99832</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.1-1" date="1763380800">- Rebase to PKI 11.7.1
- Resolves: RHEL-76752
- Resolves: RHEL-108293
- Resolves: RHEL-27181</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta1" date="1769083200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta2" date="1770379200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552
- Resolves: RHEL-75980</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-1" date="1772798400">- Rebase to PKI 11.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 11.9.0-3.rocky.0.1" date="1776686400">- Add rocky as a build.sh option</changelog>
</package>
<package pkgid="d45f57cca9aeced7958c36c9c2b9a2ec068fbab0949f59d9607348b15fa849e5" name="idm-pki-kra" arch="noarch">
  <version epoch="0" ver="11.9.0" rel="4.el10_2.rocky.0.1"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-1" date="1739707200">- Rebase to PKI 11.6.0
- Resolves: RHEL-70108
- Resolves: RHEL-75585
- Resolves: RHEL-75546
- Resolves: RHEL-74371
- Resolves: RHEL-63015</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.0-2" date="1754481600">- Rebase to PKI 11.7.0
- Resolves: RHEL-99832</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.1-1" date="1763380800">- Rebase to PKI 11.7.1
- Resolves: RHEL-76752
- Resolves: RHEL-108293
- Resolves: RHEL-27181</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta1" date="1769083200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta2" date="1770379200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552
- Resolves: RHEL-75980</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-1" date="1772798400">- Rebase to PKI 11.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-4" date="1784203200">- Update jackson bundled to 2.21.4 
- Resolves: RHEL-188290
- Resolves: RHEL-190906</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 11.9.0-4.rocky.0.1" date="1784721600">- Add rocky as a build.sh option</changelog>
</package>
<package pkgid="498a5b6ade7f6a3c72d0c9d3c1aaf2a755aae8fa6023e9eaf2090a2c4fcce730" name="idm-pki-server" arch="noarch">
  <version epoch="0" ver="11.9.0" rel="3.el10_2.rocky.0.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 11.6.0-0.3.alpha2" date="1738756800">- update to use tomcat9
  Resolves: RHEL-78038
- fix FTBFS</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-1" date="1739707200">- Rebase to PKI 11.6.0
- Resolves: RHEL-70108
- Resolves: RHEL-75585
- Resolves: RHEL-75546
- Resolves: RHEL-74371
- Resolves: RHEL-63015</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.0-2" date="1754481600">- Rebase to PKI 11.7.0
- Resolves: RHEL-99832</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.1-1" date="1763380800">- Rebase to PKI 11.7.1
- Resolves: RHEL-76752
- Resolves: RHEL-108293
- Resolves: RHEL-27181</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta1" date="1769083200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta2" date="1770379200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552
- Resolves: RHEL-75980</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-1" date="1772798400">- Rebase to PKI 11.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 11.9.0-3.rocky.0.1" date="1776686400">- Add rocky as a build.sh option</changelog>
</package>
<package pkgid="98b781b5ea8bb853d20563d38eb2bfc67e7151462ad61858ee14a6f7eea3368b" name="idm-pki-server" arch="noarch">
  <version epoch="0" ver="11.9.0" rel="4.el10_2.rocky.0.1"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-1" date="1739707200">- Rebase to PKI 11.6.0
- Resolves: RHEL-70108
- Resolves: RHEL-75585
- Resolves: RHEL-75546
- Resolves: RHEL-74371
- Resolves: RHEL-63015</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.0-2" date="1754481600">- Rebase to PKI 11.7.0
- Resolves: RHEL-99832</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.1-1" date="1763380800">- Rebase to PKI 11.7.1
- Resolves: RHEL-76752
- Resolves: RHEL-108293
- Resolves: RHEL-27181</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta1" date="1769083200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta2" date="1770379200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552
- Resolves: RHEL-75980</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-1" date="1772798400">- Rebase to PKI 11.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-4" date="1784203200">- Update jackson bundled to 2.21.4 
- Resolves: RHEL-188290
- Resolves: RHEL-190906</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 11.9.0-4.rocky.0.1" date="1784721600">- Add rocky as a build.sh option</changelog>
</package>
<package pkgid="03696b9478fc0e2a1713f37fc6ac532880d84635407aa9a7120cad426e495cf1" name="idm-pki-tools" arch="x86_64">
  <version epoch="0" ver="11.9.0" rel="3.el10_2.rocky.0.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 11.6.0-0.3.alpha2" date="1738756800">- update to use tomcat9
  Resolves: RHEL-78038
- fix FTBFS</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-1" date="1739707200">- Rebase to PKI 11.6.0
- Resolves: RHEL-70108
- Resolves: RHEL-75585
- Resolves: RHEL-75546
- Resolves: RHEL-74371
- Resolves: RHEL-63015</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.0-2" date="1754481600">- Rebase to PKI 11.7.0
- Resolves: RHEL-99832</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.1-1" date="1763380800">- Rebase to PKI 11.7.1
- Resolves: RHEL-76752
- Resolves: RHEL-108293
- Resolves: RHEL-27181</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta1" date="1769083200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta2" date="1770379200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552
- Resolves: RHEL-75980</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-1" date="1772798400">- Rebase to PKI 11.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 11.9.0-3.rocky.0.1" date="1776686400">- Add rocky as a build.sh option</changelog>
</package>
<package pkgid="e1facf2550ae5dd5112e4a1d2f3bf67c39885ce4f5edbfe50a74115c6d842ae5" name="idm-pki-tools" arch="x86_64">
  <version epoch="0" ver="11.9.0" rel="4.el10_2.rocky.0.1"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-1" date="1739707200">- Rebase to PKI 11.6.0
- Resolves: RHEL-70108
- Resolves: RHEL-75585
- Resolves: RHEL-75546
- Resolves: RHEL-74371
- Resolves: RHEL-63015</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.0-2" date="1754481600">- Rebase to PKI 11.7.0
- Resolves: RHEL-99832</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.1-1" date="1763380800">- Rebase to PKI 11.7.1
- Resolves: RHEL-76752
- Resolves: RHEL-108293
- Resolves: RHEL-27181</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta1" date="1769083200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-0.1-beta2" date="1770379200">- Rebase to PKI 11.9.0-beta1
- Resolves: RHEL-143038
- Resolves: RHEL-79552
- Resolves: RHEL-75980</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-1" date="1772798400">- Rebase to PKI 11.9.0
- Resolves: RHEL-150666</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-2" date="1773144000">- Rebuilt for exception target</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-3" date="1773403200">- Revert to tomcat 9
- Resolves: RHEL-155406</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.9.0-4" date="1784203200">- Update jackson bundled to 2.21.4 
- Resolves: RHEL-188290
- Resolves: RHEL-190906</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 11.9.0-4.rocky.0.1" date="1784721600">- Add rocky as a build.sh option</changelog>
</package>
<package pkgid="4e63a11c7257b208e8e22a9eff79bc806e3e0940d78672ed95803e692ea62921" name="idn2" arch="x86_64">
  <version epoch="0" ver="2.3.7" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.4-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.4-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.4-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 2.3.5-1" date="1706356800">- Upgrade to 2.3.5</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 2.3.6-1" date="1706356801">- Upgrade to 2.3.6</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 2.3.7-1" date="1706356802">- Upgrade to 2.3.7 (#2260623)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.7-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.7-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6eb9f56977ce357ff043856f4c41e8db825712d459be9f45fe62ea4ba7d166aa" name="iftop" arch="x86_64">
  <version epoch="0" ver="1.0" rel="0.34.pre4.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-0.28.pre4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.0-0.29.pre4" date="1671710400">- Port configure script to C99</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-0.30.pre4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-0.31.pre4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-0.32.pre4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-0.33.pre4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-0.34.pre4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
</package>
<package pkgid="853a70775fd626a8b685234f7a8d9763d53cbed784244fa59d47dacd7ef3fd22" name="ignition" arch="x86_64">
  <version epoch="0" ver="2.26.0" rel="2.el10_2"/>
  <changelog author="Joseph Marrero Corchado &lt;jmarrero@redhat.com&gt; - 2.21.0-3" date="1743076800">- Resolves: #RHEL-85233</changelog>
  <changelog author="Tiago Bueno &lt;tbueno@redhat.com&gt; - 2.21.0-4" date="1747656000">- Add initial TMT Gating Test</changelog>
  <changelog author="Tiago Bueno &lt;tbueno@redhat.com&gt; - 2.21.0-5" date="1748952000">- Fix TMT prepare plans</changelog>
  <changelog author="Tiago Bueno &lt;tbueno@redhat.com&gt; - 2.22.0-1" date="1753099200">- spec: new upstream version 2.22.0</changelog>
  <changelog author="yasminvalim &lt;ydesouza@redhat.com&gt; - 2.23.0-1" date="1758110400">- spec: new upstream version 2.23.0</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 2.23.0-2" date="1759320000">- spec: rebuild ignition with goexperiment=strictfipsruntime</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 2.24.0-1" date="1760702400">- spec: new upstream version 2.24.0</changelog>
  <changelog author="Yasmin de Souza &lt;ydesouza@redhat.com&gt; - 2.25.1-1" date="1768305600">- spec: new upstream version 2.25.1</changelog>
  <changelog author="Yasmin de Souza &lt;ydesouza@redhat.com&gt; - 2.26.0-1" date="1773230400">- spec: new upstream version 2.26.0</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 2.26.0-2" date="1774008000">- spec: rebuild for 10.2</changelog>
</package>
<package pkgid="7dd9caa153084165fc794d60260558d9c0ca34800f3193a851780ee26472a447" name="ignition-edge" arch="x86_64">
  <version epoch="0" ver="2.26.0" rel="2.el10_2"/>
  <changelog author="Joseph Marrero Corchado &lt;jmarrero@redhat.com&gt; - 2.21.0-3" date="1743076800">- Resolves: #RHEL-85233</changelog>
  <changelog author="Tiago Bueno &lt;tbueno@redhat.com&gt; - 2.21.0-4" date="1747656000">- Add initial TMT Gating Test</changelog>
  <changelog author="Tiago Bueno &lt;tbueno@redhat.com&gt; - 2.21.0-5" date="1748952000">- Fix TMT prepare plans</changelog>
  <changelog author="Tiago Bueno &lt;tbueno@redhat.com&gt; - 2.22.0-1" date="1753099200">- spec: new upstream version 2.22.0</changelog>
  <changelog author="yasminvalim &lt;ydesouza@redhat.com&gt; - 2.23.0-1" date="1758110400">- spec: new upstream version 2.23.0</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 2.23.0-2" date="1759320000">- spec: rebuild ignition with goexperiment=strictfipsruntime</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 2.24.0-1" date="1760702400">- spec: new upstream version 2.24.0</changelog>
  <changelog author="Yasmin de Souza &lt;ydesouza@redhat.com&gt; - 2.25.1-1" date="1768305600">- spec: new upstream version 2.25.1</changelog>
  <changelog author="Yasmin de Souza &lt;ydesouza@redhat.com&gt; - 2.26.0-1" date="1773230400">- spec: new upstream version 2.26.0</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 2.26.0-2" date="1774008000">- spec: rebuild for 10.2</changelog>
</package>
<package pkgid="1e0f609d16068b78c52e4c55787d24971c576b5f45f6cb436086c090f6f0add4" name="ignition-grub" arch="x86_64">
  <version epoch="0" ver="2.26.0" rel="2.el10_2"/>
  <changelog author="Joseph Marrero Corchado &lt;jmarrero@redhat.com&gt; - 2.21.0-3" date="1743076800">- Resolves: #RHEL-85233</changelog>
  <changelog author="Tiago Bueno &lt;tbueno@redhat.com&gt; - 2.21.0-4" date="1747656000">- Add initial TMT Gating Test</changelog>
  <changelog author="Tiago Bueno &lt;tbueno@redhat.com&gt; - 2.21.0-5" date="1748952000">- Fix TMT prepare plans</changelog>
  <changelog author="Tiago Bueno &lt;tbueno@redhat.com&gt; - 2.22.0-1" date="1753099200">- spec: new upstream version 2.22.0</changelog>
  <changelog author="yasminvalim &lt;ydesouza@redhat.com&gt; - 2.23.0-1" date="1758110400">- spec: new upstream version 2.23.0</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 2.23.0-2" date="1759320000">- spec: rebuild ignition with goexperiment=strictfipsruntime</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 2.24.0-1" date="1760702400">- spec: new upstream version 2.24.0</changelog>
  <changelog author="Yasmin de Souza &lt;ydesouza@redhat.com&gt; - 2.25.1-1" date="1768305600">- spec: new upstream version 2.25.1</changelog>
  <changelog author="Yasmin de Souza &lt;ydesouza@redhat.com&gt; - 2.26.0-1" date="1773230400">- spec: new upstream version 2.26.0</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 2.26.0-2" date="1774008000">- spec: rebuild for 10.2</changelog>
</package>
<package pkgid="fdcecdf6113523aecfd098e63e96d0db4dc0ac1ed3c56e9a2a61a60c913ac7a3" name="ignition-validate" arch="x86_64">
  <version epoch="0" ver="2.26.0" rel="2.el10_2"/>
  <changelog author="Joseph Marrero Corchado &lt;jmarrero@redhat.com&gt; - 2.21.0-3" date="1743076800">- Resolves: #RHEL-85233</changelog>
  <changelog author="Tiago Bueno &lt;tbueno@redhat.com&gt; - 2.21.0-4" date="1747656000">- Add initial TMT Gating Test</changelog>
  <changelog author="Tiago Bueno &lt;tbueno@redhat.com&gt; - 2.21.0-5" date="1748952000">- Fix TMT prepare plans</changelog>
  <changelog author="Tiago Bueno &lt;tbueno@redhat.com&gt; - 2.22.0-1" date="1753099200">- spec: new upstream version 2.22.0</changelog>
  <changelog author="yasminvalim &lt;ydesouza@redhat.com&gt; - 2.23.0-1" date="1758110400">- spec: new upstream version 2.23.0</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 2.23.0-2" date="1759320000">- spec: rebuild ignition with goexperiment=strictfipsruntime</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 2.24.0-1" date="1760702400">- spec: new upstream version 2.24.0</changelog>
  <changelog author="Yasmin de Souza &lt;ydesouza@redhat.com&gt; - 2.25.1-1" date="1768305600">- spec: new upstream version 2.25.1</changelog>
  <changelog author="Yasmin de Souza &lt;ydesouza@redhat.com&gt; - 2.26.0-1" date="1773230400">- spec: new upstream version 2.26.0</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 2.26.0-2" date="1774008000">- spec: rebuild for 10.2</changelog>
</package>
<package pkgid="d1072ec67f358c0d110ab452c467696b6e01c5924a1bf37b4fc22eb11119ad9f" name="igvm-devel" arch="x86_64">
  <version epoch="0" ver="0.4.0" rel="2.el10"/>
  <changelog author="Luigi Leonardi &lt;leonardi@redhat.com&gt; - 0.4.0-1" date="1769428800">- Initial commit on c10s</changelog>
  <changelog author="Luigi Leonardi &lt;leonardi@redhat.com&gt; - 0.4.0-2" date="1770120000">- Add missing gating.yaml</changelog>
</package>
<package pkgid="2aecb62f1b4f720ca57cab98759f40ae0751bb0694db27e2cfab6c7c869c2149" name="igvm-libs" arch="x86_64">
  <version epoch="0" ver="0.4.0" rel="2.el10"/>
  <changelog author="Luigi Leonardi &lt;leonardi@redhat.com&gt; - 0.4.0-1" date="1769428800">- Initial commit on c10s</changelog>
  <changelog author="Luigi Leonardi &lt;leonardi@redhat.com&gt; - 0.4.0-2" date="1770120000">- Add missing gating.yaml</changelog>
</package>
<package pkgid="1baf27a31487186dee7b93e16c4a65a3549d9cb591e13c0253a1af1cc8bbce38" name="igvm-tools" arch="x86_64">
  <version epoch="0" ver="0.4.0" rel="2.el10"/>
  <changelog author="Luigi Leonardi &lt;leonardi@redhat.com&gt; - 0.4.0-1" date="1769428800">- Initial commit on c10s</changelog>
  <changelog author="Luigi Leonardi &lt;leonardi@redhat.com&gt; - 0.4.0-2" date="1770120000">- Add missing gating.yaml</changelog>
</package>
<package pkgid="2c99f428b7ee094a2f91e0ab52428c59f3fbb2fd473d13b3f695c32700f8168c" name="iio-sensor-proxy" arch="x86_64">
  <version epoch="0" ver="3.5" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.5-1" date="1690286400">- Update to 3.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2da9f7570abd9c76bf12a582fdbbd61e910fd2d6490fd5b8693cb9dcb4526da6" name="iio-sensor-proxy-docs" arch="noarch">
  <version epoch="0" ver="3.5" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.5-1" date="1690286400">- Update to 3.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f8c94b40a2d8def5122dddeefaa141032d6d3710e6f49577d26d9a51b6878d2e" name="ima-evm-utils" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="4.el10.rocky.0.2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.5-7" date="1731067200">- add some IMA setup tools (RHEL-34778)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.6.2-0.1" date="1731672000">- Update to upstream 1.6 (RHEL-65376)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.6.2-1" date="1736942400">- Disable compat lib (RHEL-65376)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.6.2-2" date="1741608000">- ima-setup: run zipl after building initramfs for s390x (RHEL-82392)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.6.2-3" date="1753963200">- Verify IMA signature to make sure it's correct</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.6.2-4" date="1761825600">- ima-setup: Use RSAHEADER to tell if a package has been signed
- ima-setup: skip installing rpm-plugin-ima if it has been installed (RHEL-99356)
- ima-setup: rebuild all initramfs images to include the integrity dracut module (RHEL-92638)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.6.2-4.rocky.0.2" date="1761825601">- Add Rocky Linux IMA signing certificate</changelog>
</package>
<package pkgid="439f227c5bf8845ba7489eb7d3fabb8ce50c0c76f9a88b795dc089190748cf54" name="ima-evm-utils-devel" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="4.el10.rocky.0.2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.5-7" date="1731067200">- add some IMA setup tools (RHEL-34778)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.6.2-0.1" date="1731672000">- Update to upstream 1.6 (RHEL-65376)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.6.2-1" date="1736942400">- Disable compat lib (RHEL-65376)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.6.2-2" date="1741608000">- ima-setup: run zipl after building initramfs for s390x (RHEL-82392)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.6.2-3" date="1753963200">- Verify IMA signature to make sure it's correct</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.6.2-4" date="1761825600">- ima-setup: Use RSAHEADER to tell if a package has been signed
- ima-setup: skip installing rpm-plugin-ima if it has been installed (RHEL-99356)
- ima-setup: rebuild all initramfs images to include the integrity dracut module (RHEL-92638)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.6.2-4.rocky.0.2" date="1761825601">- Add Rocky Linux IMA signing certificate</changelog>
</package>
<package pkgid="a85163eb1359a05532ae71786929c330286dcacb8fb61a8efc6e9ccce758b221" name="image-builder" arch="x86_64">
  <version epoch="0" ver="51" rel="1.el10.rocky.0.1"/>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 34-1" date="1758024000">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 35-1" date="1758283200">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 36-1" date="1758715200">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 40-1" date="1761739200">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 41-1" date="1762948800">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 43-1" date="1765368000">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 48-1" date="1770206400">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 50-1" date="1771329600">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 51-1" date="1771502400">- New upstream release</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 51-1.rocky.0.1" date="1771934400">- Disable riscv64 tests</changelog>
</package>
<package pkgid="1fb72d9a5931e59c5de5def3cd2dfb20b95c293ecbe4f957746e2b4aca37e5de" name="image-builder" arch="x86_64">
  <version epoch="0" ver="52.1" rel="1.el10_2.rocky.0.1"/>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 52.1-1.rocky.0.1" date="1780574400">- Disable riscv64 tests</changelog>
</package>
<package pkgid="97dca106d40ed735459cfc8519643cae622061a05b94087ce4a4071f4f008099" name="imath" arch="x86_64">
  <version epoch="0" ver="3.1.10" rel="4.el10"/>
  <changelog author="Richard Shaw &lt;hobbes1069@gmail.com&gt; - 3.1.9-1" date="1685620800">- Update to 3.1.9.</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 3.1.9-2" date="1688385600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.9-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 3.1.9-4" date="1705492800">- Rebuilt for Boost 1.83</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.9-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.9-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Shaw &lt;hobbes1069@gmail.com&gt; - 3.1.10-1" date="1707566400">- Update to 3.1.10.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.10-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.10-3" date="1719403200">- Add gating.yaml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.10-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4d99ce11538aa169bb1ddc52e5ec398daa84df31af3d807acc7db6fc78946cd9" name="imath-devel" arch="x86_64">
  <version epoch="0" ver="3.1.10" rel="4.el10"/>
  <changelog author="Richard Shaw &lt;hobbes1069@gmail.com&gt; - 3.1.9-1" date="1685620800">- Update to 3.1.9.</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 3.1.9-2" date="1688385600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.9-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 3.1.9-4" date="1705492800">- Rebuilt for Boost 1.83</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.9-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.9-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Richard Shaw &lt;hobbes1069@gmail.com&gt; - 3.1.10-1" date="1707566400">- Update to 3.1.10.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.10-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.1.10-3" date="1719403200">- Add gating.yaml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.10-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2e97bbe910d37c252cc6c360d97008aa5e5f38f266b0d90deedb6e74eb8d13e2" name="infiniband-diags" arch="x86_64">
  <version epoch="0" ver="61.0" rel="1.el10"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1768478400">- Rebase to upstream release 61.0</changelog>
</package>
<package pkgid="cf31e5cb38aca4ca02cccd1ccce104e41ea46bed0136d2d4273f9ce789c84190" name="infiniband-diags-compat" arch="x86_64">
  <version epoch="0" ver="61.0" rel="1.el10"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1768478400">- Rebase to upstream release 61.0</changelog>
</package>
<package pkgid="dd239740302edc52970d246c5cbda02d642d81cc1acad71ecf71990f7ade38d9" name="info" arch="x86_64">
  <version epoch="0" ver="7.1" rel="6.el10"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 7.0.2-2" date="1677067200">- Fix possible use of an undefined value as an ARRAY reference in ParserNonXS.pm
  (causes FTBFS of a2ps)
  Resolves: #2171433</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 7.0.3-1" date="1680177600">- Update to texinfo-7.0.3
  Resolves: #2181837</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 7.0.3-2" date="1685534400">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.3-3" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 7.1-1" date="1698148800">- Update to texinfo-7.1
  Resolves: #2244846</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.1-2" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 7.1-4" date="1723118400">- Fix memory/resource leaks, insufficient memory allocations and
  variable declarations without initializer
  Resolves: RHEL-43595</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 7.1-6" date="1733227200">- Make tainted data safe
  Resolves: RHEL-43596</changelog>
</package>
<package pkgid="840f403b76e59ced98e4752d9de989342e4438a5b042d542988596ddbbfcb8a1" name="inih" arch="x86_64">
  <version epoch="0" ver="58" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 56-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproejct.org&gt; - 57-1" date="1688731200">- New upstream release 57 (#2221191)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 57-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Daan De Meyer &lt;daan.j.demeyer@gmail.com&gt; - 57-3" date="1701518400">- Move INIReader C++ library to inih-cpp subpackage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 57-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 57-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproejct.org&gt; - 58-1" date="1706356800">- New upstream release 58 (#2260272)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 58-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 58-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ea02bdb20b5b24c9f80004de028afc81fc2a9a4ad88c8b99114a070e5900a128" name="inih-cpp" arch="x86_64">
  <version epoch="0" ver="58" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 56-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproejct.org&gt; - 57-1" date="1688731200">- New upstream release 57 (#2221191)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 57-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Daan De Meyer &lt;daan.j.demeyer@gmail.com&gt; - 57-3" date="1701518400">- Move INIReader C++ library to inih-cpp subpackage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 57-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 57-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproejct.org&gt; - 58-1" date="1706356800">- New upstream release 58 (#2260272)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 58-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 58-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="06e59bcf5350efeae5ec13a53c6ca9783488e2b22cf5c0c803701ed0622cf9ba" name="inih-devel" arch="x86_64">
  <version epoch="0" ver="58" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 56-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproejct.org&gt; - 57-1" date="1688731200">- New upstream release 57 (#2221191)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 57-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Daan De Meyer &lt;daan.j.demeyer@gmail.com&gt; - 57-3" date="1701518400">- Move INIReader C++ library to inih-cpp subpackage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 57-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 57-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproejct.org&gt; - 58-1" date="1706356800">- New upstream release 58 (#2260272)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 58-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 58-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4bd8cda6efbddd2c2fdf8f4d64297d6b284f8844006530716177eda749d347ea" name="iniparser" arch="x86_64">
  <version epoch="0" ver="4.1" rel="21.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 4.1-14" date="1695297600">- Minor spec file updates
- Verify the License tag carries an SPDX expression</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 4.1-19" date="1749816000">- Bump release for rebuild.
- Resolves: RHEL-62928</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 4.1-20" date="1749816001">- Bump release for rebuild.
- Resolves: RHEL-62928</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 4.1-21" date="1752494400">- Bump for rebuild now that gating tests are enabled.
- Resolves: RHEL-62928</changelog>
</package>
<package pkgid="c25b553828571d2054d790f13347ff233c76b2117cb1c22864cffd3ffbc75f93" name="iniparser-devel" arch="x86_64">
  <version epoch="0" ver="4.1" rel="21.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 4.1-14" date="1695297600">- Minor spec file updates
- Verify the License tag carries an SPDX expression</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-18" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 4.1-19" date="1749816000">- Bump release for rebuild.
- Resolves: RHEL-62928</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 4.1-20" date="1749816001">- Bump release for rebuild.
- Resolves: RHEL-62928</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 4.1-21" date="1752494400">- Bump for rebuild now that gating tests are enabled.
- Resolves: RHEL-62928</changelog>
</package>
<package pkgid="0b5a5976821de33d0abd4c7ab7a4de7cdb8e8459913730c7be32d4fd7d464b36" name="initscripts" arch="x86_64">
  <version epoch="0" ver="10.26" rel="2.el10"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.18-1" date="1679572800">- Translated using Weblate (English (United Kingdom))
- migrate to SPDX license
- ci(Mergify): configuration update
- Translated using Weblate (German)
- Translated using Weblate (English (United Kingdom))
- doc: update badges
- ci(lint): Add Differential PyLint GitHub Action
- ci(lint): Add permission `security-events: write`
- ci: Update Differential ShellCheck to `@v4`
- doc: fix markdown warnings and update badge
- ci: Setup CodeQL to replace deprecated LGTM
- releng: Enable Packit to handle Fedora updates
- releng: Convert to rpmautospec
- build(deps): bump redhat-plumbers-in-action/differential-shellcheck</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.19-1" date="1683288000">- ci: update Packit configuration
- spec: add missing changelog entry
- Revert "releng: Enable Packit to handle Fedora updates"
- Revert "releng: Convert to rpmautospec"
- doc: update translations
- spec: remove changelog</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.20-1" date="1706616000">- Translated using Weblate (Georgian)
- Add -r to while read as per shellcheck
- Fix splitting spaces in paths from statetab files
- build(deps): bump actions/upload-artifact from 3 to 4
- build(deps): bump github/codeql-action from 2 to 3
- Translated using Weblate (Georgian)
- Translated using Weblate (Czech)
- Translated using Weblate (Punjabi)
- Translated using Weblate (Portuguese (Brazil))
- build(deps): bump redhat-plumbers-in-action/differential-shellcheck
- build(deps): bump actions/checkout from 3 to 4
- Translated using Weblate (Hungarian)
- Translated using Weblate (Finnish)
- Translated using Weblate (Georgian)
- Translated using Weblate (Chinese (Simplified) (zh_CN))
- Translated using Weblate (English (United Kingdom))
- Translated using Weblate (Korean)
- Translated using Weblate (Ukrainian)
- Translated using Weblate (Swedish)
- Translated using Weblate (Polish)
- Update translation files
- Translated using Weblate (Korean)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.21-1" date="1707307200">- fedora: don't build network-scripts rpm in f40+ (2/2)
- ci: trigger copr build on every push to main branch
- ifup-routes: print warning when ADDRESS0 entry is missing
- fedora: don't build network-scripts rpm in f40+</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.22-1" date="1709726400">- Translated using Weblate (Georgian)
- rename_device: free path after it is used
- rename_device: remove trailing whitespaces</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.23-1" date="1713268800">- fix: return support for network-scripts for Fedora 40</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.24-1" date="1716984000">- Fix build when /usr/bin==/usr/sbin</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.25-1" date="1719316800">- Revert "fix: return support for network-scripts for Fedora 40"</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.26-1" date="1724760000">- Translated using Weblate (Turkish)
- netconsole: var/lock -&gt; run/lock
- netconsole: source sysconfig/network only if it exists
- netconsole: remove unused variables
- netconsole: remove trailing whitespaces
- Translated using Weblate (Turkish)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.26-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="41dde7537eab66e49a22fd0b5a32d00ea3636403e99d111345dc3dbae73904be" name="initscripts-rename-device" arch="x86_64">
  <version epoch="0" ver="10.26" rel="2.el10"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.18-1" date="1679572800">- Translated using Weblate (English (United Kingdom))
- migrate to SPDX license
- ci(Mergify): configuration update
- Translated using Weblate (German)
- Translated using Weblate (English (United Kingdom))
- doc: update badges
- ci(lint): Add Differential PyLint GitHub Action
- ci(lint): Add permission `security-events: write`
- ci: Update Differential ShellCheck to `@v4`
- doc: fix markdown warnings and update badge
- ci: Setup CodeQL to replace deprecated LGTM
- releng: Enable Packit to handle Fedora updates
- releng: Convert to rpmautospec
- build(deps): bump redhat-plumbers-in-action/differential-shellcheck</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.19-1" date="1683288000">- ci: update Packit configuration
- spec: add missing changelog entry
- Revert "releng: Enable Packit to handle Fedora updates"
- Revert "releng: Convert to rpmautospec"
- doc: update translations
- spec: remove changelog</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.20-1" date="1706616000">- Translated using Weblate (Georgian)
- Add -r to while read as per shellcheck
- Fix splitting spaces in paths from statetab files
- build(deps): bump actions/upload-artifact from 3 to 4
- build(deps): bump github/codeql-action from 2 to 3
- Translated using Weblate (Georgian)
- Translated using Weblate (Czech)
- Translated using Weblate (Punjabi)
- Translated using Weblate (Portuguese (Brazil))
- build(deps): bump redhat-plumbers-in-action/differential-shellcheck
- build(deps): bump actions/checkout from 3 to 4
- Translated using Weblate (Hungarian)
- Translated using Weblate (Finnish)
- Translated using Weblate (Georgian)
- Translated using Weblate (Chinese (Simplified) (zh_CN))
- Translated using Weblate (English (United Kingdom))
- Translated using Weblate (Korean)
- Translated using Weblate (Ukrainian)
- Translated using Weblate (Swedish)
- Translated using Weblate (Polish)
- Update translation files
- Translated using Weblate (Korean)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.21-1" date="1707307200">- fedora: don't build network-scripts rpm in f40+ (2/2)
- ci: trigger copr build on every push to main branch
- ifup-routes: print warning when ADDRESS0 entry is missing
- fedora: don't build network-scripts rpm in f40+</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.22-1" date="1709726400">- Translated using Weblate (Georgian)
- rename_device: free path after it is used
- rename_device: remove trailing whitespaces</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.23-1" date="1713268800">- fix: return support for network-scripts for Fedora 40</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.24-1" date="1716984000">- Fix build when /usr/bin==/usr/sbin</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.25-1" date="1719316800">- Revert "fix: return support for network-scripts for Fedora 40"</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.26-1" date="1724760000">- Translated using Weblate (Turkish)
- netconsole: var/lock -&gt; run/lock
- netconsole: source sysconfig/network only if it exists
- netconsole: remove unused variables
- netconsole: remove trailing whitespaces
- Translated using Weblate (Turkish)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.26-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c6a7ee8e2631701ff571d788cd61aad0a77167f1cd6edc2a2294f4a53412ea7b" name="initscripts-service" arch="noarch">
  <version epoch="0" ver="10.26" rel="2.el10"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.18-1" date="1679572800">- Translated using Weblate (English (United Kingdom))
- migrate to SPDX license
- ci(Mergify): configuration update
- Translated using Weblate (German)
- Translated using Weblate (English (United Kingdom))
- doc: update badges
- ci(lint): Add Differential PyLint GitHub Action
- ci(lint): Add permission `security-events: write`
- ci: Update Differential ShellCheck to `@v4`
- doc: fix markdown warnings and update badge
- ci: Setup CodeQL to replace deprecated LGTM
- releng: Enable Packit to handle Fedora updates
- releng: Convert to rpmautospec
- build(deps): bump redhat-plumbers-in-action/differential-shellcheck</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.19-1" date="1683288000">- ci: update Packit configuration
- spec: add missing changelog entry
- Revert "releng: Enable Packit to handle Fedora updates"
- Revert "releng: Convert to rpmautospec"
- doc: update translations
- spec: remove changelog</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.20-1" date="1706616000">- Translated using Weblate (Georgian)
- Add -r to while read as per shellcheck
- Fix splitting spaces in paths from statetab files
- build(deps): bump actions/upload-artifact from 3 to 4
- build(deps): bump github/codeql-action from 2 to 3
- Translated using Weblate (Georgian)
- Translated using Weblate (Czech)
- Translated using Weblate (Punjabi)
- Translated using Weblate (Portuguese (Brazil))
- build(deps): bump redhat-plumbers-in-action/differential-shellcheck
- build(deps): bump actions/checkout from 3 to 4
- Translated using Weblate (Hungarian)
- Translated using Weblate (Finnish)
- Translated using Weblate (Georgian)
- Translated using Weblate (Chinese (Simplified) (zh_CN))
- Translated using Weblate (English (United Kingdom))
- Translated using Weblate (Korean)
- Translated using Weblate (Ukrainian)
- Translated using Weblate (Swedish)
- Translated using Weblate (Polish)
- Update translation files
- Translated using Weblate (Korean)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.21-1" date="1707307200">- fedora: don't build network-scripts rpm in f40+ (2/2)
- ci: trigger copr build on every push to main branch
- ifup-routes: print warning when ADDRESS0 entry is missing
- fedora: don't build network-scripts rpm in f40+</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.22-1" date="1709726400">- Translated using Weblate (Georgian)
- rename_device: free path after it is used
- rename_device: remove trailing whitespaces</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.23-1" date="1713268800">- fix: return support for network-scripts for Fedora 40</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.24-1" date="1716984000">- Fix build when /usr/bin==/usr/sbin</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.25-1" date="1719316800">- Revert "fix: return support for network-scripts for Fedora 40"</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.26-1" date="1724760000">- Translated using Weblate (Turkish)
- netconsole: var/lock -&gt; run/lock
- netconsole: source sysconfig/network only if it exists
- netconsole: remove unused variables
- netconsole: remove trailing whitespaces
- Translated using Weblate (Turkish)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.26-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b4cd363ebb4212fb353a771e69b91a30067a91726ba0580d11e03c225dce49bf" name="insights-client" arch="noarch">
  <version epoch="0" ver="3.10.3" rel="1.el10"/>
  <changelog author="Matyas Horky &lt;mhorky@redhat.com&gt; - 0:3.2.8-1" date="1724068800">- Update version to 3.2.8
- Update Core to 3.4.9</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:3.2.8-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Matyas Horky &lt;mhorky@redhat.com&gt; - 0:3.10.0-1" date="1737720000">- Update Core to 3.5.2
- Resolves: RHEL-76024</changelog>
  <changelog author="Matyas Horky &lt;mhorky@redhat.com&gt; - 0:3.10.1-1" date="1747742400">- Update Core to 3.5.13
- Resolves: RHEL-92658</changelog>
  <changelog author="Peter Koprda &lt;pkoprda@redhat.com&gt; - 0:3.10.1-2" date="1751976000">- Add dependency on insights-core-selinux
- Resolves: RHEL-88179</changelog>
  <changelog author="Matyas Horky &lt;mhorky@redhat.com&gt; - 0:3.10.1-3" date="1756296000">- Depend on insights-core (via patch file; not yet merged upstream)
- Resolves: RHIN-1268</changelog>
  <changelog author="Matyas Horky &lt;mhorky@redhat.com&gt; - 0:3.10.2-1" date="1759320000">- Depend on insights-core &gt;= 3.6.7</changelog>
  <changelog author="Matyas Horky &lt;mhorky@redhat.com&gt; - 0:3.10.2-2" date="1761566400">- Require selinux-policy &gt;= 42.1.8 (CCT-1737)</changelog>
  <changelog author="Peter Koprda &lt;pkoprda@redhat.com&gt; - 0:3.10.2-3" date="1764763200">- Drop setuptools requirement (CCT-357)</changelog>
  <changelog author="Peter Koprda &lt;pkoprda@redhat.com&gt; - 0:3.10.3-1" date="1767787200">- Updates message of the day from Insights to Lightspeed
- Resolves: RHEL-113967
- Resolves: RHEL-122146</changelog>
</package>
<package pkgid="66776b97b8de11c27ca31873ff717b71baf251d43b8af8fadaaf690609da37db" name="insights-client-ros" arch="noarch">
  <version epoch="0" ver="3.10.3" rel="1.el10"/>
  <changelog author="Matyas Horky &lt;mhorky@redhat.com&gt; - 0:3.2.8-1" date="1724068800">- Update version to 3.2.8
- Update Core to 3.4.9</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:3.2.8-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Matyas Horky &lt;mhorky@redhat.com&gt; - 0:3.10.0-1" date="1737720000">- Update Core to 3.5.2
- Resolves: RHEL-76024</changelog>
  <changelog author="Matyas Horky &lt;mhorky@redhat.com&gt; - 0:3.10.1-1" date="1747742400">- Update Core to 3.5.13
- Resolves: RHEL-92658</changelog>
  <changelog author="Peter Koprda &lt;pkoprda@redhat.com&gt; - 0:3.10.1-2" date="1751976000">- Add dependency on insights-core-selinux
- Resolves: RHEL-88179</changelog>
  <changelog author="Matyas Horky &lt;mhorky@redhat.com&gt; - 0:3.10.1-3" date="1756296000">- Depend on insights-core (via patch file; not yet merged upstream)
- Resolves: RHIN-1268</changelog>
  <changelog author="Matyas Horky &lt;mhorky@redhat.com&gt; - 0:3.10.2-1" date="1759320000">- Depend on insights-core &gt;= 3.6.7</changelog>
  <changelog author="Matyas Horky &lt;mhorky@redhat.com&gt; - 0:3.10.2-2" date="1761566400">- Require selinux-policy &gt;= 42.1.8 (CCT-1737)</changelog>
  <changelog author="Peter Koprda &lt;pkoprda@redhat.com&gt; - 0:3.10.2-3" date="1764763200">- Drop setuptools requirement (CCT-357)</changelog>
  <changelog author="Peter Koprda &lt;pkoprda@redhat.com&gt; - 0:3.10.3-1" date="1767787200">- Updates message of the day from Insights to Lightspeed
- Resolves: RHEL-113967
- Resolves: RHEL-122146</changelog>
</package>
<package pkgid="29a535ad137fc97902d907d17d1000cf2ead2d7afd0155526aed666e8119030a" name="insights-core" arch="noarch">
  <version epoch="0" ver="3.7.4" rel="1.el10"/>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.6.9.1-1" date="1761825600">- chore(spec): change ip_route_show_table_all to filterable=True (#4597)
  (xiangceliu@redhat.com)
- Alter malware code to use locally stored yara rules for the 3rd party feature
  (#4571) (63891960+mtclinton@users.noreply.github.com)
- fix: collect yum_updates on all supported RHEL (#4607)
  (xiangceliu@redhat.com)
- fix(MANIFEST): add the 'public.gpg' required by playbook_verifier (#4602)
  (xiangceliu@redhat.com)
- chore(spec): do not collect ansible_telemetry before it's GA (#4601)
  (xiangceliu@redhat.com)
- fix: remove the deps from insights_ausearch spec (#4603)
  (xiangceliu@redhat.com)
- fix(doc): fix homepage example in README (#4599) (xiangceliu@redhat.com)
- fix(rpm-spec): fix "Requires:" of selinux-policy (#4580)
  (xiangceliu@redhat.com)
- feat: add parser for spec.nvidia_smi_query_gpu (#4600) (xiaoxwan@redhat.com)
- feat(spec/parser): new spec and parser for AnsibleTelemetry (#4589)
  (xiangceliu@redhat.com)
- fix: FileProvider.validate() leaked files outside root (#4474)
  (71874510+jholecek-rh@users.noreply.github.com)</changelog>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.6.9.3-1" date="1763467200">- spec: new spec and parser for krb5_localauth_plugin (#4632)
  (xiangceliu@redhat.com)
- chore(uname): Support RHEL 9.7 in Uname (#4631) (jiazhang@redhat.com)</changelog>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.6.10.1-1" date="1763726400">- fix(spec): ignore errors when collecting bootloader data (#4636)
  (xiangceliu@redhat.com)
- fix(spec): keyctl_show should be a simple_command (#4635)
  (xiangceliu@redhat.com)
- Add new parser &amp; datasource for ls -ldZ (#4622) (986222045@qq.com)
- fix: enhance IlabModuleList parser on content change (#4624)
  (xiaoxwan@redhat.com)
- chore(spec): don't need strictly version match (#4634)
  (xiangceliu@redhat.com)
- chore: Update the base of SsTUPNA (#4619) (xiangceliu@redhat.com)
- Add spec rear_default_conf (#4625) (jiazhang@redhat.com)
- chore: Uname supports RHEL 10.1 (#4643) (xiangceliu@redhat.com)
- spec: new datasource &amp; parser for ls -ldH (#4620) (986222045@qq.com)
- fix(script): revert to update setup.py (#4623) (xiangceliu@redhat.com)
- fix(script): tarbal cannot be found when building for testing (#4621)
  (xiangceliu@redhat.com)
- chore(script): change release to 'dev' for PR testing builds (#4618)
  (xiangceliu@redhat.com)
- chore(spec): add new spec bootctl_status for analytics (#4613)
  (xiangceliu@redhat.com)
- chore(spec): add new spec mokutil_list_enrolled for analytics (#4612)
  (xiangceliu@redhat.com)
- chore(spec): add new spec keyctl_show for analytics (#4611)
  (xiangceliu@redhat.com)</changelog>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.6.11.1-1" date="1765800000">- chore: print version.release in 'insights.version' module (#4670)
  (xiangceliu@redhat.com)
- fix(test): filters.yaml for building RPM in packit for test (#4665)
  (xiangceliu@redhat.com)
- chore(rpmbuild): refine the RPM spec file (#4669) (xiangceliu@redhat.com)
- fix(parser): Deprecate the SsTUPLN parser (#4662) (xiangceliu@redhat.com)
- feat: add filter "Name:" to InstalledProductIDs spec (#4660)
  (xiaoxwan@redhat.com)
- chore(test): replace mock with unittest.mock (#4659) (xiangceliu@redhat.com)
- spec: do hostname obfuscation for bootctl_status (#4657)
  (xiangceliu@redhat.com)
- spec: remove localectl_status from RPM collection (#4655)
  (xiangceliu@redhat.com)
- chore: print current version for tmt testing convenience (#4650)
  (xiangceliu@redhat.com)
- fix: don't import FileListing in insights (#4647) (xiangceliu@redhat.com)
- chore(ci/cd): remove py27 pipeline tests for master  (#4654)
  (xiangceliu@redhat.com)
- feat(test): unit test for successful upload (#4641) (pschrimp@redhat.com)
- fix(test): update the check of obfuscation warnings (#4648)
  (xiangceliu@redhat.com)</changelog>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.7.1.1-1" date="1768046400">- fix(datasource cleanning): clean datasource based on spec entry (#4692)
  (xiangceliu@redhat.com)
- fix: handle no account_number in response data (#4687) (lichen@redhat.com)
- chore(build): remove python2 requires from setup/pyproject (#4686)
  (xiangceliu@redhat.com)
- fix: apply redacting and obfuscating for datasource specs (#4681)
  (xiangceliu@redhat.com)
- fix: remove six from the core part code (#4671) (xiangceliu@redhat.com)
- fix(malware-detection): malware scan yara error handling (#4678)
  (63891960+mtclinton@users.noreply.github.com)
- Add new spec sys_block_queue_max_segment_size (#4645) (986222045@qq.com)
- Add new spec ossl_files (#4668) (986222045@qq.com)
- Add new spec ethtool_priv_flags (#4666) (986222045@qq.com)
- chore(build): update packit to build with specific release (#4685)
  (xiangceliu@redhat.com)
- fix(test): modify filter for spec sshd_test_mode (#4683)
  (zhangqianqian@users.noreply.github.com)</changelog>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.7.1.2-1" date="1768564800">- fix: traceback info in metadata JSON of filterable specs (#4694)
  (xiangceliu@redhat.com)
- fix(spec): stop collecting sealert on RHEL 9 and older (#4698)
  (xiangceliu@redhat.com)
- fix(doc): avoid too extensive cross-ref check (#4695) (xiangceliu@redhat.com)</changelog>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.7.2.1-1" date="1770120000">- spec: stop collecting tuned_adm on RHEL 9 when SELinux enabled (#4711)
  (xiangceliu@redhat.com)
- chore(spec): remove cmd path added to support old RHEL (#4718)
  (xiangceliu@redhat.com)
- spec: don't collect ansible_telemetry when SELinux is enabled (#4712)
  (xiangceliu@redhat.com)
- fix(manifest): add SELinuxDisable to configs of default manifest (#4713)
  (xiangceliu@redhat.com)
- chore(component): update and add new selinux components (#4709)
  (xiangceliu@redhat.com)
- chore(parser): refine the SEStatus parser (#4706) (xiangceliu@redhat.com)
- spec: add ansible_telemetry to collection (#4700) (xiangceliu@redhat.com)
- fix: update the help message to -S/--show-rules option (#4702)
  (xiangceliu@redhat.com)</changelog>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.7.2.2-1" date="1770292800">- chore(setup): remove six from the dependencies (#4719)
  (xiangceliu@redhat.com)
- fix(test): add filter for spec strings_shimx64_efi (#4721)
  (zhangqianqian@users.noreply.github.com)
- chore: drop python2 support from insights-client (#4707)
  (pschrimp@redhat.com)</changelog>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.7.3-1" date="1771588800">- fix: don't collect teamd specs when SELinux is enabled (#4734)
  (xiangceliu@redhat.com)
- chore(build): add build_client_egg script back to master (#4722)
  (xiangceliu@redhat.com)</changelog>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.7.4-1" date="1772107200">- Revert "fix: handle no account_number in response data (#4687)" (#4736)
  (xiangceliu@redhat.com)</changelog>
</package>
<package pkgid="2456581fbe1631236a218cf952ca42c79d223999e06e1cd292a84c26081d7b6a" name="insights-core-selinux" arch="noarch">
  <version epoch="0" ver="3.7.4" rel="1.el10"/>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.6.9.1-1" date="1761825600">- chore(spec): change ip_route_show_table_all to filterable=True (#4597)
  (xiangceliu@redhat.com)
- Alter malware code to use locally stored yara rules for the 3rd party feature
  (#4571) (63891960+mtclinton@users.noreply.github.com)
- fix: collect yum_updates on all supported RHEL (#4607)
  (xiangceliu@redhat.com)
- fix(MANIFEST): add the 'public.gpg' required by playbook_verifier (#4602)
  (xiangceliu@redhat.com)
- chore(spec): do not collect ansible_telemetry before it's GA (#4601)
  (xiangceliu@redhat.com)
- fix: remove the deps from insights_ausearch spec (#4603)
  (xiangceliu@redhat.com)
- fix(doc): fix homepage example in README (#4599) (xiangceliu@redhat.com)
- fix(rpm-spec): fix "Requires:" of selinux-policy (#4580)
  (xiangceliu@redhat.com)
- feat: add parser for spec.nvidia_smi_query_gpu (#4600) (xiaoxwan@redhat.com)
- feat(spec/parser): new spec and parser for AnsibleTelemetry (#4589)
  (xiangceliu@redhat.com)
- fix: FileProvider.validate() leaked files outside root (#4474)
  (71874510+jholecek-rh@users.noreply.github.com)</changelog>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.6.9.3-1" date="1763467200">- spec: new spec and parser for krb5_localauth_plugin (#4632)
  (xiangceliu@redhat.com)
- chore(uname): Support RHEL 9.7 in Uname (#4631) (jiazhang@redhat.com)</changelog>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.6.10.1-1" date="1763726400">- fix(spec): ignore errors when collecting bootloader data (#4636)
  (xiangceliu@redhat.com)
- fix(spec): keyctl_show should be a simple_command (#4635)
  (xiangceliu@redhat.com)
- Add new parser &amp; datasource for ls -ldZ (#4622) (986222045@qq.com)
- fix: enhance IlabModuleList parser on content change (#4624)
  (xiaoxwan@redhat.com)
- chore(spec): don't need strictly version match (#4634)
  (xiangceliu@redhat.com)
- chore: Update the base of SsTUPNA (#4619) (xiangceliu@redhat.com)
- Add spec rear_default_conf (#4625) (jiazhang@redhat.com)
- chore: Uname supports RHEL 10.1 (#4643) (xiangceliu@redhat.com)
- spec: new datasource &amp; parser for ls -ldH (#4620) (986222045@qq.com)
- fix(script): revert to update setup.py (#4623) (xiangceliu@redhat.com)
- fix(script): tarbal cannot be found when building for testing (#4621)
  (xiangceliu@redhat.com)
- chore(script): change release to 'dev' for PR testing builds (#4618)
  (xiangceliu@redhat.com)
- chore(spec): add new spec bootctl_status for analytics (#4613)
  (xiangceliu@redhat.com)
- chore(spec): add new spec mokutil_list_enrolled for analytics (#4612)
  (xiangceliu@redhat.com)
- chore(spec): add new spec keyctl_show for analytics (#4611)
  (xiangceliu@redhat.com)</changelog>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.6.11.1-1" date="1765800000">- chore: print version.release in 'insights.version' module (#4670)
  (xiangceliu@redhat.com)
- fix(test): filters.yaml for building RPM in packit for test (#4665)
  (xiangceliu@redhat.com)
- chore(rpmbuild): refine the RPM spec file (#4669) (xiangceliu@redhat.com)
- fix(parser): Deprecate the SsTUPLN parser (#4662) (xiangceliu@redhat.com)
- feat: add filter "Name:" to InstalledProductIDs spec (#4660)
  (xiaoxwan@redhat.com)
- chore(test): replace mock with unittest.mock (#4659) (xiangceliu@redhat.com)
- spec: do hostname obfuscation for bootctl_status (#4657)
  (xiangceliu@redhat.com)
- spec: remove localectl_status from RPM collection (#4655)
  (xiangceliu@redhat.com)
- chore: print current version for tmt testing convenience (#4650)
  (xiangceliu@redhat.com)
- fix: don't import FileListing in insights (#4647) (xiangceliu@redhat.com)
- chore(ci/cd): remove py27 pipeline tests for master  (#4654)
  (xiangceliu@redhat.com)
- feat(test): unit test for successful upload (#4641) (pschrimp@redhat.com)
- fix(test): update the check of obfuscation warnings (#4648)
  (xiangceliu@redhat.com)</changelog>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.7.1.1-1" date="1768046400">- fix(datasource cleanning): clean datasource based on spec entry (#4692)
  (xiangceliu@redhat.com)
- fix: handle no account_number in response data (#4687) (lichen@redhat.com)
- chore(build): remove python2 requires from setup/pyproject (#4686)
  (xiangceliu@redhat.com)
- fix: apply redacting and obfuscating for datasource specs (#4681)
  (xiangceliu@redhat.com)
- fix: remove six from the core part code (#4671) (xiangceliu@redhat.com)
- fix(malware-detection): malware scan yara error handling (#4678)
  (63891960+mtclinton@users.noreply.github.com)
- Add new spec sys_block_queue_max_segment_size (#4645) (986222045@qq.com)
- Add new spec ossl_files (#4668) (986222045@qq.com)
- Add new spec ethtool_priv_flags (#4666) (986222045@qq.com)
- chore(build): update packit to build with specific release (#4685)
  (xiangceliu@redhat.com)
- fix(test): modify filter for spec sshd_test_mode (#4683)
  (zhangqianqian@users.noreply.github.com)</changelog>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.7.1.2-1" date="1768564800">- fix: traceback info in metadata JSON of filterable specs (#4694)
  (xiangceliu@redhat.com)
- fix(spec): stop collecting sealert on RHEL 9 and older (#4698)
  (xiangceliu@redhat.com)
- fix(doc): avoid too extensive cross-ref check (#4695) (xiangceliu@redhat.com)</changelog>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.7.2.1-1" date="1770120000">- spec: stop collecting tuned_adm on RHEL 9 when SELinux enabled (#4711)
  (xiangceliu@redhat.com)
- chore(spec): remove cmd path added to support old RHEL (#4718)
  (xiangceliu@redhat.com)
- spec: don't collect ansible_telemetry when SELinux is enabled (#4712)
  (xiangceliu@redhat.com)
- fix(manifest): add SELinuxDisable to configs of default manifest (#4713)
  (xiangceliu@redhat.com)
- chore(component): update and add new selinux components (#4709)
  (xiangceliu@redhat.com)
- chore(parser): refine the SEStatus parser (#4706) (xiangceliu@redhat.com)
- spec: add ansible_telemetry to collection (#4700) (xiangceliu@redhat.com)
- fix: update the help message to -S/--show-rules option (#4702)
  (xiangceliu@redhat.com)</changelog>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.7.2.2-1" date="1770292800">- chore(setup): remove six from the dependencies (#4719)
  (xiangceliu@redhat.com)
- fix(test): add filter for spec strings_shimx64_efi (#4721)
  (zhangqianqian@users.noreply.github.com)
- chore: drop python2 support from insights-client (#4707)
  (pschrimp@redhat.com)</changelog>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.7.3-1" date="1771588800">- fix: don't collect teamd specs when SELinux is enabled (#4734)
  (xiangceliu@redhat.com)
- chore(build): add build_client_egg script back to master (#4722)
  (xiangceliu@redhat.com)</changelog>
  <changelog author="Xiangce Liu &lt;xiangceliu@redhat.com&gt; 3.7.4-1" date="1772107200">- Revert "fix: handle no account_number in response data (#4687)" (#4736)
  (xiangceliu@redhat.com)</changelog>
</package>
<package pkgid="8cddddb0f45fe2f5b5ae3bdad7d821a549dbef06add678d6f6908d2207a58ced" name="integritysetup" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="2.el10"/>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.0-1" date="1706097600">- Update to cryptsetup 2.7.0.</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.0-2" date="1707480000">- Rebuild for OpenSSL Argon2 implementation (OpenSSL 3.2)
- patch: Do not compile unused internal argon2 implementation</changelog>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-1" date="1714478400">- Update to cryptsetup 2.7.2
- Resolves: RHEL-33395</changelog>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.2-2" date="1714996800">- Remove SSH token and fix tests
- Resolves: RHEL-33395</changelog>
  <changelog author="Daniel Zatovic &lt;dzatovic@redhat.com&gt; - 2.7.3-1" date="1718712000">- Update to cryptsetup 2.7.3
- Remove libssh dependency
- Resolves: RHEL-40123</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.3-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 2.7.5-1" date="1728043200">- Update to cryptsetup 2.7.5
- patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
- patch: Enable Argon2 in FIPS with openssl backend.
- Resolves: RHEL-57036 RHEL-57037 RHEL-61581</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.5-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-1" date="1756900800">- Update to cryptsetup 2.8.1
- Resolves: RHEL-96291</changelog>
  <changelog author="Kristina Hanicova &lt;khanicov@redhat.com&gt; - 2.8.1-2" date="1767960000">- patch: opal: Submit PSID reset command to R/W file descriptor.
- patch: Read integrity profile info from top level device.
- patch: Fix possible use of uninitialized variable.
- patch: Reinstate pbkdf serialization flag in device activation.
- patch: Fix LUKS2 device status in inline HW mode and detached header.
- patch: Set inline integrity flag if no underlying dm-integrity device.
- patch: Fix wrong device size status reports in cryptsetup and integritysetup.
- Resolves: RHEL-122285 RHEL-125150 RHEL-125155 RHEL-125166 RHEL-132584 RHEL-140107</changelog>
</package>
<package pkgid="762c0a5e12b3969fe387741da11dd1d53307d39196977b1ad6cf5a166e80b1e9" name="intel-audio-firmware" arch="noarch">
  <version epoch="0" ver="20260411" rel="19.5.el10_1"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-19.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128447)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128447</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-19.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-140094)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-140094</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-19.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145532)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145532</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260311-19.4" date="1773230400">- Update linux-firmware to latest upstream (RHEL-154362)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-154362</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260411-19.5" date="1775908800">- Update linux-firmware to latest upstream (RHEL-164389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
Resolves: RHEL-164389</changelog>
</package>
<package pkgid="6470197632aae116937a5dd6dd8e56d7bfd7c6a4bf70324e253bdddc092e062d" name="intel-audio-firmware" arch="noarch">
  <version epoch="0" ver="20260609" rel="23.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250212-14" date="1740484800">- accel: ivpu: Update firmware for NPU (RHEL-38586)
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
</package>
<package pkgid="44260e3b0ce0bb7173843713cdd60ad2494191a1a9017805658aafa842180cfb" name="intel-audio-firmware" arch="noarch">
  <version epoch="0" ver="20260707" rel="23.1.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream ()
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
</package>
<package pkgid="06278f5fa409e7a24ccc6b9123480bac84c494eb7b30c3b8957765585c84ee7c" name="intel-audio-firmware" arch="noarch">
  <version epoch="0" ver="20260804" rel="23.2.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream (RHEL-188389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260804-23.2" date="1785844800">- Update linux-firmware to latest upstream (RHEL-214057)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- linux-firmware: Add firmware binary files for new HP project (Messi)
- qcom: Add gpu firmwares for Eliza chipset
- cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
- rtw89: 8922d: add fw 0.35.113.2
- qcom: venus-5.4: fix vp9 decoder assertion failure
- qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
- qcom: Update qdsp6sw firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- intel_vpu: Update NPU firmware
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: Add firmware for new soundwire projects
- rtw88: add firmware v41.0.0 for RTL8723B
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add ADSP firmware for hawi platform
- powervr: add firmware for Imagination Technologies BXM-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform
Resolves: RHEL-214057</changelog>
</package>
<package pkgid="2efa9680a1573c3ccddcffb2270b73e1d2e1a247599c8a65d1dbfc8283a78684" name="intel-cmt-cat" arch="x86_64">
  <version epoch="0" ver="25.04" rel="1.el10"/>
  <changelog author="Ali Erdinc Koroglu &lt;aekoroglu@fedoraproject.org&gt; - 23.11-1" date="1699876800">- Update to 23.11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.11-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.11-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 23.11-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 23.11-5" date="1724414400">- Address issues reported by SAST (RHEL-40017)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 23.11-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 25.04-1" date="1760356800">Clean up install paths, drop obsolete patches, and improve flag injection
handling
- Replaced hard-coded install paths in Makefiles with sed-based DESTDIR
  fixes for lib, pqos, rdtset, and membw
  - Using sed during %prep is more robust and version-agnostic than patching,
    which requires rebasing each release
- Relocated admin tools (pqos*, rdtset) from /usr/bin to /usr/sbin for FHS
  compliance
  - These tools require root and interact with system-level cache controls
- Updated %files to match SONAME bump (libpqos.so.5 -&gt; libpqos.so.6) introduced
  upstream
- Dropped patches 0001, 0002, 0004, 0005
  - 0001/0002 replaced by sed
  - 0004/0005 merged upstream
- Replaced patch 0003 (CFLAGS/LDFLAGS override) with sed to convert assignments
  to +=
  - Ensures compatibility with distro-injected flags (e.g. -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wno-complain-wrong-lang -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64-v3 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2  ,
    hardening) without carrying a version-specific patch
  Resolves: RHEL-118205</changelog>
</package>
<package pkgid="fc44f36f5163bac821cb10a9fd250240f2fdbb6925b3c60718412499163b923f" name="intel-cmt-cat-devel" arch="x86_64">
  <version epoch="0" ver="25.04" rel="1.el10"/>
  <changelog author="Ali Erdinc Koroglu &lt;aekoroglu@fedoraproject.org&gt; - 23.11-1" date="1699876800">- Update to 23.11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.11-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23.11-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 23.11-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 23.11-5" date="1724414400">- Address issues reported by SAST (RHEL-40017)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 23.11-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 25.04-1" date="1760356800">Clean up install paths, drop obsolete patches, and improve flag injection
handling
- Replaced hard-coded install paths in Makefiles with sed-based DESTDIR
  fixes for lib, pqos, rdtset, and membw
  - Using sed during %prep is more robust and version-agnostic than patching,
    which requires rebasing each release
- Relocated admin tools (pqos*, rdtset) from /usr/bin to /usr/sbin for FHS
  compliance
  - These tools require root and interact with system-level cache controls
- Updated %files to match SONAME bump (libpqos.so.5 -&gt; libpqos.so.6) introduced
  upstream
- Dropped patches 0001, 0002, 0004, 0005
  - 0001/0002 replaced by sed
  - 0004/0005 merged upstream
- Replaced patch 0003 (CFLAGS/LDFLAGS override) with sed to convert assignments
  to +=
  - Ensures compatibility with distro-injected flags (e.g. -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wno-complain-wrong-lang -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64-v3 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2  ,
    hardening) without carrying a version-specific patch
  Resolves: RHEL-118205</changelog>
</package>
<package pkgid="5f068ca4dcbd25b78a6a3247b7b7c411a009f7f617266d4d2d6af83ae7e414fd" name="intel-gpu-firmware" arch="noarch">
  <version epoch="0" ver="20260411" rel="19.5.el10_1"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-19.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128447)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128447</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-19.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-140094)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-140094</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-19.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145532)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145532</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260311-19.4" date="1773230400">- Update linux-firmware to latest upstream (RHEL-154362)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-154362</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260411-19.5" date="1775908800">- Update linux-firmware to latest upstream (RHEL-164389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
Resolves: RHEL-164389</changelog>
</package>
<package pkgid="c9272a8925166ac454cfdb0ebbdd3188dd942ea87c98e530b04158f4337d63c6" name="intel-gpu-firmware" arch="noarch">
  <version epoch="0" ver="20260609" rel="23.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250212-14" date="1740484800">- accel: ivpu: Update firmware for NPU (RHEL-38586)
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
</package>
<package pkgid="4bd4d78f5ffe864d99854ef612cfd475f972aff4d50c6e9ffeac3ec25bab1a16" name="intel-gpu-firmware" arch="noarch">
  <version epoch="0" ver="20260707" rel="23.1.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream ()
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
</package>
<package pkgid="221221b40be598d047d2fa8cddebd5459a152e201f7108ac45903f2aa922786b" name="intel-gpu-firmware" arch="noarch">
  <version epoch="0" ver="20260804" rel="23.2.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream (RHEL-188389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260804-23.2" date="1785844800">- Update linux-firmware to latest upstream (RHEL-214057)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- linux-firmware: Add firmware binary files for new HP project (Messi)
- qcom: Add gpu firmwares for Eliza chipset
- cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
- rtw89: 8922d: add fw 0.35.113.2
- qcom: venus-5.4: fix vp9 decoder assertion failure
- qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
- qcom: Update qdsp6sw firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- intel_vpu: Update NPU firmware
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: Add firmware for new soundwire projects
- rtw88: add firmware v41.0.0 for RTL8723B
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add ADSP firmware for hawi platform
- powervr: add firmware for Imagination Technologies BXM-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform
Resolves: RHEL-214057</changelog>
</package>
<package pkgid="3042a00ab7d8078d6abeff0cf621b4c267a647aeb7fcc7c0b938356d4aba5749" name="intel-lpmd" arch="x86_64">
  <version epoch="0" ver="0.0.9" rel="1.el10"/>
  <changelog author="Ali Erdinc Koroglu &lt;aekoroglu@linux.intel.com&gt; - 0.0.2-1" date="1702641600">- 1st release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.2-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.2-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Ali Erdinc Koroglu &lt;aekoroglu@linux.intel.com&gt; - 0.0.3-1" date="1707480000">- Update to 0.0.3</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.0.3-2" date="1717761600">- Deprecate dbus-glib</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.0.3-3" date="1717761601">- Add gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.0.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.0.6-1" date="1721131200">- Update to release 0.0.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.0.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.0.9-1" date="1746446400">- Update to the upstream version 0.0.9</changelog>
</package>
<package pkgid="0bb863146a44301cc893f9422635a043d6a062b18f2a67fdec7289594afe6f59" name="intel-vsc-firmware" arch="noarch">
  <version epoch="0" ver="20260411" rel="19.5.el10_1"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-19.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128447)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128447</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-19.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-140094)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-140094</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-19.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145532)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145532</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260311-19.4" date="1773230400">- Update linux-firmware to latest upstream (RHEL-154362)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-154362</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260411-19.5" date="1775908800">- Update linux-firmware to latest upstream (RHEL-164389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
Resolves: RHEL-164389</changelog>
</package>
<package pkgid="92c082e579593cea9413ed4b14ab4483dcb5dd337efe9d8ec3e9ec5c4a7576c8" name="intel-vsc-firmware" arch="noarch">
  <version epoch="0" ver="20260609" rel="23.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250212-14" date="1740484800">- accel: ivpu: Update firmware for NPU (RHEL-38586)
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
</package>
<package pkgid="29cb817e78cfe6b3e8120fd24b0f8c5267a8bdfed1d09a61e58448b4f1542cde" name="intel-vsc-firmware" arch="noarch">
  <version epoch="0" ver="20260707" rel="23.1.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream ()
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
</package>
<package pkgid="e402e226e32a961b718eaa236ac928d158d74b0f6b06c24caa5bbfdef79878ff" name="intel-vsc-firmware" arch="noarch">
  <version epoch="0" ver="20260804" rel="23.2.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream (RHEL-188389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260804-23.2" date="1785844800">- Update linux-firmware to latest upstream (RHEL-214057)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- linux-firmware: Add firmware binary files for new HP project (Messi)
- qcom: Add gpu firmwares for Eliza chipset
- cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
- rtw89: 8922d: add fw 0.35.113.2
- qcom: venus-5.4: fix vp9 decoder assertion failure
- qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
- qcom: Update qdsp6sw firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- intel_vpu: Update NPU firmware
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: Add firmware for new soundwire projects
- rtw88: add firmware v41.0.0 for RTL8723B
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add ADSP firmware for hawi platform
- powervr: add firmware for Imagination Technologies BXM-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform
Resolves: RHEL-214057</changelog>
</package>
<package pkgid="d91661f95b99c1d1c27d90d6e879ee8d8854b1d9ed719bdbdcf5aa1216887cbe" name="intltool" arch="noarch">
  <version epoch="0" ver="0.51.0" rel="29.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.51.0-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.51.0-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.51.0-24" date="1695297600">- SPDX migration of license tag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.51.0-25" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.51.0-26" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.51.0-27" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Manish Tiwari &lt;matiwari@redhat.com&gt; - 0.51.0-28" date="1722945600">- CI gating tests migration to tmt</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.51.0-29" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e6f4267215eab6dfe5307679f11f00a69151d59e6551d5c2f3422f9e0c7085c0" name="iotop-c" arch="x86_64">
  <version epoch="0" ver="1.26" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Boian Bonev &lt;bbonev@ipacct.com&gt; - 1.24-1" date="1696075200">- Update to latest ver 1.24</changelog>
  <changelog author="Boian Bonev &lt;bbonev@ipacct.com&gt; - 1.25-1" date="1697284800">- Update to latest ver 1.25</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.25-4" date="1706788800">- replace iotop https://fedoraproject.org/wiki/Changes/Replace_iotop_with_iotop-c
- iotop-c executable renamed back to iotop</changelog>
  <changelog author="Boian Bonev &lt;bbonev@ipacct.com&gt; - 1.26-1" date="1706961600">- Update to latest ver 1.26</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.26-4" date="1752667200">- fix -q and -qqq compatibility with old iotop (RHEL-103911)</changelog>
</package>
<package pkgid="b0b85589a2ed075e86f3ba9acb3bbf0f35efaa62816b3d851a380d24791d8b1a" name="iowatcher" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="13.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-6" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.3.0-8" date="1696593600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-10" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.3.0-12" date="1724155200">- fix hang when BLKTRACESETUP fails and "-o -" is used
- Related: RHEL-54662</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cf56a32770974edab43c08bf31611e0631e91c75e32d5d1d6275c2f28f35b131" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.13.1" rel="3.el10_2.2"/>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.12.2-24" date="1755604800">- Resolves: RHEL-109895 Revert allow update of Kerberos master key</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-25" date="1758196800">- Related: RHEL-114545 Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-26" date="1759233600">- Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-27" date="1763380800">- Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
- Resolves: RHEL-119628 Include fixes in python3-ipatests
- Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
- Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
- Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
- Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
- Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.0-1" date="1765195200">- Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
- Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
- Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
- Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
- Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
- Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-1" date="1768564800">- Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
- Resolves: RHEL-113778 Command that retrieve and install new CA certificates
- Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
- Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
- Resolves: RHEL-119339 Memory leaks in IPA plugins</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-2" date="1770379200">- Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
- Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
- Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
- Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
- Resolves:  RHEL-4895 ipa use systemd-sysusers
- Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3" date="1770811200">- Resolves:  RHEL-4895 ipa use systemd-sysusers</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.1" date="1775822400">- Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
- Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
- Resolves: RHEL-166864 Include latest fixes in python3-ipatests package</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.2" date="1776254400">- Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing</changelog>
</package>
<package pkgid="437560b0bcdf167d55ffa7787749549abbeb6affe5bb7c1b9ad446e393ab75d2" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.13.1" rel="3.el10_2.2"/>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.12.2-24" date="1755604800">- Resolves: RHEL-109895 Revert allow update of Kerberos master key</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-25" date="1758196800">- Related: RHEL-114545 Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-26" date="1759233600">- Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-27" date="1763380800">- Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
- Resolves: RHEL-119628 Include fixes in python3-ipatests
- Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
- Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
- Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
- Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
- Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.0-1" date="1765195200">- Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
- Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
- Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
- Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
- Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
- Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-1" date="1768564800">- Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
- Resolves: RHEL-113778 Command that retrieve and install new CA certificates
- Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
- Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
- Resolves: RHEL-119339 Memory leaks in IPA plugins</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-2" date="1770379200">- Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
- Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
- Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
- Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
- Resolves:  RHEL-4895 ipa use systemd-sysusers
- Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3" date="1770811200">- Resolves:  RHEL-4895 ipa use systemd-sysusers</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.1" date="1775822400">- Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
- Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
- Resolves: RHEL-166864 Include latest fixes in python3-ipatests package</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.2" date="1776254400">- Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing</changelog>
</package>
<package pkgid="eba19277f5c0eef8990d3873de959653231a076dc9ec8d1418ff1bfed61f40e0" name="ipa-client-encrypted-dns" arch="x86_64">
  <version epoch="0" ver="4.13.1" rel="3.el10_2.2"/>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.12.2-24" date="1755604800">- Resolves: RHEL-109895 Revert allow update of Kerberos master key</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-25" date="1758196800">- Related: RHEL-114545 Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-26" date="1759233600">- Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-27" date="1763380800">- Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
- Resolves: RHEL-119628 Include fixes in python3-ipatests
- Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
- Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
- Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
- Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
- Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.0-1" date="1765195200">- Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
- Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
- Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
- Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
- Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
- Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-1" date="1768564800">- Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
- Resolves: RHEL-113778 Command that retrieve and install new CA certificates
- Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
- Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
- Resolves: RHEL-119339 Memory leaks in IPA plugins</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-2" date="1770379200">- Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
- Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
- Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
- Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
- Resolves:  RHEL-4895 ipa use systemd-sysusers
- Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3" date="1770811200">- Resolves:  RHEL-4895 ipa use systemd-sysusers</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.1" date="1775822400">- Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
- Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
- Resolves: RHEL-166864 Include latest fixes in python3-ipatests package</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.2" date="1776254400">- Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing</changelog>
</package>
<package pkgid="0973902a57e6419a2af214e166a365a11fe6fc5b482490ca6583dea80d7d266a" name="ipa-client-epn" arch="x86_64">
  <version epoch="0" ver="4.13.1" rel="3.el10_2.2"/>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.12.2-24" date="1755604800">- Resolves: RHEL-109895 Revert allow update of Kerberos master key</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-25" date="1758196800">- Related: RHEL-114545 Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-26" date="1759233600">- Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-27" date="1763380800">- Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
- Resolves: RHEL-119628 Include fixes in python3-ipatests
- Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
- Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
- Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
- Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
- Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.0-1" date="1765195200">- Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
- Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
- Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
- Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
- Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
- Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-1" date="1768564800">- Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
- Resolves: RHEL-113778 Command that retrieve and install new CA certificates
- Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
- Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
- Resolves: RHEL-119339 Memory leaks in IPA plugins</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-2" date="1770379200">- Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
- Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
- Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
- Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
- Resolves:  RHEL-4895 ipa use systemd-sysusers
- Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3" date="1770811200">- Resolves:  RHEL-4895 ipa use systemd-sysusers</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.1" date="1775822400">- Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
- Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
- Resolves: RHEL-166864 Include latest fixes in python3-ipatests package</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.2" date="1776254400">- Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing</changelog>
</package>
<package pkgid="4a0620a54e848353c83bd31ecf0d79dbb01b9a90b44ba7a0b5b8b0d93804c242" name="ipa-client-samba" arch="x86_64">
  <version epoch="0" ver="4.13.1" rel="3.el10_2.2"/>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.12.2-24" date="1755604800">- Resolves: RHEL-109895 Revert allow update of Kerberos master key</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-25" date="1758196800">- Related: RHEL-114545 Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-26" date="1759233600">- Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-27" date="1763380800">- Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
- Resolves: RHEL-119628 Include fixes in python3-ipatests
- Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
- Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
- Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
- Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
- Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.0-1" date="1765195200">- Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
- Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
- Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
- Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
- Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
- Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-1" date="1768564800">- Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
- Resolves: RHEL-113778 Command that retrieve and install new CA certificates
- Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
- Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
- Resolves: RHEL-119339 Memory leaks in IPA plugins</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-2" date="1770379200">- Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
- Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
- Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
- Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
- Resolves:  RHEL-4895 ipa use systemd-sysusers
- Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3" date="1770811200">- Resolves:  RHEL-4895 ipa use systemd-sysusers</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.1" date="1775822400">- Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
- Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
- Resolves: RHEL-166864 Include latest fixes in python3-ipatests package</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.2" date="1776254400">- Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing</changelog>
</package>
<package pkgid="8fc3e219905e6266bcea1bffe1f54d81bb8e5efd0745d25b1f1611655ca7e4f3" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.13.1" rel="3.el10_2.2"/>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.12.2-24" date="1755604800">- Resolves: RHEL-109895 Revert allow update of Kerberos master key</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-25" date="1758196800">- Related: RHEL-114545 Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-26" date="1759233600">- Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-27" date="1763380800">- Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
- Resolves: RHEL-119628 Include fixes in python3-ipatests
- Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
- Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
- Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
- Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
- Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.0-1" date="1765195200">- Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
- Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
- Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
- Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
- Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
- Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-1" date="1768564800">- Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
- Resolves: RHEL-113778 Command that retrieve and install new CA certificates
- Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
- Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
- Resolves: RHEL-119339 Memory leaks in IPA plugins</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-2" date="1770379200">- Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
- Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
- Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
- Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
- Resolves:  RHEL-4895 ipa use systemd-sysusers
- Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3" date="1770811200">- Resolves:  RHEL-4895 ipa use systemd-sysusers</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.1" date="1775822400">- Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
- Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
- Resolves: RHEL-166864 Include latest fixes in python3-ipatests package</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.2" date="1776254400">- Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing</changelog>
</package>
<package pkgid="906353d8d634a505fc11ee01809be398c8ebbea4faa91487d4f4b00c8fcdce3b" name="ipa-healthcheck" arch="noarch">
  <version epoch="0" ver="0.19" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.16-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.16-6" date="1721390400">- Skip DogtagCertsConfigCheck for PKI versions &gt;= 11.5.0 (RHEL-39701)
- Need to change log file permissions of IPA as per CIS benchmark (RHEL-44305)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.16-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.16-8" date="1740484800">- Check expiration dates of user-provided certificates (RHEL-78399)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.16-9" date="1741608000">- Don't require fips-mode-setup for FIPS status (RHEL-67635)
- Check for krbLastSuccessfulAuth being enabled (RHEL-84771)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.16-10" date="1748347200">- Warn in ipa-healthcheck if umask is not 022 (RHEL-85561)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.16-11" date="1750852800">- IPAOpenSSLChainValidation: ignore default trust store (RHEL-99999)
- Don't rely on order in trust agent/controller role check (RHEL-99532)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.19-1" date="1758628800">- Update to 0.19 release
  - Add a message if not a trust agent/controller (RHEL-112752)
  - Check that expected NSS token matches the current FIPS state (RHEL-104144)
  - Add /etc/pki/tls/certs/ directory to file checker (RHEL-94649)
  - Check that allowed_uids in the SSSD config is valid (RHEL-116895)</changelog>
</package>
<package pkgid="6670054e1756dea48d48c285dcdaa894a95b1164f0be0ecb6b9f73132c69e998" name="ipa-healthcheck-core" arch="noarch">
  <version epoch="0" ver="0.19" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.16-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.16-6" date="1721390400">- Skip DogtagCertsConfigCheck for PKI versions &gt;= 11.5.0 (RHEL-39701)
- Need to change log file permissions of IPA as per CIS benchmark (RHEL-44305)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.16-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.16-8" date="1740484800">- Check expiration dates of user-provided certificates (RHEL-78399)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.16-9" date="1741608000">- Don't require fips-mode-setup for FIPS status (RHEL-67635)
- Check for krbLastSuccessfulAuth being enabled (RHEL-84771)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.16-10" date="1748347200">- Warn in ipa-healthcheck if umask is not 022 (RHEL-85561)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.16-11" date="1750852800">- IPAOpenSSLChainValidation: ignore default trust store (RHEL-99999)
- Don't rely on order in trust agent/controller role check (RHEL-99532)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.19-1" date="1758628800">- Update to 0.19 release
  - Add a message if not a trust agent/controller (RHEL-112752)
  - Check that expected NSS token matches the current FIPS state (RHEL-104144)
  - Add /etc/pki/tls/certs/ directory to file checker (RHEL-94649)
  - Check that allowed_uids in the SSSD config is valid (RHEL-116895)</changelog>
</package>
<package pkgid="b2f6a66cfa34b250e83b18355236eef59cc6ba7a4f889c7fed2abe4ffcd57c2a" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.13.1" rel="3.el10_2.2"/>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.12.2-24" date="1755604800">- Resolves: RHEL-109895 Revert allow update of Kerberos master key</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-25" date="1758196800">- Related: RHEL-114545 Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-26" date="1759233600">- Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-27" date="1763380800">- Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
- Resolves: RHEL-119628 Include fixes in python3-ipatests
- Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
- Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
- Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
- Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
- Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.0-1" date="1765195200">- Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
- Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
- Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
- Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
- Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
- Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-1" date="1768564800">- Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
- Resolves: RHEL-113778 Command that retrieve and install new CA certificates
- Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
- Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
- Resolves: RHEL-119339 Memory leaks in IPA plugins</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-2" date="1770379200">- Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
- Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
- Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
- Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
- Resolves:  RHEL-4895 ipa use systemd-sysusers
- Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3" date="1770811200">- Resolves:  RHEL-4895 ipa use systemd-sysusers</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.1" date="1775822400">- Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
- Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
- Resolves: RHEL-166864 Include latest fixes in python3-ipatests package</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.2" date="1776254400">- Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing</changelog>
</package>
<package pkgid="6e90d2eef631ea3df8957e6de7adfa3c5da5b0af8a9b7a6e99d49af554e48a8d" name="ipa-selinux" arch="noarch">
  <version epoch="0" ver="4.13.1" rel="3.el10_2.2"/>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.12.2-24" date="1755604800">- Resolves: RHEL-109895 Revert allow update of Kerberos master key</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-25" date="1758196800">- Related: RHEL-114545 Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-26" date="1759233600">- Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-27" date="1763380800">- Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
- Resolves: RHEL-119628 Include fixes in python3-ipatests
- Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
- Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
- Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
- Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
- Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.0-1" date="1765195200">- Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
- Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
- Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
- Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
- Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
- Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-1" date="1768564800">- Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
- Resolves: RHEL-113778 Command that retrieve and install new CA certificates
- Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
- Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
- Resolves: RHEL-119339 Memory leaks in IPA plugins</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-2" date="1770379200">- Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
- Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
- Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
- Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
- Resolves:  RHEL-4895 ipa use systemd-sysusers
- Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3" date="1770811200">- Resolves:  RHEL-4895 ipa use systemd-sysusers</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.1" date="1775822400">- Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
- Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
- Resolves: RHEL-166864 Include latest fixes in python3-ipatests package</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.2" date="1776254400">- Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing</changelog>
</package>
<package pkgid="8a496b5919c17292665bfa33980c804ead9c2f18661252ebd6d09ed0890719da" name="ipa-selinux-luna" arch="noarch">
  <version epoch="0" ver="4.13.1" rel="3.el10_2.2"/>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.12.2-24" date="1755604800">- Resolves: RHEL-109895 Revert allow update of Kerberos master key</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-25" date="1758196800">- Related: RHEL-114545 Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-26" date="1759233600">- Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-27" date="1763380800">- Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
- Resolves: RHEL-119628 Include fixes in python3-ipatests
- Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
- Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
- Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
- Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
- Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.0-1" date="1765195200">- Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
- Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
- Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
- Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
- Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
- Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-1" date="1768564800">- Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
- Resolves: RHEL-113778 Command that retrieve and install new CA certificates
- Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
- Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
- Resolves: RHEL-119339 Memory leaks in IPA plugins</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-2" date="1770379200">- Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
- Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
- Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
- Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
- Resolves:  RHEL-4895 ipa use systemd-sysusers
- Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3" date="1770811200">- Resolves:  RHEL-4895 ipa use systemd-sysusers</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.1" date="1775822400">- Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
- Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
- Resolves: RHEL-166864 Include latest fixes in python3-ipatests package</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.2" date="1776254400">- Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing</changelog>
</package>
<package pkgid="ad0767ee5a299ac4414f0c5b2ae254a46b7ffb507606178bfbb9fc96632f6efc" name="ipa-selinux-nfast" arch="noarch">
  <version epoch="0" ver="4.13.1" rel="3.el10_2.2"/>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.12.2-24" date="1755604800">- Resolves: RHEL-109895 Revert allow update of Kerberos master key</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-25" date="1758196800">- Related: RHEL-114545 Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-26" date="1759233600">- Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-27" date="1763380800">- Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
- Resolves: RHEL-119628 Include fixes in python3-ipatests
- Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
- Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
- Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
- Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
- Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.0-1" date="1765195200">- Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
- Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
- Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
- Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
- Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
- Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-1" date="1768564800">- Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
- Resolves: RHEL-113778 Command that retrieve and install new CA certificates
- Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
- Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
- Resolves: RHEL-119339 Memory leaks in IPA plugins</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-2" date="1770379200">- Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
- Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
- Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
- Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
- Resolves:  RHEL-4895 ipa use systemd-sysusers
- Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3" date="1770811200">- Resolves:  RHEL-4895 ipa use systemd-sysusers</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.1" date="1775822400">- Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
- Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
- Resolves: RHEL-166864 Include latest fixes in python3-ipatests package</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.2" date="1776254400">- Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing</changelog>
</package>
<package pkgid="95e38a9531dd701300b80ba9efc5cc1a8160615d3641ac41ba30188c0364547f" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.13.1" rel="3.el10_2.2"/>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.12.2-24" date="1755604800">- Resolves: RHEL-109895 Revert allow update of Kerberos master key</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-25" date="1758196800">- Related: RHEL-114545 Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-26" date="1759233600">- Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-27" date="1763380800">- Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
- Resolves: RHEL-119628 Include fixes in python3-ipatests
- Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
- Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
- Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
- Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
- Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.0-1" date="1765195200">- Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
- Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
- Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
- Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
- Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
- Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-1" date="1768564800">- Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
- Resolves: RHEL-113778 Command that retrieve and install new CA certificates
- Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
- Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
- Resolves: RHEL-119339 Memory leaks in IPA plugins</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-2" date="1770379200">- Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
- Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
- Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
- Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
- Resolves:  RHEL-4895 ipa use systemd-sysusers
- Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3" date="1770811200">- Resolves:  RHEL-4895 ipa use systemd-sysusers</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.1" date="1775822400">- Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
- Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
- Resolves: RHEL-166864 Include latest fixes in python3-ipatests package</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.2" date="1776254400">- Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing</changelog>
</package>
<package pkgid="bb683a5a9064ebdd5bc8307bcce6a6d3affa90a3afb5aa792a049cc6b386f895" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.13.1" rel="3.el10_2.2"/>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.12.2-24" date="1755604800">- Resolves: RHEL-109895 Revert allow update of Kerberos master key</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-25" date="1758196800">- Related: RHEL-114545 Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-26" date="1759233600">- Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-27" date="1763380800">- Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
- Resolves: RHEL-119628 Include fixes in python3-ipatests
- Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
- Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
- Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
- Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
- Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.0-1" date="1765195200">- Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
- Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
- Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
- Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
- Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
- Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-1" date="1768564800">- Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
- Resolves: RHEL-113778 Command that retrieve and install new CA certificates
- Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
- Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
- Resolves: RHEL-119339 Memory leaks in IPA plugins</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-2" date="1770379200">- Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
- Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
- Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
- Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
- Resolves:  RHEL-4895 ipa use systemd-sysusers
- Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3" date="1770811200">- Resolves:  RHEL-4895 ipa use systemd-sysusers</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.1" date="1775822400">- Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
- Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
- Resolves: RHEL-166864 Include latest fixes in python3-ipatests package</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.2" date="1776254400">- Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing</changelog>
</package>
<package pkgid="9f139a86c5f5d8f1441db3e2d11d19b5d44f28b1cd17ea6e80dafe1b839c61fa" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.13.1" rel="3.el10_2.2"/>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.12.2-24" date="1755604800">- Resolves: RHEL-109895 Revert allow update of Kerberos master key</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-25" date="1758196800">- Related: RHEL-114545 Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-26" date="1759233600">- Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-27" date="1763380800">- Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
- Resolves: RHEL-119628 Include fixes in python3-ipatests
- Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
- Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
- Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
- Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
- Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.0-1" date="1765195200">- Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
- Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
- Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
- Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
- Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
- Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-1" date="1768564800">- Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
- Resolves: RHEL-113778 Command that retrieve and install new CA certificates
- Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
- Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
- Resolves: RHEL-119339 Memory leaks in IPA plugins</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-2" date="1770379200">- Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
- Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
- Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
- Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
- Resolves:  RHEL-4895 ipa use systemd-sysusers
- Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3" date="1770811200">- Resolves:  RHEL-4895 ipa use systemd-sysusers</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.1" date="1775822400">- Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
- Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
- Resolves: RHEL-166864 Include latest fixes in python3-ipatests package</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.2" date="1776254400">- Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing</changelog>
</package>
<package pkgid="8de0bc2cf27d12e727c0c60f756ab2b656cf77039d1fe18be1e240bfcad9251f" name="ipa-server-encrypted-dns" arch="x86_64">
  <version epoch="0" ver="4.13.1" rel="3.el10_2.2"/>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.12.2-24" date="1755604800">- Resolves: RHEL-109895 Revert allow update of Kerberos master key</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-25" date="1758196800">- Related: RHEL-114545 Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-26" date="1759233600">- Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-27" date="1763380800">- Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
- Resolves: RHEL-119628 Include fixes in python3-ipatests
- Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
- Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
- Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
- Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
- Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.0-1" date="1765195200">- Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
- Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
- Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
- Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
- Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
- Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-1" date="1768564800">- Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
- Resolves: RHEL-113778 Command that retrieve and install new CA certificates
- Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
- Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
- Resolves: RHEL-119339 Memory leaks in IPA plugins</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-2" date="1770379200">- Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
- Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
- Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
- Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
- Resolves:  RHEL-4895 ipa use systemd-sysusers
- Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3" date="1770811200">- Resolves:  RHEL-4895 ipa use systemd-sysusers</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.1" date="1775822400">- Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
- Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
- Resolves: RHEL-166864 Include latest fixes in python3-ipatests package</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.2" date="1776254400">- Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing</changelog>
</package>
<package pkgid="60625aad13153430459f57efc8c0e0a7cee2cec98697791e84adfa4e99eed5b1" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.13.1" rel="3.el10_2.2"/>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 4.12.2-24" date="1755604800">- Resolves: RHEL-109895 Revert allow update of Kerberos master key</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-25" date="1758196800">- Related: RHEL-114545 Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-26" date="1759233600">- Resolves: RHEL-118446 ipa: Privilege escalation from host to domain admin in FreeIPA</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-27" date="1763380800">- Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
- Resolves: RHEL-119628 Include fixes in python3-ipatests
- Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
- Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
- Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
- Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
- Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.0-1" date="1765195200">- Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
- Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
- Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
- Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
- Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
- Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-1" date="1768564800">- Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
- Resolves: RHEL-113778 Command that retrieve and install new CA certificates
- Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
- Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
- Resolves: RHEL-119339 Memory leaks in IPA plugins</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-2" date="1770379200">- Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
- Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
- Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
- Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
- Resolves:  RHEL-4895 ipa use systemd-sysusers
- Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3" date="1770811200">- Resolves:  RHEL-4895 ipa use systemd-sysusers</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.1" date="1775822400">- Resolves: RHEL-155027 Adding a group with 32Bit Idrange fails
- Resolves: RHEL-153145 IdM password policy Min lifetime is not enforced when high minlife is set
- Resolves: RHEL-166864 Include latest fixes in python3-ipatests package</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3.2" date="1776254400">- Resolves: RHEL-168516 TestIPAMigrationProdMode tests are missing</changelog>
</package>
<package pkgid="391f6137b6d8b9dc645af92c8dea68550547126e3b8324ba7b0fb61f07ce735f" name="ipcalc" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="12.el10"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;n.mavrogiannopoulos@gmail.com&gt; - 1.0.3-3" date="1689681600">- packit: added koji and bodhi updates</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;n.mavrogiannopoulos@gmail.com&gt; - 1.0.3-4" date="1689681601">- packit: added issue_repository</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;n.mavrogiannopoulos@gmail.com&gt; - 1.0.3-6" date="1692792000">- use %autorelease and %autochangelog</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;n.mavrogiannopoulos@gmail.com&gt; - 1.0.3-7" date="1692792001">- Added packit config</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Ondrej Mejzlik &lt;omejzlik@redhat.com&gt; - 1.0.3-10" date="1718798400">- update plans</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.3-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.3-12" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="f4af4f5f519f5464afb6c936df3c1c487648c2142c081dee1e1c35648187661c" name="iperf3" arch="x86_64">
  <version epoch="0" ver="3.17.1" rel="6.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.17.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.17.1-4" date="1736424000">- Resolves: RHEL-71809 - Denial of Service in iperf Due to Improper JSON Handling</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.17.1-5" date="1768910400">- Resolves: RHEL-136170 - iperf Heap Buffer Overflow (CVE-2025-54349)</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.17.1-6" date="1776081600">- Resolves: RHEL-151876 - authentication no longer works with the new openssl</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.17.1-6.1" date="1786536000">- Fix JSON value bounds checks in get_parameters and
  iperf_parse_arguments (CVE-2026-71217)
- Resolves: RHEL-236170</changelog>
</package>
<package pkgid="fa6afbf7f2f9475ab086bec0c95c18f4c55b632af5292be9570232eb681ebc26" name="iperf3" arch="x86_64">
  <version epoch="0" ver="3.17.1" rel="6.el10_2"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.16-4" date="1715256000">- Migrated to SPDX license
- Improving testing for RHEL10</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.17.1-1" date="1717761600">- New version 3.17.1
- Fixes CVE-2024-26306</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.17.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.17.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.17.1-4" date="1736424000">- Resolves: RHEL-71809 - Denial of Service in iperf Due to Improper JSON Handling</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.17.1-5" date="1768910400">- Resolves: RHEL-136170 - iperf Heap Buffer Overflow (CVE-2025-54349)</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.17.1-6" date="1776081600">- Resolves: RHEL-151876 - authentication no longer works with the new openssl</changelog>
</package>
<package pkgid="c6a9eb16dc74eeb2cdf39a05b8fb0b809bdfedb375dfa64eacc76a5aeb936a65" name="iperf3-devel" arch="x86_64">
  <version epoch="0" ver="3.17.1" rel="6.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.17.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.17.1-4" date="1736424000">- Resolves: RHEL-71809 - Denial of Service in iperf Due to Improper JSON Handling</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.17.1-5" date="1768910400">- Resolves: RHEL-136170 - iperf Heap Buffer Overflow (CVE-2025-54349)</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.17.1-6" date="1776081600">- Resolves: RHEL-151876 - authentication no longer works with the new openssl</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.17.1-6.1" date="1786536000">- Fix JSON value bounds checks in get_parameters and
  iperf_parse_arguments (CVE-2026-71217)
- Resolves: RHEL-236170</changelog>
</package>
<package pkgid="5397a09514f65ff7b703dc633f66738d6fe76e9ba1de0d05c9104332670eeea8" name="iperf3-devel" arch="x86_64">
  <version epoch="0" ver="3.17.1" rel="6.el10_2"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.16-4" date="1715256000">- Migrated to SPDX license
- Improving testing for RHEL10</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.17.1-1" date="1717761600">- New version 3.17.1
- Fixes CVE-2024-26306</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.17.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.17.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.17.1-4" date="1736424000">- Resolves: RHEL-71809 - Denial of Service in iperf Due to Improper JSON Handling</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.17.1-5" date="1768910400">- Resolves: RHEL-136170 - iperf Heap Buffer Overflow (CVE-2025-54349)</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.17.1-6" date="1776081600">- Resolves: RHEL-151876 - authentication no longer works with the new openssl</changelog>
</package>
<package pkgid="6285dc51e518fb02ae3c2a44ec8ecb716d9b38db82febe68969334dd5a791d61" name="ipmievd" arch="x86_64">
  <version epoch="0" ver="1.8.19" rel="10.el10_1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.19-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.19-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.19-7" date="1707739200">- Update IANA numbers
- Apply patch from CentOS Stream, never applied upstream:
  Disable retry of pre-session "Get cipher suites" command as some
  BMCs are ignoring it (#1831158)
- Apply patches from Debian, never applied upstream:
  - fix tsol buffer overflow,
    https://sourceforge.net/p/ipmitool/mailman/message/24405281/
  - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/
- Update /var/run to /run in ipmievd.service that systemd warns about (#2100475)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.19-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.19-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.19-10" date="1764849600">- Apply Debian/upstream patch: 137aeb64, fixes ipmitool lan print
- Add patch that partially reverts 6e037d6bfb to fix regression in 1.8.19
  Among others fixes ipmievd startup (fedora#2303185)</changelog>
</package>
<package pkgid="129c427f510e5db7cf634870bdee43c1a1030b879558ea78ba306d35e0415d65" name="ipmitool" arch="x86_64">
  <version epoch="0" ver="1.8.19" rel="10.el10_1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.19-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.19-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.19-7" date="1707739200">- Update IANA numbers
- Apply patch from CentOS Stream, never applied upstream:
  Disable retry of pre-session "Get cipher suites" command as some
  BMCs are ignoring it (#1831158)
- Apply patches from Debian, never applied upstream:
  - fix tsol buffer overflow,
    https://sourceforge.net/p/ipmitool/mailman/message/24405281/
  - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/
- Update /var/run to /run in ipmievd.service that systemd warns about (#2100475)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.19-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.19-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.19-10" date="1764849600">- Apply Debian/upstream patch: 137aeb64, fixes ipmitool lan print
- Add patch that partially reverts 6e037d6bfb to fix regression in 1.8.19
  Among others fixes ipmievd startup (fedora#2303185)</changelog>
</package>
<package pkgid="7d4339ecf727d0dd556ad75f1501cf538ed29ef90ed8713ef3c06c6fbe24ea7d" name="ipp-usb" arch="x86_64">
  <version epoch="0" ver="0.9.27" rel="7.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.24-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.26-1" date="1721649600">- RHEL-49445 Rebase ipp-usb to 0.9.26</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-1" date="1721908800">- RHEL-49445 Rebase ipp-usb to 0.9.27</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.27-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-3" date="1749470400">- rebuild to fix CVE-2025-22871</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-4" date="1770811200">- rebuilt to fix CVE-2025-61729</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-5" date="1772020800">- rebuilt to fix CVE-2025-68121 and CVE-2025-61726</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 0.9.27-6" date="1775563200">- rebuilt to fix CVE-2026-27137, CVE-2026-25679
- fixed rebuild problem with redundant condition check in quirks.empty()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7" date="1777982400">- rebuilt to fix CVE-2026-32280, CVE-2026-32282, CVE-2026-32283,
  CVE-2026-33810</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7.1" date="1780401600">- rebuilt with golang-1.26.3-4.el10_2 to fix CVE-2026-32281</changelog>
</package>
<package pkgid="0b2d998d43ebc0bf6bd26eb5b5b931fb0839cbbcad9fb1b689ebbf8b8cf954b9" name="ipp-usb" arch="x86_64">
  <version epoch="0" ver="0.9.27" rel="7.el10_2.2"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.26-1" date="1721649600">- RHEL-49445 Rebase ipp-usb to 0.9.26</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-1" date="1721908800">- RHEL-49445 Rebase ipp-usb to 0.9.27</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.27-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-3" date="1749470400">- rebuild to fix CVE-2025-22871</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-4" date="1770811200">- rebuilt to fix CVE-2025-61729</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-5" date="1772020800">- rebuilt to fix CVE-2025-68121 and CVE-2025-61726</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 0.9.27-6" date="1775563200">- rebuilt to fix CVE-2026-27137, CVE-2026-25679
- fixed rebuild problem with redundant condition check in quirks.empty()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7" date="1777982400">- rebuilt to fix CVE-2026-32280, CVE-2026-32282, CVE-2026-32283,
  CVE-2026-33810</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7.1" date="1780401600">- rebuilt with golang-1.26.3-4.el10_2 to fix CVE-2026-32281</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7.2" date="1782734400">- rebuilt with golang-1.26.4-1.el10_2 to fix CVE-2026-33811, CVE-2026-27145</changelog>
</package>
<package pkgid="3ef2875188e2c4c5718bedf1ccf9694abee902edcbebf01cb7b69ebc76f7bca2" name="ipp-usb" arch="x86_64">
  <version epoch="0" ver="0.9.27" rel="7.el10_2.3"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.27-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-3" date="1749470400">- rebuild to fix CVE-2025-22871</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-4" date="1770811200">- rebuilt to fix CVE-2025-61729</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-5" date="1772020800">- rebuilt to fix CVE-2025-68121 and CVE-2025-61726</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 0.9.27-6" date="1775563200">- rebuilt to fix CVE-2026-27137, CVE-2026-25679
- fixed rebuild problem with redundant condition check in quirks.empty()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7" date="1777982400">- rebuilt to fix CVE-2026-32280, CVE-2026-32282, CVE-2026-32283,
  CVE-2026-33810</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7.1" date="1780401600">- rebuilt with golang-1.26.3-4.el10_2 to fix CVE-2026-32281</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7.2" date="1782734400">- rebuilt with golang-1.26.4-1.el10_2 to fix CVE-2026-33811, CVE-2026-27145</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7.3" date="1788177600">- Rebuilt with golang-1.26.7-1.el10_2 to fix
  CVE-2026-42504,CVE-2026-33818,CVE-2026-56853,CVE-2026-56859,CVE-2026-56860,CVE-2026-56862</changelog>
</package>
<package pkgid="fedf4900b840a0fe252e4ec1a5fa009264f95326fb284e3f5f13ed496b29f91a" name="ipp-usb" arch="x86_64">
  <version epoch="0" ver="0.9.27" rel="7.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.24-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.26-1" date="1721649600">- RHEL-49445 Rebase ipp-usb to 0.9.26</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-1" date="1721908800">- RHEL-49445 Rebase ipp-usb to 0.9.27</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.27-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-3" date="1749470400">- rebuild to fix CVE-2025-22871</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-4" date="1770811200">- rebuilt to fix CVE-2025-61729</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-5" date="1772020800">- rebuilt to fix CVE-2025-68121 and CVE-2025-61726</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 0.9.27-6" date="1775563200">- rebuilt to fix CVE-2026-27137, CVE-2026-25679
- fixed rebuild problem with redundant condition check in quirks.empty()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.9.27-7" date="1777982400">- rebuilt to fix CVE-2026-32280, CVE-2026-32282, CVE-2026-32283,
  CVE-2026-33810</changelog>
</package>
<package pkgid="90b3186762e5fed9a46c57c7382df0ae1ca9b93746608941bf0c5cffc13f27f2" name="iproute" arch="x86_64">
  <version epoch="0" ver="6.17.0" rel="2.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.7.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Mingyu Shi &lt;mshi@redhat.com&gt; - 6.7.0-6" date="1732795200">- Use osci.brew-build.tier0.functional as test_case_name in gating.yaml</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-1" date="1734523200">- iproute-6.11.0-1.el10</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-2" date="1743422400">- Fix gating yaml</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-3" date="1743422401">- Add tmt test plan</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-4" date="1743595200">- Add image-mode testing</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-1" date="1748347200">- iproute-6.14.0-1.el10</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-2" date="1750593600">- iproute-6.14.0-2.el10</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-1" date="1761048000">- iproute-6.17.0-1.el10</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-2" date="1769515200">- iproute-6.17.0-2.el10</changelog>
</package>
<package pkgid="b802551255444e8df44e1772de887e170557f7bd457df30b5b1a11815e818fa0" name="iproute-devel" arch="x86_64">
  <version epoch="0" ver="6.17.0" rel="2.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.7.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Mingyu Shi &lt;mshi@redhat.com&gt; - 6.7.0-6" date="1732795200">- Use osci.brew-build.tier0.functional as test_case_name in gating.yaml</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-1" date="1734523200">- iproute-6.11.0-1.el10</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-2" date="1743422400">- Fix gating yaml</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-3" date="1743422401">- Add tmt test plan</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-4" date="1743595200">- Add image-mode testing</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-1" date="1748347200">- iproute-6.14.0-1.el10</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-2" date="1750593600">- iproute-6.14.0-2.el10</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-1" date="1761048000">- iproute-6.17.0-1.el10</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-2" date="1769515200">- iproute-6.17.0-2.el10</changelog>
</package>
<package pkgid="ae2f5e2ce14f5b05f487499d5a029443dc1506508730696df60b05d2199f1494" name="iproute-doc" arch="x86_64">
  <version epoch="0" ver="6.17.0" rel="2.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.7.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Mingyu Shi &lt;mshi@redhat.com&gt; - 6.7.0-6" date="1732795200">- Use osci.brew-build.tier0.functional as test_case_name in gating.yaml</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-1" date="1734523200">- iproute-6.11.0-1.el10</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-2" date="1743422400">- Fix gating yaml</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-3" date="1743422401">- Add tmt test plan</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-4" date="1743595200">- Add image-mode testing</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-1" date="1748347200">- iproute-6.14.0-1.el10</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-2" date="1750593600">- iproute-6.14.0-2.el10</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-1" date="1761048000">- iproute-6.17.0-1.el10</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-2" date="1769515200">- iproute-6.17.0-2.el10</changelog>
</package>
<package pkgid="f50335b3903604db0de13d97c0ee3e5e2f5e38fefd39ea6c113c9cfea75403b4" name="iproute-tc" arch="x86_64">
  <version epoch="0" ver="6.17.0" rel="2.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.7.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Mingyu Shi &lt;mshi@redhat.com&gt; - 6.7.0-6" date="1732795200">- Use osci.brew-build.tier0.functional as test_case_name in gating.yaml</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-1" date="1734523200">- iproute-6.11.0-1.el10</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-2" date="1743422400">- Fix gating yaml</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-3" date="1743422401">- Add tmt test plan</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-4" date="1743595200">- Add image-mode testing</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-1" date="1748347200">- iproute-6.14.0-1.el10</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-2" date="1750593600">- iproute-6.14.0-2.el10</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-1" date="1761048000">- iproute-6.17.0-1.el10</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-2" date="1769515200">- iproute-6.17.0-2.el10</changelog>
</package>
<package pkgid="4268e01798bcd12029fbf227b4e782685fd0b0b2f9f78cb8965ffa72d7d9b135" name="ipset" arch="x86_64">
  <version epoch="0" ver="7.22" rel="10.el10"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-1" date="1722513600">- Turn absolute ipset-translate symlink into a relative one
- Rebase onto 7.22 plus fixes</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-2" date="1724932800">- Bump release to trigger CI</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-3" date="1725969600">- Bump release to trigger CI</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-4" date="1728561600">- Add legacy actions for service save support
- ipset-services to depend on iptables-nft-services
- Require kernel-modules-extra</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.22-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-6" date="1731067200">- Bump for sidetag build</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 7.22-7" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83582]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-8" date="1745323200">- Require new kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-9" date="1764244800">- Do not require kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-10" date="1768564800">- Use modules-core for conditional modules-extra dependency</changelog>
</package>
<package pkgid="b968b4a5f1f46d1755b9b945232cd5c83f512bf966a6ed8a8070541ce5a34488" name="ipset" arch="x86_64">
  <version epoch="0" ver="7.22" rel="12.el10_2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-3" date="1725969600">- Bump release to trigger CI</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-4" date="1728561600">- Add legacy actions for service save support
- ipset-services to depend on iptables-nft-services
- Require kernel-modules-extra</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.22-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-6" date="1731067200">- Bump for sidetag build</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 7.22-7" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83582]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-8" date="1745323200">- Require new kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-9" date="1764244800">- Do not require kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-10" date="1768564800">- Use modules-core for conditional modules-extra dependency</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-11" date="1779883200">- spec: Soft-depend on kernel-modules-extra</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-12" date="1781179200">- avoid pulling in kernel package if not needed</changelog>
</package>
<package pkgid="f80eae1d34fc628fb8543988d4e97f245694ab41f00becdb689bb385386fe860" name="ipset" arch="x86_64">
  <version epoch="0" ver="7.22" rel="13.el10_2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-4" date="1728561600">- Add legacy actions for service save support
- ipset-services to depend on iptables-nft-services
- Require kernel-modules-extra</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.22-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-6" date="1731067200">- Bump for sidetag build</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 7.22-7" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83582]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-8" date="1745323200">- Require new kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-9" date="1764244800">- Do not require kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-10" date="1768564800">- Use modules-core for conditional modules-extra dependency</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-11" date="1779883200">- spec: Soft-depend on kernel-modules-extra</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-12" date="1781179200">- avoid pulling in kernel package if not needed</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-13" date="1785844800">- Simplify Recommends again, kernel fixed Provides in modules-core packages</changelog>
</package>
<package pkgid="dbcff555cef321f4f5786a3564fcd22922d238940a71a3a833ce689454770e81" name="ipset-devel" arch="x86_64">
  <version epoch="0" ver="7.22" rel="10.el10"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-1" date="1722513600">- Turn absolute ipset-translate symlink into a relative one
- Rebase onto 7.22 plus fixes</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-2" date="1724932800">- Bump release to trigger CI</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-3" date="1725969600">- Bump release to trigger CI</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-4" date="1728561600">- Add legacy actions for service save support
- ipset-services to depend on iptables-nft-services
- Require kernel-modules-extra</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.22-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-6" date="1731067200">- Bump for sidetag build</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 7.22-7" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83582]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-8" date="1745323200">- Require new kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-9" date="1764244800">- Do not require kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-10" date="1768564800">- Use modules-core for conditional modules-extra dependency</changelog>
</package>
<package pkgid="7ed948caefc580d904c998415df80def5f7aa9ddeedb2edd5ee4b848b74867e6" name="ipset-devel" arch="x86_64">
  <version epoch="0" ver="7.22" rel="12.el10_2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-3" date="1725969600">- Bump release to trigger CI</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-4" date="1728561600">- Add legacy actions for service save support
- ipset-services to depend on iptables-nft-services
- Require kernel-modules-extra</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.22-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-6" date="1731067200">- Bump for sidetag build</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 7.22-7" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83582]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-8" date="1745323200">- Require new kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-9" date="1764244800">- Do not require kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-10" date="1768564800">- Use modules-core for conditional modules-extra dependency</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-11" date="1779883200">- spec: Soft-depend on kernel-modules-extra</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-12" date="1781179200">- avoid pulling in kernel package if not needed</changelog>
</package>
<package pkgid="8ed586d0d69a469eb5c433106f4dd4ae402ccb9c20ed6c889e5d4a5ec2444135" name="ipset-devel" arch="x86_64">
  <version epoch="0" ver="7.22" rel="13.el10_2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-4" date="1728561600">- Add legacy actions for service save support
- ipset-services to depend on iptables-nft-services
- Require kernel-modules-extra</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.22-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-6" date="1731067200">- Bump for sidetag build</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 7.22-7" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83582]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-8" date="1745323200">- Require new kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-9" date="1764244800">- Do not require kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-10" date="1768564800">- Use modules-core for conditional modules-extra dependency</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-11" date="1779883200">- spec: Soft-depend on kernel-modules-extra</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-12" date="1781179200">- avoid pulling in kernel package if not needed</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-13" date="1785844800">- Simplify Recommends again, kernel fixed Provides in modules-core packages</changelog>
</package>
<package pkgid="37886d57e8e6e1b668baca38460a8c2bf43a61066c8b704683e1b191bc545971" name="ipset-libs" arch="x86_64">
  <version epoch="0" ver="7.22" rel="10.el10"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-1" date="1722513600">- Turn absolute ipset-translate symlink into a relative one
- Rebase onto 7.22 plus fixes</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-2" date="1724932800">- Bump release to trigger CI</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-3" date="1725969600">- Bump release to trigger CI</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-4" date="1728561600">- Add legacy actions for service save support
- ipset-services to depend on iptables-nft-services
- Require kernel-modules-extra</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.22-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-6" date="1731067200">- Bump for sidetag build</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 7.22-7" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83582]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-8" date="1745323200">- Require new kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-9" date="1764244800">- Do not require kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-10" date="1768564800">- Use modules-core for conditional modules-extra dependency</changelog>
</package>
<package pkgid="4d70d8c4bf511e20e3c3cad22f504e94caf05296ec6acd3543e5cb9332234f62" name="ipset-libs" arch="x86_64">
  <version epoch="0" ver="7.22" rel="12.el10_2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-3" date="1725969600">- Bump release to trigger CI</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-4" date="1728561600">- Add legacy actions for service save support
- ipset-services to depend on iptables-nft-services
- Require kernel-modules-extra</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.22-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-6" date="1731067200">- Bump for sidetag build</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 7.22-7" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83582]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-8" date="1745323200">- Require new kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-9" date="1764244800">- Do not require kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-10" date="1768564800">- Use modules-core for conditional modules-extra dependency</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-11" date="1779883200">- spec: Soft-depend on kernel-modules-extra</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-12" date="1781179200">- avoid pulling in kernel package if not needed</changelog>
</package>
<package pkgid="7e8e516e6cb81f6525e873debdfe54b38a84db57680cb6aecdb36ba85071b06f" name="ipset-libs" arch="x86_64">
  <version epoch="0" ver="7.22" rel="13.el10_2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-4" date="1728561600">- Add legacy actions for service save support
- ipset-services to depend on iptables-nft-services
- Require kernel-modules-extra</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.22-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-6" date="1731067200">- Bump for sidetag build</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 7.22-7" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83582]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-8" date="1745323200">- Require new kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-9" date="1764244800">- Do not require kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-10" date="1768564800">- Use modules-core for conditional modules-extra dependency</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-11" date="1779883200">- spec: Soft-depend on kernel-modules-extra</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-12" date="1781179200">- avoid pulling in kernel package if not needed</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-13" date="1785844800">- Simplify Recommends again, kernel fixed Provides in modules-core packages</changelog>
</package>
<package pkgid="ca8af48a26773c6d08df58da5e2cbe3f27841f93d545b1711121e59985c36ae3" name="ipset-service" arch="noarch">
  <version epoch="0" ver="7.22" rel="10.el10"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-1" date="1722513600">- Turn absolute ipset-translate symlink into a relative one
- Rebase onto 7.22 plus fixes</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-2" date="1724932800">- Bump release to trigger CI</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-3" date="1725969600">- Bump release to trigger CI</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-4" date="1728561600">- Add legacy actions for service save support
- ipset-services to depend on iptables-nft-services
- Require kernel-modules-extra</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.22-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-6" date="1731067200">- Bump for sidetag build</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 7.22-7" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83582]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-8" date="1745323200">- Require new kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-9" date="1764244800">- Do not require kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-10" date="1768564800">- Use modules-core for conditional modules-extra dependency</changelog>
</package>
<package pkgid="fc83faefed92af674a59f9aaca24c6defab5acc32261686e3cc9a24423f66226" name="ipset-service" arch="noarch">
  <version epoch="0" ver="7.22" rel="12.el10_2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-3" date="1725969600">- Bump release to trigger CI</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-4" date="1728561600">- Add legacy actions for service save support
- ipset-services to depend on iptables-nft-services
- Require kernel-modules-extra</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.22-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-6" date="1731067200">- Bump for sidetag build</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 7.22-7" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83582]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-8" date="1745323200">- Require new kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-9" date="1764244800">- Do not require kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-10" date="1768564800">- Use modules-core for conditional modules-extra dependency</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-11" date="1779883200">- spec: Soft-depend on kernel-modules-extra</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-12" date="1781179200">- avoid pulling in kernel package if not needed</changelog>
</package>
<package pkgid="610aa3e849f4fadf552af3e6111898cdad256a95feda38ba4dcee4b33725876c" name="ipset-service" arch="noarch">
  <version epoch="0" ver="7.22" rel="13.el10_2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-4" date="1728561600">- Add legacy actions for service save support
- ipset-services to depend on iptables-nft-services
- Require kernel-modules-extra</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.22-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-6" date="1731067200">- Bump for sidetag build</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 7.22-7" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83582]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-8" date="1745323200">- Require new kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-9" date="1764244800">- Do not require kernel-modules-extra-matched meta package</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-10" date="1768564800">- Use modules-core for conditional modules-extra dependency</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-11" date="1779883200">- spec: Soft-depend on kernel-modules-extra</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-12" date="1781179200">- avoid pulling in kernel package if not needed</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 7.22-13" date="1785844800">- Simplify Recommends again, kernel fixed Provides in modules-core packages</changelog>
</package>
<package pkgid="ee223a38b52fb19c9d5bb7b9b14ff794da2ed114a155ac2526c71eb4151e2a3a" name="iptables-devel" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="13.el10"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-4.el10]" date="1731499200">- Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473]
- spec: Use bcond macro (Phil Sutter) [RHEL-67473]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-5.el10]" date="1731585600">- ip[6]tables-translate: fix test failures when WESP is defined (Phil Sutter) [RHEL-66725]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-6.el10]" date="1732017600">- nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
- nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-7.el10]" date="1734177600">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249]</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; [1.8.11-8.el10]" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-9.el10]" date="1745409600">- xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
- extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-10.el10]" date="1749038400">- spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-11.el10]" date="1752580800">- extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-12.el10]" date="1764244800">- Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-13.el10]" date="1768651200">- spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880]</changelog>
</package>
<package pkgid="14173c3e7836fa7893877adafcb76c26934fdd2a163304bd2f805768dfad6556" name="iptables-devel" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="15.el10_2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-6.el10]" date="1732017600">- nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
- nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-7.el10]" date="1734177600">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249]</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; [1.8.11-8.el10]" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-9.el10]" date="1745409600">- xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
- extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-10.el10]" date="1749038400">- spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-11.el10]" date="1752580800">- extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-12.el10]" date="1764244800">- Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-13.el10]" date="1768651200">- spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-14.el10]" date="1779883200">- tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504]
- spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-15.el10]" date="1781784000">- spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232]</changelog>
</package>
<package pkgid="3ca26960ac147bd35d1fdf6ea2b51f56793d437712305133175aed1cfa94f4a8" name="iptables-devel" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.el10_2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-7.el10]" date="1734177600">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249]</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; [1.8.11-8.el10]" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-9.el10]" date="1745409600">- xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
- extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-10.el10]" date="1749038400">- spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-11.el10]" date="1752580800">- extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-12.el10]" date="1764244800">- Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-13.el10]" date="1768651200">- spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-14.el10]" date="1779883200">- tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504]
- spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-15.el10]" date="1781784000">- spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-16.el10]" date="1785844800">- spec: Simplify Recommends again, kernel fixed Provides in modules-core packages (Phil Sutter) [RHEL-213273]</changelog>
</package>
<package pkgid="fa0d54084f1eb6c7480f82d1601bf9372cf969526956223bbc412a4f32245a10" name="iptables-libs" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="13.el10"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-4.el10]" date="1731499200">- Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473]
- spec: Use bcond macro (Phil Sutter) [RHEL-67473]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-5.el10]" date="1731585600">- ip[6]tables-translate: fix test failures when WESP is defined (Phil Sutter) [RHEL-66725]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-6.el10]" date="1732017600">- nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
- nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-7.el10]" date="1734177600">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249]</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; [1.8.11-8.el10]" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-9.el10]" date="1745409600">- xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
- extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-10.el10]" date="1749038400">- spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-11.el10]" date="1752580800">- extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-12.el10]" date="1764244800">- Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-13.el10]" date="1768651200">- spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880]</changelog>
</package>
<package pkgid="84facbf62536f1311a12d0d67d0edc4a9caec11396c3a02ae55345f03050e857" name="iptables-libs" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="15.el10_2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-6.el10]" date="1732017600">- nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
- nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-7.el10]" date="1734177600">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249]</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; [1.8.11-8.el10]" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-9.el10]" date="1745409600">- xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
- extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-10.el10]" date="1749038400">- spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-11.el10]" date="1752580800">- extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-12.el10]" date="1764244800">- Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-13.el10]" date="1768651200">- spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-14.el10]" date="1779883200">- tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504]
- spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-15.el10]" date="1781784000">- spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232]</changelog>
</package>
<package pkgid="b2d94196b2adb6fc8e1dd1aa898fa6d8b9eba250000c156cb13f6f846fbe720c" name="iptables-libs" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.el10_2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-7.el10]" date="1734177600">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249]</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; [1.8.11-8.el10]" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-9.el10]" date="1745409600">- xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
- extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-10.el10]" date="1749038400">- spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-11.el10]" date="1752580800">- extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-12.el10]" date="1764244800">- Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-13.el10]" date="1768651200">- spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-14.el10]" date="1779883200">- tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504]
- spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-15.el10]" date="1781784000">- spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-16.el10]" date="1785844800">- spec: Simplify Recommends again, kernel fixed Provides in modules-core packages (Phil Sutter) [RHEL-213273]</changelog>
</package>
<package pkgid="1a98c572e49ba704d24f6c44d6193f4f1a2f92a049e57820c6d62547f30c2aad" name="iptables-nft" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="13.el10"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-4.el10]" date="1731499200">- Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473]
- spec: Use bcond macro (Phil Sutter) [RHEL-67473]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-5.el10]" date="1731585600">- ip[6]tables-translate: fix test failures when WESP is defined (Phil Sutter) [RHEL-66725]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-6.el10]" date="1732017600">- nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
- nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-7.el10]" date="1734177600">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249]</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; [1.8.11-8.el10]" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-9.el10]" date="1745409600">- xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
- extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-10.el10]" date="1749038400">- spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-11.el10]" date="1752580800">- extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-12.el10]" date="1764244800">- Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-13.el10]" date="1768651200">- spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880]</changelog>
</package>
<package pkgid="5bf5d3a84f67751e410442155aff089c226867e053b97b6db3683d4f246f38a3" name="iptables-nft" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="15.el10_2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-6.el10]" date="1732017600">- nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
- nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-7.el10]" date="1734177600">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249]</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; [1.8.11-8.el10]" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-9.el10]" date="1745409600">- xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
- extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-10.el10]" date="1749038400">- spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-11.el10]" date="1752580800">- extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-12.el10]" date="1764244800">- Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-13.el10]" date="1768651200">- spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-14.el10]" date="1779883200">- tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504]
- spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-15.el10]" date="1781784000">- spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232]</changelog>
</package>
<package pkgid="a8072c4858de87a1e10226d0eaa04a7d6bd9cd455ff75958ccfc08ee4a38dfc9" name="iptables-nft" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.el10_2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-7.el10]" date="1734177600">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249]</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; [1.8.11-8.el10]" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-9.el10]" date="1745409600">- xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
- extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-10.el10]" date="1749038400">- spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-11.el10]" date="1752580800">- extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-12.el10]" date="1764244800">- Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-13.el10]" date="1768651200">- spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-14.el10]" date="1779883200">- tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504]
- spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-15.el10]" date="1781784000">- spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-16.el10]" date="1785844800">- spec: Simplify Recommends again, kernel fixed Provides in modules-core packages (Phil Sutter) [RHEL-213273]</changelog>
</package>
<package pkgid="4d6df955e3df21abe52b98585557bc204a24f438970f973a85367fe65c1abb92" name="iptables-nft-services" arch="noarch">
  <version epoch="0" ver="1.8.11" rel="13.el10"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-4.el10]" date="1731499200">- Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473]
- spec: Use bcond macro (Phil Sutter) [RHEL-67473]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-5.el10]" date="1731585600">- ip[6]tables-translate: fix test failures when WESP is defined (Phil Sutter) [RHEL-66725]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-6.el10]" date="1732017600">- nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
- nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-7.el10]" date="1734177600">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249]</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; [1.8.11-8.el10]" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-9.el10]" date="1745409600">- xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
- extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-10.el10]" date="1749038400">- spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-11.el10]" date="1752580800">- extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-12.el10]" date="1764244800">- Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-13.el10]" date="1768651200">- spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880]</changelog>
</package>
<package pkgid="fe7e75c878ce4b3e7be41b5a8bd27f211a090963d4159326361709bf612509ca" name="iptables-nft-services" arch="noarch">
  <version epoch="0" ver="1.8.11" rel="15.el10_2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-6.el10]" date="1732017600">- nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
- nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-7.el10]" date="1734177600">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249]</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; [1.8.11-8.el10]" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-9.el10]" date="1745409600">- xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
- extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-10.el10]" date="1749038400">- spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-11.el10]" date="1752580800">- extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-12.el10]" date="1764244800">- Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-13.el10]" date="1768651200">- spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-14.el10]" date="1779883200">- tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504]
- spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-15.el10]" date="1781784000">- spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232]</changelog>
</package>
<package pkgid="e0bf5c647e4d37ecbc2ce8b7eb0414b03b37fdc45c3b1063c8614e1047c1dce2" name="iptables-nft-services" arch="noarch">
  <version epoch="0" ver="1.8.11" rel="16.el10_2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-7.el10]" date="1734177600">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249]</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; [1.8.11-8.el10]" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-9.el10]" date="1745409600">- xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
- extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-10.el10]" date="1749038400">- spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-11.el10]" date="1752580800">- extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-12.el10]" date="1764244800">- Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-13.el10]" date="1768651200">- spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-14.el10]" date="1779883200">- tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504]
- spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-15.el10]" date="1781784000">- spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-16.el10]" date="1785844800">- spec: Simplify Recommends again, kernel fixed Provides in modules-core packages (Phil Sutter) [RHEL-213273]</changelog>
</package>
<package pkgid="7b67e19dc8edf728413138c39d9187f40c7154b6777dd9f072bd8f1f0dbcba43" name="iptables-utils" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="13.el10"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-4.el10]" date="1731499200">- Fix for RPM build warnings '--with legacy' (Phil Sutter) [RHEL-67473]
- spec: Use bcond macro (Phil Sutter) [RHEL-67473]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-5.el10]" date="1731585600">- ip[6]tables-translate: fix test failures when WESP is defined (Phil Sutter) [RHEL-66725]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-6.el10]" date="1732017600">- nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
- nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-7.el10]" date="1734177600">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249]</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; [1.8.11-8.el10]" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-9.el10]" date="1745409600">- xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
- extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-10.el10]" date="1749038400">- spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-11.el10]" date="1752580800">- extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-12.el10]" date="1764244800">- Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-13.el10]" date="1768651200">- spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880]</changelog>
</package>
<package pkgid="cafc66e336a3a4fc6f64fe27246bc93ad26293d33ed29bb713125bb75fd1d025" name="iptables-utils" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="15.el10_2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-6.el10]" date="1732017600">- nft: Drop interface mask leftovers from post_parse callbacks (Phil Sutter) [RHEL-66725]
- nft: fix interface comparisons in `-C` commands (Phil Sutter) [RHEL-66725]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-7.el10]" date="1734177600">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249]</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; [1.8.11-8.el10]" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-9.el10]" date="1745409600">- xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
- extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-10.el10]" date="1749038400">- spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-11.el10]" date="1752580800">- extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-12.el10]" date="1764244800">- Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-13.el10]" date="1768651200">- spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-14.el10]" date="1779883200">- tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504]
- spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-15.el10]" date="1781784000">- spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232]</changelog>
</package>
<package pkgid="e5cc9e5b80c0e05062290467a7cb5ebeb6b73cb1e46cdb6345be6b693bda7ee9" name="iptables-utils" arch="x86_64">
  <version epoch="0" ver="1.8.11" rel="16.el10_2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-7.el10]" date="1734177600">- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-67249]</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; [1.8.11-8.el10]" date="1742212800">- fix kernel-modules-extra dependency for aarch64 64k variant [RHEL-83068]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-9.el10]" date="1745409600">- xshared: Accept an option if any given command allows it (Phil Sutter) [RHEL-72061]
- extensions: icmp: Support info-request/-reply type names (Phil Sutter) [RHEL-85286]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-10.el10]" date="1749038400">- spec: Require kernel-modules-extra-matched meta package (Phil Sutter) [RHEL-87455]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-11.el10]" date="1752580800">- extensions: sctp: Translate bare '-m sctp' match (Phil Sutter) [RHEL-101502]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-12.el10]" date="1764244800">- Revert "spec: Require kernel-modules-extra-matched meta package" (Phil Sutter) [RHEL-127030]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-13.el10]" date="1768651200">- spec: Use modules-core for conditional modules-extra dependency (Phil Sutter) [RHEL-141880]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-14.el10]" date="1779883200">- tests: shell: Review nft-only/0009-needless-bitwise_0 (Phil Sutter) [RHEL-179504]
- spec: Soft-depend on kernel-modules-extra (Phil Sutter) [RHEL-176386]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-15.el10]" date="1781784000">- spec: Recommend kernel-modules-extra only if no other recommendation applies (Phil Sutter) [RHEL-186232]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.8.11-16.el10]" date="1785844800">- spec: Simplify Recommends again, kernel fixed Provides in modules-core packages (Phil Sutter) [RHEL-213273]</changelog>
</package>
<package pkgid="7c592d52d4290ddb8377cac43c6986bfcc85c0cdb3be7df8cde3c94f3a30904c" name="iptraf-ng" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-11" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 1.2.1-12" date="1691755200">- Use SPDX license id</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-13" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-14" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-16" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 1.2.2-1" date="1738497600">- iptraf-ng-1.2.2-1.el10</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 1.2.2-2" date="1738497601">- iptraf-ng-1.2.2-2.el10</changelog>
</package>
<package pkgid="e6dc7bc1f74b12e72c9cdfdb6e314a9d6a228bd411bb5c6b88f3b9ceff74af03" name="iputils" arch="x86_64">
  <version epoch="0" ver="20240905" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20240117-2" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20240117-3" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; - 20240117-4" date="1707652800">- Fix sources. Fixes rhbz#2263028</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20240117-5" date="1716897600">- Fix ifenslave defects detected by Coverity</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20240117-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20240905-1" date="1725624000">- Update to 20240905 (RHEL-57770)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20240905-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20240905-3" date="1748952000">- Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94582)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20240905-4" date="1753704000">- remove build dependency on openssl-devel removed in s20200821 (RHEL-103645)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 20240905-5" date="1760356800">- Fix CVE-2025-48964 iputils: iputils integer overflow (RHEL-115832)</changelog>
</package>
<package pkgid="e55c3e6c6aeb32d873e24909539d77559268b195e2dae604a41bdfb4b9d4a23c" name="ipvsadm" arch="x86_64">
  <version epoch="0" ver="1.31" rel="15.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.31-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.31-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.31-11" date="1691150400">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.31-12" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.31-13" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.31-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.31-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8e83bdb54943ebb67ed4614e028c5507b057116fe33d16fe5c3160a8ffa1254e" name="ipxe-bootimgs-aarch64" arch="noarch">
  <version epoch="0" ver="20240119" rel="5.gitde8a0821.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220210-4.git64113751" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 20220210-5.git64113751" date="1702987200">- Fix build with binutils 2.41</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220210-6.git64113751" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220210-7.git64113751" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Stid Official &lt;stidofficiel@gmail.com&gt; - 20220210-8.git64113751" date="1706184000">- Add support of NFS protocol</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 20240119-1.gitde8a0821" date="1706616000">- Update to latest git snapshot</changelog>
  <changelog author="Konstantin Shalygin &lt;shalygin.k@selectel.com&gt; - 20240119-2.gitde8a0821" date="1708689600">- Added iPXE 'reboot' &amp; 'poweroff' commands</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20240119-3.gitde8a0821" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Gerd Hoffmann &lt;kraxel@redhat.com&gt; - 20240119-4.gitde8a0821" date="1721131200">- Strip down package, remove drivers except qemu drivers.
- Resolves: RHEL-37610</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20240119-5.gitde8a0821" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="64f0464ebf041cc23a977c0d619b112b5ed214a51ecf8708d539e298cd7b6944" name="ipxe-bootimgs-x86" arch="noarch">
  <version epoch="0" ver="20240119" rel="5.gitde8a0821.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220210-4.git64113751" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 20220210-5.git64113751" date="1702987200">- Fix build with binutils 2.41</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220210-6.git64113751" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220210-7.git64113751" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Stid Official &lt;stidofficiel@gmail.com&gt; - 20220210-8.git64113751" date="1706184000">- Add support of NFS protocol</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 20240119-1.gitde8a0821" date="1706616000">- Update to latest git snapshot</changelog>
  <changelog author="Konstantin Shalygin &lt;shalygin.k@selectel.com&gt; - 20240119-2.gitde8a0821" date="1708689600">- Added iPXE 'reboot' &amp; 'poweroff' commands</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20240119-3.gitde8a0821" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Gerd Hoffmann &lt;kraxel@redhat.com&gt; - 20240119-4.gitde8a0821" date="1721131200">- Strip down package, remove drivers except qemu drivers.
- Resolves: RHEL-37610</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20240119-5.gitde8a0821" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c292eb13a545e3ee8d3764a7cc80491c62d561ce3305d4546ddc6e6ec9ae27f3" name="ipxe-roms-qemu" arch="noarch">
  <version epoch="0" ver="20240119" rel="5.gitde8a0821.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220210-4.git64113751" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 20220210-5.git64113751" date="1702987200">- Fix build with binutils 2.41</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220210-6.git64113751" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20220210-7.git64113751" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Stid Official &lt;stidofficiel@gmail.com&gt; - 20220210-8.git64113751" date="1706184000">- Add support of NFS protocol</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 20240119-1.gitde8a0821" date="1706616000">- Update to latest git snapshot</changelog>
  <changelog author="Konstantin Shalygin &lt;shalygin.k@selectel.com&gt; - 20240119-2.gitde8a0821" date="1708689600">- Added iPXE 'reboot' &amp; 'poweroff' commands</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20240119-3.gitde8a0821" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Gerd Hoffmann &lt;kraxel@redhat.com&gt; - 20240119-4.gitde8a0821" date="1721131200">- Strip down package, remove drivers except qemu drivers.
- Resolves: RHEL-37610</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20240119-5.gitde8a0821" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a3d9da0edad41783384bdfd4e8279e58b276aa0059c4fe6c30e35b587aa37800" name="irqbalance" arch="x86_64">
  <version epoch="2" ver="1.9.4" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.9.2-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.9.2-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2:1.9.4-1" date="1714564800">- Rebase to upstream commit (f2c8309a41)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.9.4-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.9.4-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2:1.9.4-4" date="1730980800">- Release 1.9.4-4
- Rebase to upstream commit (b4b6f194da)</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2:1.9.4-5" date="1755518400">- Release 1.9.4-5</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2:1.9.4-6" date="1759233600">- Rebase to upstream commit (8e8945e509)</changelog>
</package>
<package pkgid="ee6bfbc05b350954c983006c7fe710882e259e8dc46da310bd4518ca93b1d19b" name="irssi" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="6.el10"/>
  <changelog author="Todd Zullinger &lt;tmz@pobox.com&gt; - 1.4.4-2" date="1680177600">- verify upstream source signature</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.4.4-3" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Boudhayan Bhattacharya &lt;bbhtt.zn0i8@slmail.me&gt; - 1.4.4-5" date="1692360000">- Add irssi perl-ntype patch for perl&gt;=5.38
  Resolves rhbz#2232750</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.4.5-1" date="1696939200">- New version
  Resolves: rhbz#2241891</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.5-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.4.5-3" date="1706097600">- Converted license to SPDX</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.5-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.5-5" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="918b2517a02a7a6115611f0c73961722b4ec3127918ed19eaaf7bb001f5c06ad" name="irssi-devel" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="6.el10"/>
  <changelog author="Todd Zullinger &lt;tmz@pobox.com&gt; - 1.4.4-2" date="1680177600">- verify upstream source signature</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.4.4-3" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Boudhayan Bhattacharya &lt;bbhtt.zn0i8@slmail.me&gt; - 1.4.4-5" date="1692360000">- Add irssi perl-ntype patch for perl&gt;=5.38
  Resolves rhbz#2232750</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.4.5-1" date="1696939200">- New version
  Resolves: rhbz#2241891</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.5-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.4.5-3" date="1706097600">- Converted license to SPDX</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.5-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.5-5" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="149f93b93ad05466c53f4d7fa67f80326ec58de8ec35b34df45f92680a22e8f2" name="iscsi-initiator-utils" arch="x86_64">
  <version epoch="0" ver="6.2.1.11" rel="0.git4b3e853.el10"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.9-14.gitc26218d" date="1688472000">- Rebased to Open-iSCSI 2.1.9</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.9-15.gitc26218d" date="1688472001">- libiscsi build issues with new makefiles</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 6.2.1.9-16.gitc26218d" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.1.9-17.gitc26218d" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.9-18.gita65a472" date="1700049600">- iscsiuio threading fixes (iscsiuio 0.7.8.8)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.1.9-19.gita65a472" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.1.9-20.gita65a472" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.1.9-21.gita65a472" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.1.9-22.gita65a472" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
</package>
<package pkgid="3f4680a54b560d1b20fcd769ed4a111dc84e40f1ffcc62a8162b1cc495de8d01" name="iscsi-initiator-utils" arch="x86_64">
  <version epoch="0" ver="6.2.1.11" rel="1.git4b3e853.el10_2.2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.1.9-22.gita65a472" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-1.git4b3e853" date="1782388800">- fix regression in fw and static node records</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.1" date="1785412800">- fix IQN name validation to prevent path traversal (CVE-2026-44943)
- fix iscsiuio control-socket credential verification (CVE-2026-44944)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.2" date="1785412801">- fix IQN name validation to prevent path traversal (CVE-2026-44943)
- fix iscsiuio control-socket credential verification (CVE-2026-44944)</changelog>
</package>
<package pkgid="e385d16bac783fee776770f51c3a6a6ca237b4cf1ed42d301cdb2db9742723f3" name="iscsi-initiator-utils-devel" arch="x86_64">
  <version epoch="0" ver="6.2.1.11" rel="0.git4b3e853.el10"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.9-14.gitc26218d" date="1688472000">- Rebased to Open-iSCSI 2.1.9</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.9-15.gitc26218d" date="1688472001">- libiscsi build issues with new makefiles</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 6.2.1.9-16.gitc26218d" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.1.9-17.gitc26218d" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.9-18.gita65a472" date="1700049600">- iscsiuio threading fixes (iscsiuio 0.7.8.8)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.1.9-19.gita65a472" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.1.9-20.gita65a472" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.1.9-21.gita65a472" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.1.9-22.gita65a472" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
</package>
<package pkgid="7472aeed25657c6686a79b9acc69c47e48fe6cb57ebbe4fc305de706c20728f8" name="iscsi-initiator-utils-devel" arch="x86_64">
  <version epoch="0" ver="6.2.1.11" rel="1.git4b3e853.el10_2.2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.1.9-22.gita65a472" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-1.git4b3e853" date="1782388800">- fix regression in fw and static node records</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.1" date="1785412800">- fix IQN name validation to prevent path traversal (CVE-2026-44943)
- fix iscsiuio control-socket credential verification (CVE-2026-44944)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.2" date="1785412801">- fix IQN name validation to prevent path traversal (CVE-2026-44943)
- fix iscsiuio control-socket credential verification (CVE-2026-44944)</changelog>
</package>
<package pkgid="b81218ef024e1b5b42344d8bce66689bd8afd3047b45ced6b0a0e7891f24d19a" name="iscsi-initiator-utils-iscsiuio" arch="x86_64">
  <version epoch="0" ver="6.2.1.11" rel="0.git4b3e853.el10"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.9-14.gitc26218d" date="1688472000">- Rebased to Open-iSCSI 2.1.9</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.9-15.gitc26218d" date="1688472001">- libiscsi build issues with new makefiles</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 6.2.1.9-16.gitc26218d" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.1.9-17.gitc26218d" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.9-18.gita65a472" date="1700049600">- iscsiuio threading fixes (iscsiuio 0.7.8.8)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.1.9-19.gita65a472" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.1.9-20.gita65a472" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.1.9-21.gita65a472" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.1.9-22.gita65a472" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
</package>
<package pkgid="ff11a79939ba5d6c4056b018e70d76ffd8a36947358d52927ab916540d828295" name="iscsi-initiator-utils-iscsiuio" arch="x86_64">
  <version epoch="0" ver="6.2.1.11" rel="1.git4b3e853.el10_2.2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.1.9-22.gita65a472" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-1.git4b3e853" date="1782388800">- fix regression in fw and static node records</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.1" date="1785412800">- fix IQN name validation to prevent path traversal (CVE-2026-44943)
- fix iscsiuio control-socket credential verification (CVE-2026-44944)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.2" date="1785412801">- fix IQN name validation to prevent path traversal (CVE-2026-44943)
- fix iscsiuio control-socket credential verification (CVE-2026-44944)</changelog>
</package>
<package pkgid="e5db61b60634cb9a6501b01b26acf52e450ddd189d08a5cb02c026a8f79fa78d" name="isns-utils" arch="x86_64">
  <version epoch="0" ver="0.103" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.101-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.101-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-12" date="1734091200">- Add explicit requires with version on subpackage isns-utils-lib
  Resolves: RHEL-70744</changelog>
</package>
<package pkgid="10123c3f25c4f042be716fb8abd1590711dc247ba9291d02c3b517c92f30425c" name="isns-utils" arch="x86_64">
  <version epoch="0" ver="0.103" rel="1.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.101-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-12" date="1734091200">- Add explicit requires with version on subpackage isns-utils-lib
  Resolves: RHEL-70744</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.103-1.1" date="1785412800">- Fix double-free vulnerability in attrs.c error paths (CVE-2026-55995)
  Resolves: RHEL-219472</changelog>
</package>
<package pkgid="941caf3d835603bec385777d41ed6961cb941d81db30cda96e988ddd4084df64" name="isns-utils-devel" arch="x86_64">
  <version epoch="0" ver="0.103" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.101-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.101-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-12" date="1734091200">- Add explicit requires with version on subpackage isns-utils-lib
  Resolves: RHEL-70744</changelog>
</package>
<package pkgid="d4af2c3c3c89795f732dfbdeb64ad559263f83ecd8140876a1e16534ddcd881a" name="isns-utils-devel" arch="x86_64">
  <version epoch="0" ver="0.103" rel="1.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.101-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-12" date="1734091200">- Add explicit requires with version on subpackage isns-utils-lib
  Resolves: RHEL-70744</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.103-1.1" date="1785412800">- Fix double-free vulnerability in attrs.c error paths (CVE-2026-55995)
  Resolves: RHEL-219472</changelog>
</package>
<package pkgid="c16a6361d3a98cfd4315aa2ea10ccf80a31619e5a9e2a63957628fbcb93fcda7" name="isns-utils-libs" arch="x86_64">
  <version epoch="0" ver="0.103" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.101-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.101-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-12" date="1734091200">- Add explicit requires with version on subpackage isns-utils-lib
  Resolves: RHEL-70744</changelog>
</package>
<package pkgid="540362ae08699a7963a9c776c9d5e07d8271d0b7161e5d2305bbc26d52bfa400" name="isns-utils-libs" arch="x86_64">
  <version epoch="0" ver="0.103" rel="1.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.101-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-12" date="1734091200">- Add explicit requires with version on subpackage isns-utils-lib
  Resolves: RHEL-70744</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.103-1.1" date="1785412800">- Fix double-free vulnerability in attrs.c error paths (CVE-2026-55995)
  Resolves: RHEL-219472</changelog>
</package>
<package pkgid="84f90c92f1fae89b76da8828ab088b6bfff2e0d014dbfd2d59bd185442ca8b21" name="iso-codes" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.12.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.13.0-1" date="1677585600">- Update to 4.13.0 version (#2173897)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.15.0-1" date="1682683200">- Update to 4.15.0 version (#2190318)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.15.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.16.0-1" date="1705320000">- Update to 4.16.0 version (#2258341)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.16.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.16.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.16.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.16.0-5" date="1720785600">- Resolves: RHEL-46910 - Fix xmllint error for iso_3166-2.xml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.16.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a9127ec4b169e71abf62bdf38300716587c17d36f5823f071b30b1fe7eb8228e" name="iso-codes-devel" arch="noarch">
  <version epoch="0" ver="4.16.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.12.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.13.0-1" date="1677585600">- Update to 4.13.0 version (#2173897)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.15.0-1" date="1682683200">- Update to 4.15.0 version (#2190318)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.15.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.16.0-1" date="1705320000">- Update to 4.16.0 version (#2258341)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.16.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.16.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.16.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.16.0-5" date="1720785600">- Resolves: RHEL-46910 - Fix xmllint error for iso_3166-2.xml file</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.16.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="66371d0e9355aff579930ba446af128396a079fb747899ff647e782e94653361" name="isomd5sum" arch="x86_64">
  <version epoch="1" ver="1.2.5" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.2.3-18" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Brian C. Lane &lt;bcl@redhat.com&gt; - 1.2.3-19" date="1675080000">- SPDX migration</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1:1.2.3-20" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.2.3-21" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.2.3-22" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.2.3-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.2.3-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Brian C. Lane &lt;bcl@redhat.com&gt; - 1.2.5-1" date="1719316800">- New Version 1.2.5 (bcl)
  Resolves: RHEL-45005
- testpyisomd5sum.py: Use a consistent iso size (bcl)
- Remove quiet from iso creation, size seems wrong (bcl)
- workflows: Move to Fedora 39 and checkout v4 (bcl)
- Add support for riscv64 (davidlt)
- workflows: Update to use actions/checkout (bcl)
- Add a GitHub Action to run tests (bcl)
- Add mips64 (wangray1021)
- testpyisomd5sum.py: Support genisoimage, Python 2 (ryan)</changelog>
  <changelog author="Brian C. Lane &lt;bcl@redhat.com&gt; - 1.2.5-2" date="1719403200">- Rebuild to force gating to use new gating config
  (changed genisoimage to xorriso for tests)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.2.5-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6bc6a9a9532568936e962e6b3c6ef40c92ce7cf90bf1230339cba88ce6bf2942" name="isomd5sum-devel" arch="x86_64">
  <version epoch="1" ver="1.2.5" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.2.3-18" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Brian C. Lane &lt;bcl@redhat.com&gt; - 1.2.3-19" date="1675080000">- SPDX migration</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1:1.2.3-20" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.2.3-21" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.2.3-22" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.2.3-23" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.2.3-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Brian C. Lane &lt;bcl@redhat.com&gt; - 1.2.5-1" date="1719316800">- New Version 1.2.5 (bcl)
  Resolves: RHEL-45005
- testpyisomd5sum.py: Use a consistent iso size (bcl)
- Remove quiet from iso creation, size seems wrong (bcl)
- workflows: Move to Fedora 39 and checkout v4 (bcl)
- Add support for riscv64 (davidlt)
- workflows: Update to use actions/checkout (bcl)
- Add a GitHub Action to run tests (bcl)
- Add mips64 (wangray1021)
- testpyisomd5sum.py: Support genisoimage, Python 2 (ryan)</changelog>
  <changelog author="Brian C. Lane &lt;bcl@redhat.com&gt; - 1.2.5-2" date="1719403200">- Rebuild to force gating to use new gating config
  (changed genisoimage to xorriso for tests)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.2.5-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dbe966cf3d13c1f55ecd03178a7c56aaf68c6e48fe0312ea52643c56c2866ee1" name="itstool" arch="noarch">
  <version epoch="0" ver="2.0.7" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.7-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.7-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT fedoraproject DOT org&gt; - 2.0.7-5" date="1692619200">- Migrate to SPDX license expression</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 2.0.7-6" date="1696852800">- Fix insufficiently quoted regular expressions which caused excessive warnings
  with Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.7-7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.7-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.7-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.7-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="914b28ee2ac861e0f298247cc48618b0457171bdcf6e32f96d4cf4e1d8fe5a15" name="iw" arch="x86_64">
  <version epoch="0" ver="6.17" rel="1.el10"/>
  <changelog author="Jose Ignacio Tornos Martinez &lt;jtornosm@redhat.com&gt; - 6.7-1" date="1705320000">- Update to 6.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.7-2" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jose Ignacio Tornos Martinez &lt;jtornosm@redhat.com&gt; - 6.9" date="1718712000">- Update to 6.9 from upstream
  Resolves: RHEL-43269</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.9-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.9-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jose Ignacio Tornos Martinez &lt;jtornosm@redhat.com&gt; - 6.17.1" date="1764158400">- Update to 6.17 from upstream
  Resolves: RHEL-127106</changelog>
</package>
<package pkgid="a3f0b00c43dbccfb9cf169ad9bed109e2a0e88ba43ffa799f0e4740d6efbc75f" name="iwlegacy-firmware" arch="noarch">
  <version epoch="0" ver="20260411" rel="19.5.el10_1"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-19.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128447)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128447</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-19.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-140094)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-140094</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-19.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145532)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145532</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260311-19.4" date="1773230400">- Update linux-firmware to latest upstream (RHEL-154362)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-154362</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260411-19.5" date="1775908800">- Update linux-firmware to latest upstream (RHEL-164389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
Resolves: RHEL-164389</changelog>
</package>
<package pkgid="854228a670ca306d761f432b71055a17a60e886157f1897f5f2637e658a1d291" name="iwlegacy-firmware" arch="noarch">
  <version epoch="0" ver="20260609" rel="23.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250212-14" date="1740484800">- accel: ivpu: Update firmware for NPU (RHEL-38586)
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
</package>
<package pkgid="bdc8acc219b40963f993073cfefab2ebd4f4275088d7993c0e64a3ba3477b732" name="iwlegacy-firmware" arch="noarch">
  <version epoch="0" ver="20260707" rel="23.1.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream ()
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
</package>
<package pkgid="9528148a0c12b3738e3f5bd92b850069b536d6198d3d498d7a72c549bd8ebbaf" name="iwlegacy-firmware" arch="noarch">
  <version epoch="0" ver="20260804" rel="23.2.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream (RHEL-188389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260804-23.2" date="1785844800">- Update linux-firmware to latest upstream (RHEL-214057)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- linux-firmware: Add firmware binary files for new HP project (Messi)
- qcom: Add gpu firmwares for Eliza chipset
- cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
- rtw89: 8922d: add fw 0.35.113.2
- qcom: venus-5.4: fix vp9 decoder assertion failure
- qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
- qcom: Update qdsp6sw firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- intel_vpu: Update NPU firmware
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: Add firmware for new soundwire projects
- rtw88: add firmware v41.0.0 for RTL8723B
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add ADSP firmware for hawi platform
- powervr: add firmware for Imagination Technologies BXM-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform
Resolves: RHEL-214057</changelog>
</package>
<package pkgid="49afa7cac44b4550cc573892fa8f31b67fcd5c42ec99acb579507c04618a2238" name="iwlwifi-dvm-firmware" arch="noarch">
  <version epoch="0" ver="20260411" rel="19.5.el10_1"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-19.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128447)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128447</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-19.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-140094)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-140094</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-19.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145532)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145532</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260311-19.4" date="1773230400">- Update linux-firmware to latest upstream (RHEL-154362)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-154362</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260411-19.5" date="1775908800">- Update linux-firmware to latest upstream (RHEL-164389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
Resolves: RHEL-164389</changelog>
</package>
<package pkgid="1ccece9f3ccffe00e9b8c68a793d191d4932a1f347133ab59a0c8615c4b55560" name="iwlwifi-dvm-firmware" arch="noarch">
  <version epoch="0" ver="20260609" rel="23.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250212-14" date="1740484800">- accel: ivpu: Update firmware for NPU (RHEL-38586)
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
</package>
<package pkgid="6befd004fdd7d87d4a85bb7f34560c9dec39e4fbcf696a7c67cc1e00141b41d6" name="iwlwifi-dvm-firmware" arch="noarch">
  <version epoch="0" ver="20260707" rel="23.1.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream ()
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
</package>
<package pkgid="8587fafbdf3f270898f00ffda6b862324b33ff0dd9af45e1115554f3fbcf9b99" name="iwlwifi-dvm-firmware" arch="noarch">
  <version epoch="0" ver="20260804" rel="23.2.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream (RHEL-188389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260804-23.2" date="1785844800">- Update linux-firmware to latest upstream (RHEL-214057)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- linux-firmware: Add firmware binary files for new HP project (Messi)
- qcom: Add gpu firmwares for Eliza chipset
- cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
- rtw89: 8922d: add fw 0.35.113.2
- qcom: venus-5.4: fix vp9 decoder assertion failure
- qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
- qcom: Update qdsp6sw firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- intel_vpu: Update NPU firmware
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: Add firmware for new soundwire projects
- rtw88: add firmware v41.0.0 for RTL8723B
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add ADSP firmware for hawi platform
- powervr: add firmware for Imagination Technologies BXM-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform
Resolves: RHEL-214057</changelog>
</package>
<package pkgid="0a75da2cd41fb2e66aa5931f4aabb1376da61434d7eaef927f69d084a5d7158a" name="iwlwifi-mvm-firmware" arch="noarch">
  <version epoch="0" ver="20260411" rel="19.5.el10_1"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-19.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128447)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128447</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-19.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-140094)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-140094</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-19.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145532)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145532</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260311-19.4" date="1773230400">- Update linux-firmware to latest upstream (RHEL-154362)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-154362</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260411-19.5" date="1775908800">- Update linux-firmware to latest upstream (RHEL-164389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
Resolves: RHEL-164389</changelog>
</package>
<package pkgid="be2877ad0875fb0ee66d6ef050321059b9e39cbe5f54bc93a892cc0d11330e49" name="iwlwifi-mvm-firmware" arch="noarch">
  <version epoch="0" ver="20260609" rel="23.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250212-14" date="1740484800">- accel: ivpu: Update firmware for NPU (RHEL-38586)
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
</package>
<package pkgid="83027bd7d87d394aab851ef7885d1b15db81f2926e0766097d12613166076dd1" name="iwlwifi-mvm-firmware" arch="noarch">
  <version epoch="0" ver="20260707" rel="23.1.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream ()
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
</package>
<package pkgid="f9d3c731508cff476c3d2d26ca045395f4032b8ac3b8d1845d4ee227cbc80e79" name="iwlwifi-mvm-firmware" arch="noarch">
  <version epoch="0" ver="20260804" rel="23.2.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream (RHEL-188389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260804-23.2" date="1785844800">- Update linux-firmware to latest upstream (RHEL-214057)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- linux-firmware: Add firmware binary files for new HP project (Messi)
- qcom: Add gpu firmwares for Eliza chipset
- cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
- rtw89: 8922d: add fw 0.35.113.2
- qcom: venus-5.4: fix vp9 decoder assertion failure
- qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
- qcom: Update qdsp6sw firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- intel_vpu: Update NPU firmware
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: Add firmware for new soundwire projects
- rtw88: add firmware v41.0.0 for RTL8723B
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add ADSP firmware for hawi platform
- powervr: add firmware for Imagination Technologies BXM-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform
Resolves: RHEL-214057</changelog>
</package>
<package pkgid="e43c9652e8c070d5b855ba1aad8239a7fbaf8ae647bb069ff6f82849d92e48e8" name="iwpmd" arch="x86_64">
  <version epoch="0" ver="61.0" rel="1.el10"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1768478400">- Rebase to upstream release 61.0</changelog>
</package>
<package pkgid="db4a6e49e202bc46850576a0f8d943b354f5c42b7ce8f7a04da3ee29edaf3981" name="jakarta-activation" arch="noarch">
  <version epoch="0" ver="2.1.2" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.1-3" date="1675857600">- Change license, reduce dependencies</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.2-1" date="1692360000">- Update to upstream version 2.1.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.2-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-6" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="715df3c182307a1d264af5cfa617166a1cb9befff5ffa528d5410b191d576c75" name="jakarta-activation-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.2" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.1-3" date="1675857600">- Change license, reduce dependencies</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.2-1" date="1692360000">- Update to upstream version 2.1.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.2-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-6" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="62d0bc8cd030f04140b0a957f9dffe0a9ba95f9bd21b40749eba884ab106d822" name="jakarta-annotations" arch="noarch">
  <version epoch="0" ver="1.3.5" rel="23.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-15" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-17" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-18" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-19" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-20" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.5-21" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.5-22" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.5-23" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9da50ecfc467e40b9b58087b5d207350cb4ca1ee7bc0c840d923cc3231f3a101" name="jakarta-annotations-javadoc" arch="noarch">
  <version epoch="0" ver="1.3.5" rel="23.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-15" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-17" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-18" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-19" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-20" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.5-21" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.5-22" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.5-23" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3d85b7fb8f0cf57c3c927ebfc2cb680cebb78735d6341dceb61ac22a98a302de" name="jakarta-mail" arch="noarch">
  <version epoch="0" ver="2.1.2" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.7-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.7-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.0-1" date="1692619200">- Update to upstream version 2.1.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Andrew Bauer &lt;zonexpertconsulting@outlook.com&gt; - 2.1.2-1" date="1693569601">- Update to 2.1.2 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e2b0c5f96f1a180501d98d8b29118cfff10675eecb3e67681082800fbf0040f2" name="jakarta-mail-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.2" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.7-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.7-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.0-1" date="1692619200">- Update to upstream version 2.1.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Andrew Bauer &lt;zonexpertconsulting@outlook.com&gt; - 2.1.2-1" date="1693569601">- Update to 2.1.2 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.2-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b76fa19bbcc367a1561acbfc88ab76328fa751cc7b7bb1e9ffb286110432653c" name="jakarta-oro" arch="noarch">
  <version epoch="0" ver="2.0.8" rel="45.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.8-38" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.8-39" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.8-40" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.8-41" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.8-42" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.8-43" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.8-44" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.8-45" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5882c5d36cfbac14b37b281233d44cfdb567678a16b44fc0e6ddbe674bde686f" name="jakarta-oro-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.8" rel="45.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.8-38" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.8-39" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.8-40" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.8-41" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.8-42" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.8-43" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.8-44" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.8-45" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="96d0078a931294492a53db8657d8b12de709a17c3ebf6a9f8686eab6cc2723b1" name="jakarta-servlet" arch="noarch">
  <version epoch="0" ver="5.0.0" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.0.0-14" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.0-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.0-18" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.0-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ae71f75cd2b12aa60989809b73a5f5f8043a02cda71790fc9f367b2bbf5acd2b" name="jakarta-servlet-javadoc" arch="noarch">
  <version epoch="0" ver="5.0.0" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.0.0-14" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.0-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.0-18" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.0-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="00bf9c8183589d79aecab7245aaf07e6fd7df653df6a5493d77be15bd60b3f8b" name="jansi" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-8" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.0-9" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.0-10" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-11" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-12" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.1-1" date="1706788800">- Update to upstream version 2.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.1-3" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.1-5" date="1737028800">- Add build-dependency on which</changelog>
</package>
<package pkgid="aced1e7754bc87fd63885c1e9c61208479c605794775c896e0666450ab251ba8" name="jansi-javadoc" arch="noarch">
  <version epoch="0" ver="2.4.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-8" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.0-9" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.0-10" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-11" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-12" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.1-1" date="1706788800">- Update to upstream version 2.4.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.1-3" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.1-5" date="1737028800">- Add build-dependency on which</changelog>
</package>
<package pkgid="57f9c81975b42e67632066c0873db7f0ab9c1581ca5f66cdb8eae20aca2491b6" name="jansson" arch="x86_64">
  <version epoch="0" ver="2.14" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 2.14-1" date="1714737600">- Rebase to 2.14
  Related: RHEL-30626</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.14-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.14-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c480bfd34ce0911bd7a57fc2d615d647033dc34efd0faf68d7bdc3c5eed2625d" name="jansson-devel" arch="x86_64">
  <version epoch="0" ver="2.14" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 2.14-1" date="1714737600">- Rebase to 2.14
  Related: RHEL-30626</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.14-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.14-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b9a82f1f32a68c0a228ca0e1ae7e1a844e220150319f54f885548282dfe987a8" name="jansson-devel-doc" arch="noarch">
  <version epoch="0" ver="2.14" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 2.14-1" date="1714737600">- Rebase to 2.14
  Related: RHEL-30626</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.14-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.14-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="38b6d5aa773af3bd41ae413dbef4f496389c88ed17bf1e466a04ac6754d0c4dd" name="jasper" arch="x86_64">
  <version epoch="0" ver="4.1.0" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.6-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.0.6-3" date="1689681600">- Migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.6-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 4.1.0-1" date="1700481600">- New upstream release 4.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="593fe8ce1735051aa79136cf159a4d6dd5c1042e8a4df149ab48eff7f30c1dcd" name="jasper-devel" arch="x86_64">
  <version epoch="0" ver="4.1.0" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.6-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.0.6-3" date="1689681600">- Migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.6-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 4.1.0-1" date="1700481600">- New upstream release 4.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d0cac388ab1ee24e5e7edc1619c5a232c57fc865c8da66d88035158c727eb4df" name="jasper-libs" arch="x86_64">
  <version epoch="0" ver="4.1.0" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.6-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.0.6-3" date="1689681600">- Migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.6-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 4.1.0-1" date="1700481600">- New upstream release 4.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a7530f8cda2a6dd044d7a9dee420ab426225b181674911c73f476aeae504fc43" name="jasper-utils" arch="x86_64">
  <version epoch="0" ver="4.1.0" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.6-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 3.0.6-3" date="1689681600">- Migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.6-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 4.1.0-1" date="1700481600">- New upstream release 4.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bebcc1df015f56250eefc3297e7f0c6088178a9f7673c3171081c5e726e04aac" name="java-21-openjdk" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="12d5c92f8a430f49042a13dc13305dcf1db337e807970ad67ad645128b9038e3" name="java-21-openjdk" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="168637db312fcdbaa77b9fc99815d805343dd2f82b6cd895faf7d7c8da2348d7" name="java-21-openjdk" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="55cf7555abc7236a1d665d59ee563fd5009c7c03cf145334d4a6bae183d6b237" name="java-21-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="302fab47017602c2ee931db505a01ef29de5a37129eff2fd662c07acae46bc83" name="java-21-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="20bf18fe7a004904f07f636f5a763d71942d29d0e3a2c8c894fbb47e74266941" name="java-21-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="ab57d81285c67340429045f6113f1a86e69ed76f481fa92f8c6db483eef8c7c0" name="java-21-openjdk-demo-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="534b3d9936ab19fa884b64d138d00af18766fae546e1f977727d6ce7c0292fa6" name="java-21-openjdk-demo-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="6b65048a398b301466508424bd95e29113ac7a973b578b10967d64a4ec8084f8" name="java-21-openjdk-demo-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="62bcbbc983692a4313d9deff342e510b0e3b019394ea8e8ebd806c66ba1b8414" name="java-21-openjdk-demo-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="3f39fce6fcadd1fdf1c79f92d68c909234c1d2cb8ff641855a86fa6cd285b230" name="java-21-openjdk-demo-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="bdcd22064fe860fcb0ecce15f20727f240b91f543972083c26d8f82afc6c7d20" name="java-21-openjdk-demo-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="ad8fe4067f3f4293e6d3ca494c95960f9c50c60766ab73d03c9fd32c8504dd0c" name="java-21-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="5b885ba007eaac3e9027f148c7141b5fa32f127496ab5e52be0264fecb1d6592" name="java-21-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="53e842e983f54292d75c5baa6c3142b7b3bbbb27a9ea1e43f7a17407e1644bcf" name="java-21-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="6d3d4d9b16570ce5450e51516c02b9c7d3e7e147b2bb6365070381aab9e512d8" name="java-21-openjdk-devel-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="a0bd3c3b981527d7f75d980527a3bcc6348d42dcc2130ebdff53bf663d259c4e" name="java-21-openjdk-devel-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="a089d49bf048f4f48c654acbd7d6f5b69f8d04384361445df3432156a2566a69" name="java-21-openjdk-devel-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="35e8c9d4b3ecca3fdf243c52cf668b7a7b9cf4f57d1ba05d3a68e67924fd107f" name="java-21-openjdk-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="1cd9e761f2a38818c6863cb46a26bc97559198514f77c21ee2b386f579c0949d" name="java-21-openjdk-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="dcf6938d785aa6e0c3fb1f918baf5d27e3129f11c198b01c9d242e11a99d686e" name="java-21-openjdk-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="001d4702521d7f9fa6c3a71c5ae321705caefedc4e437f11b562e3f72cb37b12" name="java-21-openjdk-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="fbd55e5a9226d5db032d41894331023659b4f64740c4858146552fdc83537a9c" name="java-21-openjdk-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="6700a67324394c29ed1473b442b1a7a8d187be01952ba1f0fa84b506e7941b8f" name="java-21-openjdk-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="51e3f7fe13b70bfe3762cb541575dfe720117ab466804d850ea93cea712cd59e" name="java-21-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="7389a5f3d2464da124b2183906aa5a6fc7d659a6dc384532fc244fc44de765d7" name="java-21-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="de33b95b827a85bd6089f061b9b33023cefe79b074471cda91be20f00f4bea9a" name="java-21-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="85768c4c735dcdac1938a5cdbceb8a0d6f728e3591540a777742a540efffb878" name="java-21-openjdk-headless-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="3a6d924486934b937c6f283a54ce5110ff790425364ae3b0be24193b78bbe381" name="java-21-openjdk-headless-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="7fa36df075c1b5975ec5c1185e9f157678d82338909d2683fa666dd817afc151" name="java-21-openjdk-headless-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="e0aa508f23b507d1c6f039565deb5bba0cbd575ac30e5d773ca76fbab4fbc1c9" name="java-21-openjdk-headless-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="f643dd4cd9957d7806a867b7c3198b60e2c5dba54ecd4d63ae10eeaa2190f54c" name="java-21-openjdk-headless-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="293c8c73f89ee16b47e066bba63874d5082f56cc3e211003c8955d2a25393e23" name="java-21-openjdk-headless-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="e2b5d007af03d0fcd3ebbf86058cfc9842ab3a259fe109a4dfa02326c781bfea" name="java-21-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="0be7f77946f626a3f0921a65da2d9936245481bf6e23e43c6128d6d47714b24a" name="java-21-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="d94fc2b1ce653ff6e15c3b5b1e120bae3b65d27be8cfe544e1059d982c48ffc8" name="java-21-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="6c09916a7d57b801375c2cf48f65d661d5dfb09e0bd076765b54009729b903eb" name="java-21-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="e694c9700e41fe1eb01cab72543ffe5b3d61a18ebd957ffb7e4abef036f7546f" name="java-21-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="676334b7482fc1f104e10bdd8a7f5704027990d63688d549de5868859fc59476" name="java-21-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="4feac2bc86c0fc1412f06e2bad94f556003230566b14ccf5a12991bc44766e11" name="java-21-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="dd4d8e7d1a92a19f6d062d0bdd78bd4b70e0c49347ee1a18002ad7b6314bf7f4" name="java-21-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="299db6b13a5359cdccdd28c513b788acf01c89ed4f39256f8cda8d0d4ac9a8d0" name="java-21-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="70ad763af871d0cf5501d9578eb438a254342b95c0d3b6c0af0df2f549e641c8" name="java-21-openjdk-jmods-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="9d95e141954cf673881b75c727d8f36adeb3b4e9b0fd8dfc933b17c6bcd5af26" name="java-21-openjdk-jmods-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="d5ddc1522216cd1b533af09ad2810ba2f481d116b3f9f2661ebf5d87c29844de" name="java-21-openjdk-jmods-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="11f30a7b4db44279e5da8c45d2f4042fd9bc839b9cd7b03e467ae98269d32da2" name="java-21-openjdk-jmods-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="7833c5815d859f1b3e9e14b8af6793263223f96370afc5b7f18ee83d878a56d7" name="java-21-openjdk-jmods-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="5619440dac9f0ec4db6bc3e18cf36d027e88dac0f549ee8c6f2ef675cfbbcffa" name="java-21-openjdk-jmods-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="d374b18b9e6ee237226d98310954105fd414358e52ba5759c9a38aacdb54cda0" name="java-21-openjdk-portable" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.1-0.1.ea" date="1751976000">- Update get_bundle_versions.sh to match other scripts
- * get_bundle_versions.sh: Add license
- * get_bundle_versions.sh: Set compile-command in Emacs
- * get_bundle_versions.sh: Use different error codes for different failures
- * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
- * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
- * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
- Add OpenJDK 8u support to get_bundle_versions.sh
- Print bundle updates and backouts at end of openjdk_news.sh output
- Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
- Resolves: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.2-0.1.ea" date="1752062400">- Update to jdk-21.0.8+2 (EA)
- Update release notes to 21.0.8+2
- Add timezone data update check to openjdk_news.sh
- Add duplicate check to openjdk_news.sh
- Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
- Related: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118400">- Build for Rocky Linux 10</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="74aa515321228af66aed21626ff6b06453cc3e4891b7d52c95bb0f6877b9fdcc" name="java-21-openjdk-portable" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148800">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.0.el9" date="1784894400">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="e9c9b698e418a19ff52a84126780965628847162935bd011ec83d310c0d84b30" name="java-21-openjdk-portable" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.0" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786104000">- Automatically set pkgos when necessary
- Remove now redundant pkgos usage in JDK build dependency
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5045
- Resolves: OPENJDK-5046</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786363200">- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- Related: OPENJDK-5045</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.0" date="1786363201">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Fix double '%' in specification of IcedTea sources
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: OPENJDK-5042</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="091bb9002f35b347327c7096f7de11131fd5790cb5a03eeda15b4aa81710e683" name="java-21-openjdk-portable-devel" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.1-0.1.ea" date="1751976000">- Update get_bundle_versions.sh to match other scripts
- * get_bundle_versions.sh: Add license
- * get_bundle_versions.sh: Set compile-command in Emacs
- * get_bundle_versions.sh: Use different error codes for different failures
- * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
- * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
- * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
- Add OpenJDK 8u support to get_bundle_versions.sh
- Print bundle updates and backouts at end of openjdk_news.sh output
- Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
- Resolves: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.2-0.1.ea" date="1752062400">- Update to jdk-21.0.8+2 (EA)
- Update release notes to 21.0.8+2
- Add timezone data update check to openjdk_news.sh
- Add duplicate check to openjdk_news.sh
- Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
- Related: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118400">- Build for Rocky Linux 10</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="6a9de3bc413a95f4fd92766cce580bd34158b804da143ac12b27fec8b9a11f92" name="java-21-openjdk-portable-devel" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148800">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.0.el9" date="1784894400">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="60bfaaa6358f5b5bc5eb94867757893ac7c12ecfa28d3b6d6fbd6f5bd7551297" name="java-21-openjdk-portable-devel" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.0" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786104000">- Automatically set pkgos when necessary
- Remove now redundant pkgos usage in JDK build dependency
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5045
- Resolves: OPENJDK-5046</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786363200">- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- Related: OPENJDK-5045</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.0" date="1786363201">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Fix double '%' in specification of IcedTea sources
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: OPENJDK-5042</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="e08d5150897249f71d7d4d7f20919533209cd78635c91564207ab9484b0e822f" name="java-21-openjdk-portable-devel-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.1-0.1.ea" date="1751976000">- Update get_bundle_versions.sh to match other scripts
- * get_bundle_versions.sh: Add license
- * get_bundle_versions.sh: Set compile-command in Emacs
- * get_bundle_versions.sh: Use different error codes for different failures
- * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
- * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
- * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
- Add OpenJDK 8u support to get_bundle_versions.sh
- Print bundle updates and backouts at end of openjdk_news.sh output
- Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
- Resolves: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.2-0.1.ea" date="1752062400">- Update to jdk-21.0.8+2 (EA)
- Update release notes to 21.0.8+2
- Add timezone data update check to openjdk_news.sh
- Add duplicate check to openjdk_news.sh
- Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
- Related: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118400">- Build for Rocky Linux 10</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="9478bd232aa150b8c65a2b37a6843dc463db96b421db33f64e8e1c48469415ab" name="java-21-openjdk-portable-devel-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148800">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.0.el9" date="1784894400">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="2c8b79a9bebf42f004593143636bc1acd7108c0962a120a55ae7e3719cd85641" name="java-21-openjdk-portable-devel-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.0" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786104000">- Automatically set pkgos when necessary
- Remove now redundant pkgos usage in JDK build dependency
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5045
- Resolves: OPENJDK-5046</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786363200">- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- Related: OPENJDK-5045</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.0" date="1786363201">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Fix double '%' in specification of IcedTea sources
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: OPENJDK-5042</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="b53533cbae436655c8009bc05fa00da403e3f23ffccc7057f1475fdc52f9a0c8" name="java-21-openjdk-portable-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.1-0.1.ea" date="1751976000">- Update get_bundle_versions.sh to match other scripts
- * get_bundle_versions.sh: Add license
- * get_bundle_versions.sh: Set compile-command in Emacs
- * get_bundle_versions.sh: Use different error codes for different failures
- * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
- * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
- * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
- Add OpenJDK 8u support to get_bundle_versions.sh
- Print bundle updates and backouts at end of openjdk_news.sh output
- Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
- Resolves: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.2-0.1.ea" date="1752062400">- Update to jdk-21.0.8+2 (EA)
- Update release notes to 21.0.8+2
- Add timezone data update check to openjdk_news.sh
- Add duplicate check to openjdk_news.sh
- Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
- Related: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118400">- Build for Rocky Linux 10</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="6883f15ff3dd02e4f72224300a2b7591db9e669734d407a8a0013759712626e8" name="java-21-openjdk-portable-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148800">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.0.el9" date="1784894400">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="04a3c4f42d1bd2fd07505ca07e162ce1da8d362b434ab76314643b22dcac1aef" name="java-21-openjdk-portable-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.0" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786104000">- Automatically set pkgos when necessary
- Remove now redundant pkgos usage in JDK build dependency
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5045
- Resolves: OPENJDK-5046</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786363200">- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- Related: OPENJDK-5045</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.0" date="1786363201">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Fix double '%' in specification of IcedTea sources
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: OPENJDK-5042</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="5049234fd280f13c37ff7e82477bd5fbc0f5e0544cceaef1c7668f780044f241" name="java-21-openjdk-portable-docs" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.1-0.1.ea" date="1751976000">- Update get_bundle_versions.sh to match other scripts
- * get_bundle_versions.sh: Add license
- * get_bundle_versions.sh: Set compile-command in Emacs
- * get_bundle_versions.sh: Use different error codes for different failures
- * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
- * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
- * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
- Add OpenJDK 8u support to get_bundle_versions.sh
- Print bundle updates and backouts at end of openjdk_news.sh output
- Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
- Resolves: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.2-0.1.ea" date="1752062400">- Update to jdk-21.0.8+2 (EA)
- Update release notes to 21.0.8+2
- Add timezone data update check to openjdk_news.sh
- Add duplicate check to openjdk_news.sh
- Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
- Related: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118400">- Build for Rocky Linux 10</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="ee0b4da8b6af293392b19d35a31be73e412dcb4b38a86e094420e80df899992f" name="java-21-openjdk-portable-docs" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148800">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.0.el9" date="1784894400">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="e4c9b2b71ab0ff361586e1acbb5b446c46bb973a574486fd65fb3d9d428d4ff3" name="java-21-openjdk-portable-docs" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.0" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786104000">- Automatically set pkgos when necessary
- Remove now redundant pkgos usage in JDK build dependency
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5045
- Resolves: OPENJDK-5046</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786363200">- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- Related: OPENJDK-5045</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.0" date="1786363201">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Fix double '%' in specification of IcedTea sources
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: OPENJDK-5042</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="fcd24647ef019b6ca0e41aafe140d0815e0d055c549e9c3057dbf7ace4bfb40c" name="java-21-openjdk-portable-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.1-0.1.ea" date="1751976000">- Update get_bundle_versions.sh to match other scripts
- * get_bundle_versions.sh: Add license
- * get_bundle_versions.sh: Set compile-command in Emacs
- * get_bundle_versions.sh: Use different error codes for different failures
- * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
- * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
- * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
- Add OpenJDK 8u support to get_bundle_versions.sh
- Print bundle updates and backouts at end of openjdk_news.sh output
- Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
- Resolves: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.2-0.1.ea" date="1752062400">- Update to jdk-21.0.8+2 (EA)
- Update release notes to 21.0.8+2
- Add timezone data update check to openjdk_news.sh
- Add duplicate check to openjdk_news.sh
- Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
- Related: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118400">- Build for Rocky Linux 10</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="c6fec31c6f1c0c7520cbdc415a148e03389e703c00785042c08f6419c142af2a" name="java-21-openjdk-portable-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148800">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.0.el9" date="1784894400">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="3e8c77d38867b19c5752ff33ceff1be09f9bfaa2731a422211856ff76c68e374" name="java-21-openjdk-portable-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.0" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786104000">- Automatically set pkgos when necessary
- Remove now redundant pkgos usage in JDK build dependency
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5045
- Resolves: OPENJDK-5046</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786363200">- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- Related: OPENJDK-5045</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.0" date="1786363201">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Fix double '%' in specification of IcedTea sources
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: OPENJDK-5042</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="93e0b05eea2bdd8d1c1927fb9163d18ecdbd178d76bbff2c30bea9cf94781626" name="java-21-openjdk-portable-misc" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.1-0.1.ea" date="1751976000">- Update get_bundle_versions.sh to match other scripts
- * get_bundle_versions.sh: Add license
- * get_bundle_versions.sh: Set compile-command in Emacs
- * get_bundle_versions.sh: Use different error codes for different failures
- * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
- * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
- * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
- Add OpenJDK 8u support to get_bundle_versions.sh
- Print bundle updates and backouts at end of openjdk_news.sh output
- Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
- Resolves: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.2-0.1.ea" date="1752062400">- Update to jdk-21.0.8+2 (EA)
- Update release notes to 21.0.8+2
- Add timezone data update check to openjdk_news.sh
- Add duplicate check to openjdk_news.sh
- Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
- Related: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118400">- Build for Rocky Linux 10</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="106b778cc7afcf4dec25ae8bb057573d0b0e3e6ff3c0fad8ae6cf1f12469bdb9" name="java-21-openjdk-portable-misc" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148800">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.0.el9" date="1784894400">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="7f0f89c0278593839d1b1dc03fae08fd6a70351dba105b5ea72b4c20422f1f0a" name="java-21-openjdk-portable-misc" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.0" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786104000">- Automatically set pkgos when necessary
- Remove now redundant pkgos usage in JDK build dependency
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5045
- Resolves: OPENJDK-5046</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786363200">- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- Related: OPENJDK-5045</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.0" date="1786363201">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Fix double '%' in specification of IcedTea sources
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: OPENJDK-5042</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="63649f7fe9f5d4b43f1ac17e2e312057d38bee39a0c44519cde1d2e6e04a596f" name="java-21-openjdk-portable-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.1-0.1.ea" date="1751976000">- Update get_bundle_versions.sh to match other scripts
- * get_bundle_versions.sh: Add license
- * get_bundle_versions.sh: Set compile-command in Emacs
- * get_bundle_versions.sh: Use different error codes for different failures
- * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
- * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
- * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
- Add OpenJDK 8u support to get_bundle_versions.sh
- Print bundle updates and backouts at end of openjdk_news.sh output
- Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
- Resolves: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.2-0.1.ea" date="1752062400">- Update to jdk-21.0.8+2 (EA)
- Update release notes to 21.0.8+2
- Add timezone data update check to openjdk_news.sh
- Add duplicate check to openjdk_news.sh
- Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
- Related: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118400">- Build for Rocky Linux 10</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="297620214f3fc2ee67a07b76136ba3da588ec9c1c08897ac3b0ab7a67ad027ce" name="java-21-openjdk-portable-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148800">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.0.el9" date="1784894400">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="ec32274930b0d42e9d1f71f31c6da09af471abdfb5d84baaa04e2de281f65b9b" name="java-21-openjdk-portable-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.0" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786104000">- Automatically set pkgos when necessary
- Remove now redundant pkgos usage in JDK build dependency
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5045
- Resolves: OPENJDK-5046</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786363200">- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- Related: OPENJDK-5045</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.0" date="1786363201">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Fix double '%' in specification of IcedTea sources
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: OPENJDK-5042</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="624d340dc92e8b22e04d88f12f99e60971110d4894e6717f96c9ee55af367f78" name="java-21-openjdk-portable-static-libs" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.1-0.1.ea" date="1751976000">- Update get_bundle_versions.sh to match other scripts
- * get_bundle_versions.sh: Add license
- * get_bundle_versions.sh: Set compile-command in Emacs
- * get_bundle_versions.sh: Use different error codes for different failures
- * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
- * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
- * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
- Add OpenJDK 8u support to get_bundle_versions.sh
- Print bundle updates and backouts at end of openjdk_news.sh output
- Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
- Resolves: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.2-0.1.ea" date="1752062400">- Update to jdk-21.0.8+2 (EA)
- Update release notes to 21.0.8+2
- Add timezone data update check to openjdk_news.sh
- Add duplicate check to openjdk_news.sh
- Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
- Related: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118400">- Build for Rocky Linux 10</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="a37d35ecc359f908591bed7754a1a3ac51d8d7d1061ee3f3d637051dc75d2665" name="java-21-openjdk-portable-static-libs" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148800">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.0.el9" date="1784894400">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="d10357cb489d6af5dddb2c61432e33fc01e43e31658a880d9eaf0582e22a5d54" name="java-21-openjdk-portable-static-libs" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.0" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786104000">- Automatically set pkgos when necessary
- Remove now redundant pkgos usage in JDK build dependency
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5045
- Resolves: OPENJDK-5046</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786363200">- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- Related: OPENJDK-5045</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.0" date="1786363201">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Fix double '%' in specification of IcedTea sources
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: OPENJDK-5042</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="35a9e33830031ad265dde90462af1024a4485faa287d707c881440b2a15e5eb3" name="java-21-openjdk-portable-static-libs-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.1-0.1.ea" date="1751976000">- Update get_bundle_versions.sh to match other scripts
- * get_bundle_versions.sh: Add license
- * get_bundle_versions.sh: Set compile-command in Emacs
- * get_bundle_versions.sh: Use different error codes for different failures
- * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
- * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
- * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
- Add OpenJDK 8u support to get_bundle_versions.sh
- Print bundle updates and backouts at end of openjdk_news.sh output
- Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
- Resolves: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.2-0.1.ea" date="1752062400">- Update to jdk-21.0.8+2 (EA)
- Update release notes to 21.0.8+2
- Add timezone data update check to openjdk_news.sh
- Add duplicate check to openjdk_news.sh
- Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
- Related: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118400">- Build for Rocky Linux 10</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="6264171414a9ed98ce20c8ec77d0dba31faeda742a81075a1677e577fb40f529" name="java-21-openjdk-portable-static-libs-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148800">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.0.el9" date="1784894400">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="19a176dbef880c2403e6f7c194cb16703b03ca595d7d9291abad0f4d41f92248" name="java-21-openjdk-portable-static-libs-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.0" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786104000">- Automatically set pkgos when necessary
- Remove now redundant pkgos usage in JDK build dependency
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5045
- Resolves: OPENJDK-5046</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786363200">- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- Related: OPENJDK-5045</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.0" date="1786363201">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Fix double '%' in specification of IcedTea sources
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: OPENJDK-5042</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="314fb15a11449df0c1900ce348da96658b5ff7360e920b83bdcf504ec1f5f6ad" name="java-21-openjdk-portable-static-libs-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.1-0.1.ea" date="1751976000">- Update get_bundle_versions.sh to match other scripts
- * get_bundle_versions.sh: Add license
- * get_bundle_versions.sh: Set compile-command in Emacs
- * get_bundle_versions.sh: Use different error codes for different failures
- * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
- * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
- * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
- Add OpenJDK 8u support to get_bundle_versions.sh
- Print bundle updates and backouts at end of openjdk_news.sh output
- Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
- Resolves: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.2-0.1.ea" date="1752062400">- Update to jdk-21.0.8+2 (EA)
- Update release notes to 21.0.8+2
- Add timezone data update check to openjdk_news.sh
- Add duplicate check to openjdk_news.sh
- Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
- Related: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118400">- Build for Rocky Linux 10</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="d4b6449d46b638a00b2a0638cd4adf41f3ce477222e1640de0c0b1b5890c24ee" name="java-21-openjdk-portable-static-libs-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148800">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.0.el9" date="1784894400">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="3866da657b96339673c6a0aaae092924412eb8280cacfe22e18a1cbf06c1daf6" name="java-21-openjdk-portable-static-libs-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.0" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786104000">- Automatically set pkgos when necessary
- Remove now redundant pkgos usage in JDK build dependency
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5045
- Resolves: OPENJDK-5046</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786363200">- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- Related: OPENJDK-5045</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.0" date="1786363201">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Fix double '%' in specification of IcedTea sources
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: OPENJDK-5042</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="df9f3cc4c9b00d7f06d921b986596f5ed506b04c351fbba1ebde2ae7f6e394b1" name="java-21-openjdk-portable-unstripped" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.1-0.1.ea" date="1751976000">- Update get_bundle_versions.sh to match other scripts
- * get_bundle_versions.sh: Add license
- * get_bundle_versions.sh: Set compile-command in Emacs
- * get_bundle_versions.sh: Use different error codes for different failures
- * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
- * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
- * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
- Add OpenJDK 8u support to get_bundle_versions.sh
- Print bundle updates and backouts at end of openjdk_news.sh output
- Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
- Resolves: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.2-0.1.ea" date="1752062400">- Update to jdk-21.0.8+2 (EA)
- Update release notes to 21.0.8+2
- Add timezone data update check to openjdk_news.sh
- Add duplicate check to openjdk_news.sh
- Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
- Related: OPENJDK-3949</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118400">- Build for Rocky Linux 10</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="ff79e3359a2dcb7578b2adea80ca5e03705a0a57c254496989235fc3e8655c91" name="java-21-openjdk-portable-unstripped" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148800">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-2" date="1760702400">- Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
- Install annobin plugin as gcc-annobin in the same way as the gcc spec file
- Resolves: OPENJDK-4142</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702401">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: OPENJDK-4131</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Resolves: OPENJDK-4273
- Resolves: OPENJDK-4281
- Resolves: OPENJDK-4357
- Resolves: OPENJDK-4397
- Resolves: OPENJDK-4380
- Resolves: OPENJDK-4388
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.0.el9" date="1784894400">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="0ef026082ab714252ac7614861a036dece630f50181b11ba43a110d9044aaf5d" name="java-21-openjdk-portable-unstripped" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4301
- Resolves: OPENJDK-4521
- Resolves: OPENJDK-4543
- Resolves: OPENJDK-4550
- Resolves: OPENJDK-4653
- Resolves: OPENJDK-4631
- Resolves: OPENJDK-4606
- Resolves: OPENJDK-4676</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4887</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4887
- Resolves: OPENJDK-4888
- Resolves: OPENJDK-4889
- Resolves: OPENJDK-4890</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.11.0.10-2.0" date="1784116800">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4891</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.0" date="1784116801">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.0" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786104000">- Automatically set pkgos when necessary
- Remove now redundant pkgos usage in JDK build dependency
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5045
- Resolves: OPENJDK-5046</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-3.0" date="1786363200">- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- Related: OPENJDK-5045</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.0" date="1786363201">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Fix double '%' in specification of IcedTea sources
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: OPENJDK-5042</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10</changelog>
</package>
<package pkgid="0a6431409e41fa0cbf0e921b229fb93e7eff1d020bcece3a459b21391454b435" name="java-21-openjdk-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="6af5807fd3db3f143d5585f1ddec42cb28aadc601748c68b69df497764fd4456" name="java-21-openjdk-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="d403dfa91ab47929b8d2baa07c04a36166e2475c30c44c9a14f83663a988d124" name="java-21-openjdk-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="7d78feede0b752b2600dd6aa8c5292cdaf91920b3632929f6407c1d270c8f128" name="java-21-openjdk-src" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="9937e51ebcdcafcf45ab298d4dd60f03a4969cbc97ee16d5b843e1bc16e9474c" name="java-21-openjdk-src" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="de08fefc3191cc4eddc60bb2239155d329f6b7c6c7f0f931590a5267f94af5ec" name="java-21-openjdk-src" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="07fbd0eb0a2651223cb1a7788dfec42b886f7bfaf92aad2a1184bd8a03edb9ea" name="java-21-openjdk-src-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="8c4449e6c154a421c5e8b274acbd40c8ba042c0f84fddfbdd89c289f884f8f80" name="java-21-openjdk-src-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="9eed583cbdad4a4d5353e6d0abce17e1e492cc3310bfb5404ff6078fef1e7cb0" name="java-21-openjdk-src-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="310dbe63755b4fe1e30281713c7bab7aaf68deb67d30636901d2148b3ed7cef7" name="java-21-openjdk-src-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="6665c8a3a98a77be0882440401100ef8ba52f91e02ea4e12815868c877dabcc5" name="java-21-openjdk-src-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="701162fe94cd292390a8fcedde99ece62d40846f0bb12899d743f5c0d2a8fac9" name="java-21-openjdk-src-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="6aa038ded6af9fbd95fac6ccc8656e1cfc60f104b6439d9dc7ad0d17ceb41f57" name="java-21-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="83501e077440b9a621ca3e9c06a036111f4176d2bcae3b7da0217fdf0d09a035" name="java-21-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="33d12b999a7214c51bfeda868e29e437b715bf59952dfcbb0984134733b37842" name="java-21-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="ce27e9407c20d020daa74c7b3ebe3e85d62bedd3154c75a3bf211d29b26cf762" name="java-21-openjdk-static-libs-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="bf207aaa827c1304b063108127dee803d998e46f6d289041fe027deb801b0a68" name="java-21-openjdk-static-libs-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="d95c48137931da7a3756b8118228b53947604332942e855e6723c56a543710f0" name="java-21-openjdk-static-libs-fastdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="6e443ac2e966e490b671abb21fdefdd4acf07b1e4e738ff53c89b45b8a2f0df6" name="java-21-openjdk-static-libs-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.11.0.10" rel="2.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.8-0.1.ea" date="1752148800">- Update to jdk-21.0.8+8 (EA)
- Update release notes to 21.0.8+8
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-101803</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.8.0.9-1" date="1752148801">- Update to jdk-21.0.8+9 (GA)
- Update release notes to 21.0.8+9
- Switch to GA mode
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
- Resolves: RHEL-102295</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-1" date="1760702400">- Update to jdk-21.0.9+10 (GA)
- Update release notes to 21.0.9+10
- Bump harfbuzz version to 11.2.0 following JDK-8355528
- Add NEWS corrections from Thomas
- Use double spacing consistently in notes for this release
- Correct 11u release reference to corresponding 21u release as pointed out by Kieran
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
- Resolves: RHEL-118771
- Resolves: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.11.0.10-2" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="3d51b8baab9ab6f5056bbcc82f49e05afefbf31cb3070900938de0a7953064ca" name="java-21-openjdk-static-libs-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.0.8" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.9.0.10-2" date="1760788800">- Bump rpmrelease for CentOS build
- Add scripts to handle tagging of portable-based RPMs
- Related: RHEL-118771
- Related: RHEL-119468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-1" date="1768737600">- Update to jdk-21.0.10+7 (GA)
- Update release notes to 21.0.10+7
- Bump libpng version to 1.6.51 following JDK-8372534
- Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-142857
- Resolves: RHEL-139565
- Resolves: RHEL-131428
- Resolves: RHEL-131441
- Resolves: RHEL-142861
- Resolves: RHEL-142815
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.10.0.7-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-142857
- Related: RHEL-139565
- Related: RHEL-131428
- Related: RHEL-131441
- Related: RHEL-142861
- Related: RHEL-142815</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.0.8-1.2" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="c6618ee787d5cb266bbb485bce075defd5e52ce39577ba331b3fd30d6a300fe6" name="java-21-openjdk-static-libs-slowdebug" arch="x86_64">
  <version epoch="1" ver="21.0.12.1.1" rel="1.2.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-1" date="1776513600">- Update to jdk-21.0.11+10 (GA)
- Update release notes to 21.0.11+10
- Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169611
- Resolves: RHEL-133215
- Resolves: RHEL-146648
- Resolves: RHEL-148326
- Resolves: RHEL-148828
- Resolves: RHEL-157090
- Resolves: RHEL-161216
- Resolves: RHEL-161332
- Resolves: RHEL-169614</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.11.0.10-2" date="1776686400">- Bump release for PQC build
- Related: RHEL-169611</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:21.0.11.0.10-1.3" date="1784376000">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.1" date="1784376001">- Update to jdk-21.0.12+8 (GA)
- Update release notes to 21.0.12+8
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Update tagging scripts to include signature checks and correctly handle gating
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212302
- Resolves: RHEL-212303
- Resolves: RHEL-212304
- Resolves: RHEL-151191
- Resolves: RHEL-212305
- Resolves: RHEL-188872
- Resolves: RHEL-212306
- Resolves: RHEL-212307</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-1.2" date="1784376002">- Bump release for PQC build
- Related: RHEL-212302
- Related: RHEL-212303
- Related: RHEL-212304
- Related: RHEL-151191
- Related: RHEL-212305
- Related: RHEL-188872
- Related: RHEL-212306
- Related: RHEL-212307
- Related: RHEL-151162</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.0.8-2.1" date="1785326400">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.1" date="1786363200">- Update to jdk-21.0.12.1+1 (GA)
- Update release notes to 21.0.12.1+1
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235622</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:21.0.12.1.1-1.2" date="1786536000">- Bump release for PQC build
- Related: RHEL-235622</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:21.0.12.1.1-1.2" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="691835c10dd9e063759885aad52f5a2e3ffa4ebec1ec8e140235a62aa5ea454c" name="java-25-openjdk" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="240bc384e38b759df03a0d2e9ba873257c2580b61e09ed85ec1f2bd67502fea7" name="java-25-openjdk" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="7ba60c1e5cce5deec5fb26b5c53100831e5a28c8c0d93c482dfd8c79bde534dd" name="java-25-openjdk" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="035164a81e587b48f56210689ce08bc823207777fbac0f3835c1847c39672f6a" name="java-25-openjdk-crypto-adapter" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="c42a40453595937dea1c7b3fc7731fa375021bd7e7f21c5e95ed3c0b5b013d93" name="java-25-openjdk-crypto-adapter" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="382c84b969e964d678974edba5fd2a0ef899e6771d26054d8a833c821526f2b5" name="java-25-openjdk-crypto-adapter" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="3beeb9a4ec11a07c2a21f4f83334694a0ae5a1afdd380b9a0ca09103a5963ec1" name="java-25-openjdk-crypto-adapter-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="e82b2fad10cceb6523bea186c478ca2e6c0e24029d6af6e8ed5599c03f046da0" name="java-25-openjdk-crypto-adapter-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="49c4f41e953687211c39b1cf309fcaef39bd7bd81fb99b4b5913e8145f90c9d3" name="java-25-openjdk-crypto-adapter-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="8f75599af654d0b28243da0082e8dc024b60f2fe72159eaa45ca4d83080261ae" name="java-25-openjdk-crypto-adapter-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="63cf47b28be371e1ff0137e88174d88dde9553d2a0e2397ab0a566cb66251e41" name="java-25-openjdk-crypto-adapter-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="1e67c269a5a57a4dc0ea846505ee65eddb7f6d9b6c531317471d5d8a5c62a4ad" name="java-25-openjdk-crypto-adapter-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="3d1ebaf06804a299b44cf1f2f7e2a7e76c51b3877ffb876e8b1c8d49bbdfad86" name="java-25-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="e2e5224e9d4458d0a9321c63b873101c367ec71191cb736dc3c2fce472ac7a41" name="java-25-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="005957c1d311cbd92bc9878aab4e2b58b89edb6b659105a83529feda0e90194c" name="java-25-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="7511152f2a874506f14109767d5ee57355f891074562cd7cc5806617b1ee8db2" name="java-25-openjdk-demo-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="02f37b9d74f3e419927f150f3c5684d90498171945f88b3baec7fd02862fee42" name="java-25-openjdk-demo-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="85ce5fdf45d44b3a80630e6d8c45624038b69349fe1b29199dd71834caaf3131" name="java-25-openjdk-demo-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="56389a910c7b4ed111694baa3dd9f4d9c87492fee539cbe77ada180e91dac8f3" name="java-25-openjdk-demo-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="40adade00fbddb9a3554ca4953db942409312d3c7042471d4b533c7f27c4df25" name="java-25-openjdk-demo-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="46dbeda4fe96c98372956b3bdb6ac072fe0cab45c0b607297cdc41556908bb3b" name="java-25-openjdk-demo-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="630428005a08f22f6bd5c605fb3ec22ea7f9446a76da1993030833ddafc0244d" name="java-25-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="5de6cc7386724d1f721b5b5e7b256118e9b0395f5a592db9ea2c6d973edc985a" name="java-25-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="ef30c14c935257eceaf55b00707f29ee2f634b0b13c83dc9540a0908f8db5633" name="java-25-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="650deb00fda4874a3f1c8dcc44a69888ac2c8dd9a5ed1f8df42f8e0645193b9a" name="java-25-openjdk-devel-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="074a33cf1e989a21f85c9c01c90215577936d504a2f9cc03dabb4573d720de8c" name="java-25-openjdk-devel-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="7400b72ac14e231d9781e97590dc16308b4121cce56b97dcbf861dcde474c822" name="java-25-openjdk-devel-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="4d004ed50f95030a390428a9b4826850ee8e04b94473e5fbde1f620c36a287bc" name="java-25-openjdk-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="b1fade3735ebb4a31a26824098aef3f6c4906ad5f38aeecc623ac762ec31231e" name="java-25-openjdk-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="0ca96b843ace9fbe9023c1efd92a430e8b2f54854b55338b013e0f076f087622" name="java-25-openjdk-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="34c42652ef18a940d3cdd97dbf885158d1b8540bac73f989ffbc6ab077197e9a" name="java-25-openjdk-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="a5831d89f36ffdf47b000d971fb4d551fa85d564e66bbe876520c67671b7aa48" name="java-25-openjdk-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="962ae5958d4d9b2c6aae07593ca17bdba9577ceeca691fffb219aa069397d419" name="java-25-openjdk-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="32acd2e8b5cd09bd619c41736f4279241d4cf2d933da396524d439c619816878" name="java-25-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="2b45d950a12f37ef8c0d97f0a022d423e509959767ab8c7180fd340ebf93963b" name="java-25-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="08e0ea2015ca1f6ead77e8ae0beede297859ae8bfed9ec6315c934e4df189fbc" name="java-25-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="c0ba374a0e07e2d8cc4d94f981d84af76e2746bfcb8649598823a141525ed307" name="java-25-openjdk-headless-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="f155e26a520922f67d16f06f727fc51cf2b5c4b13c4eceb61656090164c9e5eb" name="java-25-openjdk-headless-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="f6c6ff391aaf7f1f1f89f3657290c6d346b46072c7553e57cbfbc827c08cdf11" name="java-25-openjdk-headless-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="cb27d7b527035b19f12968a7146e02ed6e27d9f07a92e87c2611b6db55e3194a" name="java-25-openjdk-headless-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="610a77d8c6442e067e56a317099bb8282b87f91dbe24b13a6d064173d4fc708d" name="java-25-openjdk-headless-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="60fc24d02b5dc66e0f635e45cb3c79b4e3909816263b83bc1dbb3d40f2575a96" name="java-25-openjdk-headless-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="e079d313207008e3451d1faa77a143eae16e76bacdac9f1e37adcb70a2a1dae1" name="java-25-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="b462e409deaeb725ecf3140252d0d814d172193af110c3e11ff405f88fd15beb" name="java-25-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="3fdf921988e0d1026592eadea9cb2be4fb22540d726c906a1ac50c1a16b9656b" name="java-25-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="a821f10784533a1a20c95ea6b0af2cff5c059561b3b0b1d507b88e1af8e2fbcc" name="java-25-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="0d0fb0604edb71de1890aeb1ce61aa381bc5444f534e37dff70dd10d23cf8f38" name="java-25-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="aa9faad5b97c31442041d6555fd100507eed968fb5be753b250224747bc7dee2" name="java-25-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="b3e5e09adbc098a4aabdf5d25e062283fad967f18e7d217b645c803dee617490" name="java-25-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="290d93fa0db6b1cf33139a1f5e6dd6aca73fe08fdc76cb87140f4d7eb596f637" name="java-25-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="5599da99d25f44f324dfb8d2d5e0775cdcb3b49979ca19c8850a59a721a6d5ff" name="java-25-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="d68a4192ac155dd90d0d0eae7e3752a1a7cc82b8481c6d37e87792c3f851af75" name="java-25-openjdk-jmods-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="35665a85d69bc196faa4e712e7d4a6444836a6b55396240f008c57314eb48d3b" name="java-25-openjdk-jmods-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="21c1f5d56917d3d43192c55368bc66f8c60b8cbeeef39b10ad287cb118005091" name="java-25-openjdk-jmods-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="c27bbf050a87a00ed40f39fb74c35d54006b79a24cb55292ea4e164662b25176" name="java-25-openjdk-jmods-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="c3fd8b763f9ac97e4d6e6fa3605126a944b2b5a42a49435119b17b624a544516" name="java-25-openjdk-jmods-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="f8b7e6303e66b7bfc1aeba758a2de6ff91766bcc43375620ad1d32384c7a08c4" name="java-25-openjdk-jmods-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="57abc404df6e9f4e10dd23de7f6aff998ec08860e5ade394609844e97852e9a1" name="java-25-openjdk-portable" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.0.0.36-2" date="1762776000">- Drop fakefeaturever and rebuild with ourselves now we have reached OpenJDK 25
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-1" date="1762776001">- Update to jdk-25.0.1+8 (GA)
- Update release notes to 25.0.1+8
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676800">- Incorporate new FIPS patch for 25u
- Resolves: OPENJDK-4184</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676801">- Switch from static-libs-image to static-libs-graal-image to avoid large unneeded libjvm.a
- Resolves: OPENJDK-4197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="fec5bb68588f78844c5bb3083e664409fd1bccd5efec80f78bacd8615ea5c1fd" name="java-25-openjdk-portable" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.0.el9" date="1784894400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="0bdd4c7febd50956357769ccb9c3c2aa5d9472d2f1254e2dfc3693f7ce7ae542" name="java-25-openjdk-portable" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.0" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.4.0.7-3.0" date="1786104000">- Automatically set pkgos when necessary
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5030
- Resolves: OPENJDK-5031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.0" date="1786104001">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="1753e3b45e9c23e9c1c1689c8807031bb53c8714e621b9614b71e30ff39286c4" name="java-25-openjdk-portable-devel" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.0.0.36-2" date="1762776000">- Drop fakefeaturever and rebuild with ourselves now we have reached OpenJDK 25
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-1" date="1762776001">- Update to jdk-25.0.1+8 (GA)
- Update release notes to 25.0.1+8
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676800">- Incorporate new FIPS patch for 25u
- Resolves: OPENJDK-4184</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676801">- Switch from static-libs-image to static-libs-graal-image to avoid large unneeded libjvm.a
- Resolves: OPENJDK-4197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="8559bea2133eb4249f132338174b6763e768165bb82c519829a6c654eca0dcb5" name="java-25-openjdk-portable-devel" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.0.el9" date="1784894400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="0b551d17eb3792ab7143f3ae59415e4b30bbac8c55e91556d647f14681135518" name="java-25-openjdk-portable-devel" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.0" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.4.0.7-3.0" date="1786104000">- Automatically set pkgos when necessary
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5030
- Resolves: OPENJDK-5031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.0" date="1786104001">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="d42f67118215dc420dc4a8f5f8e0dbca00d48a224d62a4948ca987413783956a" name="java-25-openjdk-portable-devel-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.0.0.36-2" date="1762776000">- Drop fakefeaturever and rebuild with ourselves now we have reached OpenJDK 25
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-1" date="1762776001">- Update to jdk-25.0.1+8 (GA)
- Update release notes to 25.0.1+8
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676800">- Incorporate new FIPS patch for 25u
- Resolves: OPENJDK-4184</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676801">- Switch from static-libs-image to static-libs-graal-image to avoid large unneeded libjvm.a
- Resolves: OPENJDK-4197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="819118540d7e886e136e4f112b2ffa094e7795532c68e5e030c4911937fb2d86" name="java-25-openjdk-portable-devel-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.0.el9" date="1784894400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="b0ffd484508354077b63bf3e4c4afd1b421a4eecb0acce202bdc28281af62ef7" name="java-25-openjdk-portable-devel-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.0" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.4.0.7-3.0" date="1786104000">- Automatically set pkgos when necessary
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5030
- Resolves: OPENJDK-5031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.0" date="1786104001">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="6b3280d8c917d4e68dda9313f5ce900574ce486849021c07f6d2c647b4c95fc2" name="java-25-openjdk-portable-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.0.0.36-2" date="1762776000">- Drop fakefeaturever and rebuild with ourselves now we have reached OpenJDK 25
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-1" date="1762776001">- Update to jdk-25.0.1+8 (GA)
- Update release notes to 25.0.1+8
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676800">- Incorporate new FIPS patch for 25u
- Resolves: OPENJDK-4184</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676801">- Switch from static-libs-image to static-libs-graal-image to avoid large unneeded libjvm.a
- Resolves: OPENJDK-4197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="387286cc57077c9ca60c200356dc253b03a3223957192a9019025a1f90936dee" name="java-25-openjdk-portable-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.0.el9" date="1784894400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="c83cd9918e9f8ce5c6fcd941eb31c42719486fecd379a838dfefdf6b78f0647f" name="java-25-openjdk-portable-devel-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.0" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.4.0.7-3.0" date="1786104000">- Automatically set pkgos when necessary
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5030
- Resolves: OPENJDK-5031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.0" date="1786104001">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="eea0199d3c03e1a6fc1c6df0e4a1e9cebdbc4f3ce05afebe9015a17ea6df7c54" name="java-25-openjdk-portable-docs" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.0.0.36-2" date="1762776000">- Drop fakefeaturever and rebuild with ourselves now we have reached OpenJDK 25
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-1" date="1762776001">- Update to jdk-25.0.1+8 (GA)
- Update release notes to 25.0.1+8
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676800">- Incorporate new FIPS patch for 25u
- Resolves: OPENJDK-4184</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676801">- Switch from static-libs-image to static-libs-graal-image to avoid large unneeded libjvm.a
- Resolves: OPENJDK-4197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="c8e4d99344e1a3a6d0c51eae2c7dd302879b97b08443738003313ee25ac86a26" name="java-25-openjdk-portable-docs" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.0.el9" date="1784894400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="e1ff89ed123ad56b28da4bd51ad49fd24f966bbfb29f937f392da5e6b2d82d24" name="java-25-openjdk-portable-docs" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.0" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.4.0.7-3.0" date="1786104000">- Automatically set pkgos when necessary
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5030
- Resolves: OPENJDK-5031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.0" date="1786104001">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="19de18cd64aa7035a698e382c98d34df33f2e3069f32bd11c260a20d4248288a" name="java-25-openjdk-portable-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.0.0.36-2" date="1762776000">- Drop fakefeaturever and rebuild with ourselves now we have reached OpenJDK 25
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-1" date="1762776001">- Update to jdk-25.0.1+8 (GA)
- Update release notes to 25.0.1+8
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676800">- Incorporate new FIPS patch for 25u
- Resolves: OPENJDK-4184</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676801">- Switch from static-libs-image to static-libs-graal-image to avoid large unneeded libjvm.a
- Resolves: OPENJDK-4197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="0f8af51673ff006929ef453ee081b502dd473b0c57c4ba81b189ab576150e3bf" name="java-25-openjdk-portable-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.0.el9" date="1784894400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="d557fe5e1256a4f008d13666c7887c4a872fc2fee483bc265108fb947b6255ad" name="java-25-openjdk-portable-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.0" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.4.0.7-3.0" date="1786104000">- Automatically set pkgos when necessary
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5030
- Resolves: OPENJDK-5031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.0" date="1786104001">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="bd8b96055928321da4e93913ce40b1d87e0453776a74ae6a6c1b8723b502e1cb" name="java-25-openjdk-portable-misc" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.0.0.36-2" date="1762776000">- Drop fakefeaturever and rebuild with ourselves now we have reached OpenJDK 25
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-1" date="1762776001">- Update to jdk-25.0.1+8 (GA)
- Update release notes to 25.0.1+8
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676800">- Incorporate new FIPS patch for 25u
- Resolves: OPENJDK-4184</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676801">- Switch from static-libs-image to static-libs-graal-image to avoid large unneeded libjvm.a
- Resolves: OPENJDK-4197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="d3505e2f73da42087677b585c448369639a5fb9ccaa92091d17630080c6cf37e" name="java-25-openjdk-portable-misc" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.0.el9" date="1784894400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="75e5e1c6299c17e5f3beea9a34dd861e431bef33150c9498d50c880c1415fdc0" name="java-25-openjdk-portable-misc" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.0" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.4.0.7-3.0" date="1786104000">- Automatically set pkgos when necessary
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5030
- Resolves: OPENJDK-5031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.0" date="1786104001">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="ef094646d0a7fcb9999408118f6e3fdc7827d103dc2cfb67a3a2241481d7abca" name="java-25-openjdk-portable-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.0.0.36-2" date="1762776000">- Drop fakefeaturever and rebuild with ourselves now we have reached OpenJDK 25
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-1" date="1762776001">- Update to jdk-25.0.1+8 (GA)
- Update release notes to 25.0.1+8
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676800">- Incorporate new FIPS patch for 25u
- Resolves: OPENJDK-4184</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676801">- Switch from static-libs-image to static-libs-graal-image to avoid large unneeded libjvm.a
- Resolves: OPENJDK-4197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="3bc3f6b2a3de60b2cb18be57c9eb5579575fafbfbd357301bc9b28ffa77517ff" name="java-25-openjdk-portable-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.0.el9" date="1784894400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="c63f8ce9eaa6d5ac95f74ecf4c1ba2927c00f4a059c25ef41f257fb65ff5627b" name="java-25-openjdk-portable-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.0" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.4.0.7-3.0" date="1786104000">- Automatically set pkgos when necessary
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5030
- Resolves: OPENJDK-5031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.0" date="1786104001">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="fa461d6f4a0a90ce749f27e0d20aba0039d86e052e87dcac7463f8500b13cdeb" name="java-25-openjdk-portable-static-libs" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.0.0.36-2" date="1762776000">- Drop fakefeaturever and rebuild with ourselves now we have reached OpenJDK 25
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-1" date="1762776001">- Update to jdk-25.0.1+8 (GA)
- Update release notes to 25.0.1+8
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676800">- Incorporate new FIPS patch for 25u
- Resolves: OPENJDK-4184</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676801">- Switch from static-libs-image to static-libs-graal-image to avoid large unneeded libjvm.a
- Resolves: OPENJDK-4197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="2036b1ccde5a3ee12562b08de8592d902c0c1f43dc82a3f547187b7cef9a0862" name="java-25-openjdk-portable-static-libs" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.0.el9" date="1784894400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="c367b59afd8183a68c879a86985c137205395d89b405898b4e15b015b6e87026" name="java-25-openjdk-portable-static-libs" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.0" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.4.0.7-3.0" date="1786104000">- Automatically set pkgos when necessary
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5030
- Resolves: OPENJDK-5031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.0" date="1786104001">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="6a5bc4c8a9afa646defce485d21cd800e9ce8997289e87d798d6f61ddf12e8f7" name="java-25-openjdk-portable-static-libs-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.0.0.36-2" date="1762776000">- Drop fakefeaturever and rebuild with ourselves now we have reached OpenJDK 25
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-1" date="1762776001">- Update to jdk-25.0.1+8 (GA)
- Update release notes to 25.0.1+8
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676800">- Incorporate new FIPS patch for 25u
- Resolves: OPENJDK-4184</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676801">- Switch from static-libs-image to static-libs-graal-image to avoid large unneeded libjvm.a
- Resolves: OPENJDK-4197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="fb7ee212b764c7eb22b4e318c8a38d30c446152edae1629c10e9108000412d56" name="java-25-openjdk-portable-static-libs-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.0.el9" date="1784894400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="2b2a77cc5bbdc761ece297b72b20e37a712e3bb56e9afc72f47cd837cb1b2949" name="java-25-openjdk-portable-static-libs-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.0" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.4.0.7-3.0" date="1786104000">- Automatically set pkgos when necessary
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5030
- Resolves: OPENJDK-5031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.0" date="1786104001">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="1c6f8d86051a4fb42b14fa1e39f5413b639c8716babdcc962f43c17695bdf4d3" name="java-25-openjdk-portable-static-libs-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.0.0.36-2" date="1762776000">- Drop fakefeaturever and rebuild with ourselves now we have reached OpenJDK 25
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-1" date="1762776001">- Update to jdk-25.0.1+8 (GA)
- Update release notes to 25.0.1+8
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676800">- Incorporate new FIPS patch for 25u
- Resolves: OPENJDK-4184</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676801">- Switch from static-libs-image to static-libs-graal-image to avoid large unneeded libjvm.a
- Resolves: OPENJDK-4197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="a072a6bc448a211a36388943fd27ef24c1207d56456b392b53dc4e7ee25e3660" name="java-25-openjdk-portable-static-libs-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.0.el9" date="1784894400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="6822663ea5b41094d9c87b7fff4428dd12542b4518a60e1e23b7d108c4dd6b3c" name="java-25-openjdk-portable-static-libs-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.0" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.4.0.7-3.0" date="1786104000">- Automatically set pkgos when necessary
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5030
- Resolves: OPENJDK-5031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.0" date="1786104001">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="8a5c1a4257cdcb5ddaa3337dcf0f0960508101dfa9cde17505c04859b57ded50" name="java-25-openjdk-portable-unstripped" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.0.0.36-2" date="1762776000">- Drop fakefeaturever and rebuild with ourselves now we have reached OpenJDK 25
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-1" date="1762776001">- Update to jdk-25.0.1+8 (GA)
- Update release notes to 25.0.1+8
- Related: RHELBU-3203</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676800">- Incorporate new FIPS patch for 25u
- Resolves: OPENJDK-4184</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:25.0.1.0.8-2" date="1764676801">- Switch from static-libs-image to static-libs-graal-image to avoid large unneeded libjvm.a
- Resolves: OPENJDK-4197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1.el9" date="1777118401">- Add EL10+ specific functions</changelog>
</package>
<package pkgid="9d07819a981148b432baa735f350e9fcd927ebc281240617f42e76e788ec56bc" name="java-25-openjdk-portable-unstripped" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add test to ensure blocked.certs is valid (OPENJDK-4362)
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: OPENJDK-4359
- Resolves: OPENJDK-4362</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1768219201">- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Add CVEs for 25.0.2 to NEWS
- Correct version and date for this upcoming release in NEWS
- Related: OPENJDK-4359</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Resolves: OPENJDK-4570
- Resolves: OPENJDK-4304
- Resolves: OPENJDK-4524
- Resolves: OPENJDK-4544
- Resolves: OPENJDK-4553</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.0.el9" date="1784894400">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="087c71147449c83799800e27a951d51b2c0f2396045945630e9e0f9f140821d8" name="java-25-openjdk-portable-unstripped" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.0.el10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: OPENJDK-4634
- Resolves: OPENJDK-4656
- Resolves: OPENJDK-4607
- Resolves: OPENJDK-4675</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.3.0.9-2" date="1782475200">- Redeclared ForFiles release sections as %nil no longer works with %1
- RPM 4.19 no longer accept our double percentaged %{nil} passed to %{1}
- so we have to pass in "" but evaluate it, otherwise files record will include it
- Resolves: OPENJDK-4872</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-2.0" date="1782475201">- Port ForFiles patch to RHEL and update to use standard function naming format
- Remove macro references in comments where possible (- Drop unused tagsuffix line which causes issues on older RPM versions without - Cleanup RPM only macros unused in the portable spec file
- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Related: OPENJDK-4872
- Resolves: OPENJDK-4873
- Resolves: OPENJDK-4875
- Resolves: OPENJDK-4876</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1782993600">- Strip %{dist} more thoroughly
- Resolves: OPENJDK-4881</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.0" date="1783944000">- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Resolves: OPENJDK-4885</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: OPENJDK-4865
- Resolves: OPENJDK-4902</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.0" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Related: OPENJDK-4865</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1:25.0.4.0.7-3.0" date="1786104000">- Automatically set pkgos when necessary
- Don't attempt to use devkit on riscv64
- Resolves: OPENJDK-5030
- Resolves: OPENJDK-5031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.0" date="1786104001">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Make rhel usage in pkgos optional as it may be undefined
- Simplify pkgos conditional to work on RHEL 8
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.0.el9" date="1787227200">- Build for Rocky Linux 10
- Ensure security properties are using old one</changelog>
</package>
<package pkgid="54f577ec3d16b38435d6d8cf1b984a3f8cbe3a53978e5158dc7919325fcd43e5" name="java-25-openjdk-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="d8c28e4e3e3ec0cd950c3a00bd79da27e85eb6ac70fd2b49913045acb64e7abb" name="java-25-openjdk-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="af211f753747be3b4fed81b18eb0912b5d05af9edb54aa975838ffd3e16879bc" name="java-25-openjdk-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="ef7c81ef0112b029d029136e1eb9492cfd4d928eb9db8ffac8b453874903773b" name="java-25-openjdk-src" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="9d96f475854d7689e71e646fcb923f3bf7dc15dbc2fed04df30ca0f250e46010" name="java-25-openjdk-src" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="6a8277cdb35de04ef505861832cc23edce510df6c97c52877606ea6c6f1ad136" name="java-25-openjdk-src" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="4693e6b07c74722aa677eb264a70fae0e908304180040cd160b97a8f3030864d" name="java-25-openjdk-src-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="7c96c674c51dd3e306ecb3150e0090b93d8f575b004745b6f871385ccc1a1f42" name="java-25-openjdk-src-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="7d9bbcce420b44ae8a9dbae45d0f73577d92116d520fd9dc7014065be2a236ed" name="java-25-openjdk-src-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="7927fa59dd7c892727322ae29f5f25a3de58e7320ecc678a92f08662adb6aaeb" name="java-25-openjdk-src-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="366e1388cd69d37d9d8298c3e29eeffac09e094fcae6b207fba699a011519db4" name="java-25-openjdk-src-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="537ab573811b6ed89c21b62049ae6863266a7d2ceae3fb349838487137ebe184" name="java-25-openjdk-src-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="c8c1d8cc9b53e810bc790ce365a73cf18a1d5a2d3aec87163c50c5c6f1e6e60f" name="java-25-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="2595301724d0e87adcc01afe70719b1c8c9020e37a1532f01f211d43fe0cedd7" name="java-25-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="a516f245d3c7c29757c2f4061f462b4f392c93349e52805489e47686d7f70930" name="java-25-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="2a22a35424212b209f5521c122d249c7152bfb25dad5e072b375ad1f5b6a39d9" name="java-25-openjdk-static-libs-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="4a9dffe306ee80315e44b09eac153ffb01d2ea29f16dac213b923b6414d6ebc6" name="java-25-openjdk-static-libs-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="8b2b9d565e0450d81b44d4edd383ae7343afe8f8343868d1166ed8702ed958f9" name="java-25-openjdk-static-libs-fastdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="6e381af9bb5446d6a31d7522ccab912f351cbeb58f062185b32ce1f392e53730" name="java-25-openjdk-static-libs-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.3.0.9" rel="1.el10_1"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.1.0.8-6" date="1765022400">- Sync the copy of the portable specfile with the latest update
- Related: RHEL-133733
- Related: RHEL-133735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768219200">- Update to jdk-25.0.2+10 (GA)
- Update release notes to 25.0.2+10
- Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
- Bump libpng version to 1.6.51 following JDK-8372534
- Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
- Test for java.security's existence in create-redhat-properties-files.bash
- Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
- Resolves: RHEL-139579
- Resolves: RHEL-131430
- Resolves: RHEL-131443
- Resolves: RHEL-142855
- Resolves: RHEL-142799</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118400">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.3.0.9-1" date="1777118401">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="7fde0476d62b555a2990091ef13d527bd11ef81f62f44d9a6ec8803e2051777c" name="java-25-openjdk-static-libs-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.0.7" rel="1.1.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:25.0.2.0.10-1" date="1768996800">- Execute create-redhat-properties-files.bash with '-e' to exit on failure
- Related: RHEL-142855</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-2" date="1771416000">- Bump rpmrelease for CentOS build
- Related: RHEL-139579
- Related: RHEL-131430
- Related: RHEL-131443
- Related: RHEL-142855
- Related: RHEL-142799</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.0" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980800">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.0.7-1.1" date="1784980801">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="6afc20eb91eeab974478e3bd05995bad4dbc27cd511dbd11e63dcd625eee7533" name="java-25-openjdk-static-libs-slowdebug" arch="x86_64">
  <version epoch="1" ver="25.0.4.1.1" rel="1.1.el10_2"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-3" date="1772539200">- Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown
- Fix FIPS issue list to represent the new 25u version
- Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3
- Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3
- Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3
- Bump libpng version to 1.6.55 following JDK-8375063 &amp; JDK-8377526
- Bump harfbuzz version to 12.3.2 following JDK-8375057
- Bump nssadapter version to bring in shared PKCS11 session fix
- Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1
- Resolves: RHEL-155000
- Resolves: RHEL-146649
- Resolves: RHEL-148327
- Resolves: RHEL-148830
- Resolves: RHEL-155044</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:25.0.2.0.10-3" date="1773230400">- Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm
- See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1
- Resolves: RHEL-150976</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.2.0.10-4" date="1773316800">- Add tagging scripts with signature checks and gating handling
- Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z &amp; 10.3.
- Add gating scripts to simplify obtaining results and waiving issues
- Sync the copy of the portable specfile with the latest update
- Resolves: RHEL-155327
- Resolves: RHEL-155337
- Resolves: RHEL-155339
- Related: RHEL-155000
- Related: RHEL-146649
- Related: RHEL-148327
- Related: RHEL-148830</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-1" date="1776513600">- Update to jdk-25.0.3+9 (GA)
- Update release notes to 25.0.3+9
- Update FIPS patch to 57722aab802 version synced with 25.0.3+8
- Drop local libpng patches now JDK-8372534, JDK-8375063 &amp; JDK-8377526 are included upstream
- Drop local HarfBuzz patch now JDK-8375057 is included upstream
- Bump freetype version to 2.14.2 following JDK-8373290 &amp; JDK-8379158
- Bump giflib version to 6.1.2 following JDK-8379256 &amp; JDK-8380078
- Bump libpng version to 1.6.57 following JDK-8380959 &amp; JDK-8382047
- Bump zlib version to 1.3.2 following JDK-8378631
- Bump tzdata version to 2026a following JDK-8379035
- Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-04-21 @ 1pm PT. **
- Resolves: RHEL-169620
- Resolves: RHEL-157091
- Resolves: RHEL-161217
- Resolves: RHEL-161333
- Resolves: RHEL-169613</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.3.0.9-3.1" date="1784030400">- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 &amp; JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-1.1" date="1784203200">- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 &amp; JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.0.7-2.1" date="1784808000">- Add CVEs to NEWS file
- Update to tarball with final changeset ID
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-188883</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:25.0.4.1.1-1.1" date="1786104000">- Update to jdk-25.0.4.1+1 (GA)
- Update release notes to 25.0.4.1+1
- Report pkgos value during build
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-08-18 @ 1pm PT. **
- Resolves: RHEL-235627</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227200">- Build for Rocky Linux 10 using our own portable</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1:25.0.4.1.1-1.1" date="1787227201">- Add riscv64 to debug_arches</changelog>
</package>
<package pkgid="f131d4ed211f56096d5566a6d0ba8657217553afdbdefb8103f9b9e03e094a01" name="java_cup" arch="noarch">
  <version epoch="1" ver="0.11b" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-24" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.11b-25" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.11b-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.11b-29" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.11b-29" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52689</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.11b-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b870013223ed6a8f29dd99300ff794fece2c3668796014bec4bcb1b2026f7c60" name="java_cup-javadoc" arch="noarch">
  <version epoch="1" ver="0.11b" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-24" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.11b-25" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.11b-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.11b-29" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.11b-29" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52689</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.11b-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="43608a1a1662c5ea5b261cc4d1bc95350a15d46da89777ea7fc6fcf257c2e7cb" name="java_cup-manual" arch="noarch">
  <version epoch="1" ver="0.11b" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-24" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.11b-25" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.11b-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.11b-29" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.11b-29" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52689</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:0.11b-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9049c497e623ccbee8db9ac980972c75528f91b88e09efafadd0324fef3edb40" name="javacc" arch="noarch">
  <version epoch="0" ver="7.0.13" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.12-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.12-3" date="1693051200">- Bootstrap using javapackages-bootstrap</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.12-4" date="1693569600">- Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0:7.0.13-1" date="1700222400">- Update to 7.0.13
- Drop upstreamed duplicated @Deprecated annotations patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:7.0.13-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:7.0.13-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.13-5" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52716</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:7.0.13-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dce8f2c9a756b8ebab40b834ae14d3e75e0b6cdeff51c0c51615ef9170ba46ff" name="javacc-demo" arch="noarch">
  <version epoch="0" ver="7.0.13" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.12-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.12-3" date="1693051200">- Bootstrap using javapackages-bootstrap</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.12-4" date="1693569600">- Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0:7.0.13-1" date="1700222400">- Update to 7.0.13
- Drop upstreamed duplicated @Deprecated annotations patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:7.0.13-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:7.0.13-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.13-5" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52716</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:7.0.13-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ad965517b2513cb701f1444da8d7b3a74a537b439afa9a4b8052d09fd279f145" name="javacc-javadoc" arch="noarch">
  <version epoch="0" ver="7.0.13" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.12-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.12-3" date="1693051200">- Bootstrap using javapackages-bootstrap</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.12-4" date="1693569600">- Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0:7.0.13-1" date="1700222400">- Update to 7.0.13
- Drop upstreamed duplicated @Deprecated annotations patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:7.0.13-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:7.0.13-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.13-5" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52716</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:7.0.13-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="83a2d9b43c164f9ee2dfe527c4419a41664d21b9019262f2fc0935ad4e553bb8" name="javacc-manual" arch="noarch">
  <version epoch="0" ver="7.0.13" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.12-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.12-3" date="1693051200">- Bootstrap using javapackages-bootstrap</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.12-4" date="1693569600">- Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0:7.0.13-1" date="1700222400">- Update to 7.0.13
- Drop upstreamed duplicated @Deprecated annotations patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:7.0.13-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:7.0.13-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.13-5" date="1722859200">- Adjust bootstrap build for javapackages-bootstrap update
- Resolves: RHEL-52716</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0:7.0.13-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cae9e7fa441388e7222f568533d118d9a6b521835c74419cb428c576682a2490" name="javacc-maven-plugin" arch="noarch">
  <version epoch="0" ver="3.0.1" rel="9.el10"/>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.0.1-1" date="1680091200">- Version 3.0.1
- Convert License tag to SPDX</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.0.1-1" date="1689768000">- Add bootstrap mode to break a dependency loop</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.1-3" date="1693051200">- Bootstrap using javapackages-bootstrap</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.1-4" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.1-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.1-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.1-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="37d1db2635ffba85f8a4eaa20b5ae57e09ab6a1acea4a2c90ee4c05bbfe623ad" name="javacc-maven-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.0.1" rel="9.el10"/>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.0.1-1" date="1680091200">- Version 3.0.1
- Convert License tag to SPDX</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.0.1-1" date="1689768000">- Add bootstrap mode to break a dependency loop</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.1-3" date="1693051200">- Bootstrap using javapackages-bootstrap</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.1-4" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.1-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.1-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.1-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="84e3afbf2a54b6d373c4e5cb9d8b43436d30bbfbcfc7f18f953e9684ee54818b" name="javapackages-bootstrap" arch="x86_64">
  <version epoch="0" ver="1.20.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.15.0-1" date="1707307200">- Update to upstream version 1.15.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.16.0-1" date="1708344000">- Update to upstream version 1.16.0
- Switch from Java 17 to Java 21</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.16.0-2" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.0-3" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.16.0-4" date="1721822400">- Put private JAR files outsides of javadir/jnidir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.17.0-1" date="1722427200">- Update to upstream version 1.17.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.0-2" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.17.0-3" date="1737028800">- Define java_home macro</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.20.0-1" date="1737028801">- Update to upstream version 1.20.0</changelog>
</package>
<package pkgid="bbf671fa3561163cbaa268848d84b4f76408edd3229cef4bba172f6ee90222d2" name="javapackages-common" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="1.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.2.0-4" date="1695211200">- Add support for OpenJDK 21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.2.0-5" date="1697716800">- Backport upstream patch to fix Flatpak builds</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 6.2.0-6" date="1700481600">- Fix flatpak builds of Java packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.0-7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.0-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.0-10" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.2.0-10" date="1722859200">- Switch to OpenJDK 21 as default JDK/JRE
- Drop generated Requires on JRE
- Drop subpackages related to Java other than 21
- Resolves: RHEL-49822, RHEL-51276, RHEL-51276</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1734523200">- Update to upstream version 6.4.0</changelog>
</package>
<package pkgid="d152257cbbd37f4a44fbea0672e00f15bbc198940d1b3d14d6a64b3f9f73921d" name="javapackages-compat" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="1.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.2.0-4" date="1695211200">- Add support for OpenJDK 21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.2.0-5" date="1697716800">- Backport upstream patch to fix Flatpak builds</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 6.2.0-6" date="1700481600">- Fix flatpak builds of Java packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.0-7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.0-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.0-10" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.2.0-10" date="1722859200">- Switch to OpenJDK 21 as default JDK/JRE
- Drop generated Requires on JRE
- Drop subpackages related to Java other than 21
- Resolves: RHEL-49822, RHEL-51276, RHEL-51276</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1734523200">- Update to upstream version 6.4.0</changelog>
</package>
<package pkgid="4f0b877e2cd9556920f589493998679afc392543f4272868dd0d6b9c903c1033" name="javapackages-filesystem" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="1.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.2.0-4" date="1695211200">- Add support for OpenJDK 21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.2.0-5" date="1697716800">- Backport upstream patch to fix Flatpak builds</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 6.2.0-6" date="1700481600">- Fix flatpak builds of Java packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.0-7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.0-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.0-10" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.2.0-10" date="1722859200">- Switch to OpenJDK 21 as default JDK/JRE
- Drop generated Requires on JRE
- Drop subpackages related to Java other than 21
- Resolves: RHEL-49822, RHEL-51276, RHEL-51276</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1734523200">- Update to upstream version 6.4.0</changelog>
</package>
<package pkgid="ecc86b5a5979a62ff8f3b887ab804c837a16f8fbb5b485a51844790c26ed7f11" name="javapackages-generators" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="1.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.2.0-4" date="1695211200">- Add support for OpenJDK 21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.2.0-5" date="1697716800">- Backport upstream patch to fix Flatpak builds</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 6.2.0-6" date="1700481600">- Fix flatpak builds of Java packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.0-7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.0-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.0-10" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.2.0-10" date="1722859200">- Switch to OpenJDK 21 as default JDK/JRE
- Drop generated Requires on JRE
- Drop subpackages related to Java other than 21
- Resolves: RHEL-49822, RHEL-51276, RHEL-51276</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1734523200">- Update to upstream version 6.4.0</changelog>
</package>
<package pkgid="c5369189524ba32979b1a77b232bbcc074617e4c5b151daeb4795cdb3f8363c7" name="javapackages-local-openjdk21" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="1.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.2.0-4" date="1695211200">- Add support for OpenJDK 21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.2.0-5" date="1697716800">- Backport upstream patch to fix Flatpak builds</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 6.2.0-6" date="1700481600">- Fix flatpak builds of Java packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.0-7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.0-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.0-10" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.2.0-10" date="1722859200">- Switch to OpenJDK 21 as default JDK/JRE
- Drop generated Requires on JRE
- Drop subpackages related to Java other than 21
- Resolves: RHEL-49822, RHEL-51276, RHEL-51276</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1734523200">- Update to upstream version 6.4.0</changelog>
</package>
<package pkgid="b917428623e1e55f5d83f23d6ba68fb12d497c3e9a0883da47771670f01d3b31" name="javapackages-tools" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="1.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.2.0-4" date="1695211200">- Add support for OpenJDK 21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.2.0-5" date="1697716800">- Backport upstream patch to fix Flatpak builds</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 6.2.0-6" date="1700481600">- Fix flatpak builds of Java packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.0-7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.0-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.0-10" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.2.0-10" date="1722859200">- Switch to OpenJDK 21 as default JDK/JRE
- Drop generated Requires on JRE
- Drop subpackages related to Java other than 21
- Resolves: RHEL-49822, RHEL-51276, RHEL-51276</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.2.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1734523200">- Update to upstream version 6.4.0</changelog>
</package>
<package pkgid="b6ee85c9f0c3650f595a2a41faacf178a6a2e1480691990a74debee11364e171" name="javaparser" arch="noarch">
  <version epoch="0" ver="3.25.6" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.2-1" date="1682164800">- Update to upstream version 3.25.2, closes #2115138</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Markku Korkeala &lt;markku.korkeala@iki.fi&gt; - 3.25.6-1" date="1699704000">- Update to upstream version 3.25.6, resolves rhbz#2192489</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.25.6-2" date="1701691200">- Implement bootstrap mode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.6-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.6-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.25.6-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.25.6-6" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.25.6-6" date="1722859200">- Port to OpenJDK 21
- Resolves: RHEL-52805</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.25.6-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="69b14945607517e68993f1c7dd493c1103cc648ebd7e4eeac0d9bc774a53e281" name="javaparser-javadoc" arch="noarch">
  <version epoch="0" ver="3.25.6" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.2-1" date="1682164800">- Update to upstream version 3.25.2, closes #2115138</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Markku Korkeala &lt;markku.korkeala@iki.fi&gt; - 3.25.6-1" date="1699704000">- Update to upstream version 3.25.6, resolves rhbz#2192489</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.25.6-2" date="1701691200">- Implement bootstrap mode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.6-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.6-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.25.6-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.25.6-6" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.25.6-6" date="1722859200">- Port to OpenJDK 21
- Resolves: RHEL-52805</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.25.6-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4413f5c9a1a3b8d4889f828add31701d4f9e1475945f9c4b6100d1b11f7ef07b" name="jaxb-api" arch="noarch">
  <version epoch="0" ver="4.0.1" rel="6.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.0-2" date="1673611200">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-5" date="1693569600">- Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.1-1" date="1702036800">- Update to upstream version 4.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.1-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.1-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5f399adaa011a45ebbf74714453982bcb21b3810c8e81a40df4d78239d294c38" name="jaxb-api-javadoc" arch="noarch">
  <version epoch="0" ver="4.0.1" rel="6.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.0-2" date="1673611200">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-5" date="1693569600">- Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.1-1" date="1702036800">- Update to upstream version 4.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.1-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.1-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="99ce84abf48e76583f28e2e84022b2e4ffc4df01dd23da4327ceb4fb048eac9a" name="jaxb-codemodel" arch="noarch">
  <version epoch="0" ver="4.0.4" rel="6.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.2-1" date="1675857600">- Update to upstream version 4.0.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.2-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.3-1" date="1701086400">- Update to upstream version 4.0.3</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.4-1" date="1701259200">- Update to upstream version 4.0.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0b1c27a77c9fe7dd40c720b05af55793d95f4087adc8f95b3ec4f345cb9b992c" name="jaxb-codemodel-annotation-compiler" arch="noarch">
  <version epoch="0" ver="4.0.4" rel="6.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.2-1" date="1675857600">- Update to upstream version 4.0.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.2-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.3-1" date="1701086400">- Update to upstream version 4.0.3</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.4-1" date="1701259200">- Update to upstream version 4.0.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="896d797d9644b664de2b8bddd8d797faab6f3533950e4bb9798d96ff28e17b75" name="jaxb-core" arch="noarch">
  <version epoch="0" ver="4.0.4" rel="6.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.2-1" date="1675857600">- Update to upstream version 4.0.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.2-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.3-1" date="1701086400">- Update to upstream version 4.0.3</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.4-1" date="1701259200">- Update to upstream version 4.0.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7a6025d36c5b0789b2b77a6771c2668a87d151fa1d85526bf97be9b47e61ee8e" name="jaxb-dtd-parser" arch="noarch">
  <version epoch="0" ver="1.5.1" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.5.0-6" date="1675857600">- Remove provision of glassfish artifact</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.5.0-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.5.1-1" date="1702296000">- Update to upstream version 1.5.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.1-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.1-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f8b07f8ef80e58748dbbec976d577d24f7ac1624cd6dfb208839935f350209e8" name="jaxb-dtd-parser-javadoc" arch="noarch">
  <version epoch="0" ver="1.5.1" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.5.0-6" date="1675857600">- Remove provision of glassfish artifact</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.5.0-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.5.1-1" date="1702296000">- Update to upstream version 1.5.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.1-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.1-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="de61e49c4ae342551e6a23ce2da92b184442bd66ca2b871b1eef0d5c02633334" name="jaxb-fi" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="7.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-5" date="1686657600">- Rebuilt to enable smoke test</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.1-1" date="1702296000">- Update to upstream version 2.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.1-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-7" date="1731499200">- Remove unneeded patch</changelog>
</package>
<package pkgid="15d9fafb0ab1aa69257a16832e3ed38ab21127ea03be1dfb97b54fcead6cf83b" name="jaxb-fi-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="7.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-5" date="1686657600">- Rebuilt to enable smoke test</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.1-1" date="1702296000">- Update to upstream version 2.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.1-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-7" date="1731499200">- Remove unneeded patch</changelog>
</package>
<package pkgid="79de98d6463428b3a7771ba7d6144df08d3d26e4058fb5e34b4b579cb5eec4a6" name="jaxb-fi-tests" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="7.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-5" date="1686657600">- Rebuilt to enable smoke test</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.1-1" date="1702296000">- Update to upstream version 2.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.1-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-7" date="1731499200">- Remove unneeded patch</changelog>
</package>
<package pkgid="a0f8ee3648665fca1f248333131da0611d1e186c4bc2e0269654e434631206d4" name="jaxb-istack-commons-maven-plugin" arch="noarch">
  <version epoch="0" ver="4.2.0" rel="9.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.1.1-3" date="1675857600">- Reorganize subpackages</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.0-1" date="1681732800">- Update to upstream version 4.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.0-4" date="1701086400">- Add jaxb-istack-commons-maven-plugin subpackage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.2.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.2.0-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.2.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="43114f65e764a36cce17b9af31219173764773399bfdf214710e99c195a688d7" name="jaxb-istack-commons-runtime" arch="noarch">
  <version epoch="0" ver="4.2.0" rel="9.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.1.1-3" date="1675857600">- Reorganize subpackages</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.0-1" date="1681732800">- Update to upstream version 4.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.0-4" date="1701086400">- Add jaxb-istack-commons-maven-plugin subpackage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.2.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.2.0-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.2.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1df86b4edf7d791e4978fd55e173b74cd267c4ed78791f3075338c387004444c" name="jaxb-istack-commons-test" arch="noarch">
  <version epoch="0" ver="4.2.0" rel="9.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.1.1-3" date="1675857600">- Reorganize subpackages</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.0-1" date="1681732800">- Update to upstream version 4.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.0-4" date="1701086400">- Add jaxb-istack-commons-maven-plugin subpackage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.2.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.2.0-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.2.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fa973432f93109faab3fb160af29d55339f135e83f59dd4f32e1c9e4116fb93c" name="jaxb-istack-commons-tools" arch="noarch">
  <version epoch="0" ver="4.2.0" rel="9.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.1.1-3" date="1675857600">- Reorganize subpackages</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.0-1" date="1681732800">- Update to upstream version 4.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.0-4" date="1701086400">- Add jaxb-istack-commons-maven-plugin subpackage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.2.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.2.0-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.2.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="713812a11e4ceeb3fd4064ea28dd4efc309750bcc667d72f3c71ccc9a7457a1c" name="jaxb-relaxng-datatype" arch="noarch">
  <version epoch="0" ver="4.0.4" rel="6.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.2-1" date="1675857600">- Update to upstream version 4.0.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.2-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.3-1" date="1701086400">- Update to upstream version 4.0.3</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.4-1" date="1701259200">- Update to upstream version 4.0.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1bdc39fd36c647944a31fb024d83ba5f5f96f39262adddb17ef28de7b5e15363" name="jaxb-rngom" arch="noarch">
  <version epoch="0" ver="4.0.4" rel="6.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.2-1" date="1675857600">- Update to upstream version 4.0.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.2-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.3-1" date="1701086400">- Update to upstream version 4.0.3</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.4-1" date="1701259200">- Update to upstream version 4.0.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b12ccdf21744174c0d3d7bb81d7725977b514aa73db0fe89cd0b5e1e0aa2bb85" name="jaxb-runtime" arch="noarch">
  <version epoch="0" ver="4.0.4" rel="6.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.2-1" date="1675857600">- Update to upstream version 4.0.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.2-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.3-1" date="1701086400">- Update to upstream version 4.0.3</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.4-1" date="1701259200">- Update to upstream version 4.0.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b2c8833f3d22354c5c7a20d4f25285b46b874e67ec9216770079b0b15ba196af" name="jaxb-stax-ex" arch="noarch">
  <version epoch="0" ver="2.1.0" rel="9.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.0-1" date="1669032000">- Update to upstream version 2.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.0-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0a9022bdc43a1703b117d2e8a3f568e9d851e82d664de3f39b74d849f6a9889d" name="jaxb-stax-ex-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.0" rel="9.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.0-1" date="1669032000">- Update to upstream version 2.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.0-8" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4ce5507a6a3b2e4c822dc7a2fb1f88b92553acad82e50857c9e2b3809c4c0a9a" name="jaxb-txw2" arch="noarch">
  <version epoch="0" ver="4.0.4" rel="6.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.2-1" date="1675857600">- Update to upstream version 4.0.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.2-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.3-1" date="1701086400">- Update to upstream version 4.0.3</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.4-1" date="1701259200">- Update to upstream version 4.0.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8d7b920c39c32dc9ae81780945a151d6ee10a14880c35daa3183929f44f59edd" name="jaxb-txwc2" arch="noarch">
  <version epoch="0" ver="4.0.4" rel="6.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.2-1" date="1675857600">- Update to upstream version 4.0.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.2-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.3-1" date="1701086400">- Update to upstream version 4.0.3</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.4-1" date="1701259200">- Update to upstream version 4.0.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0d528eed64d016e4f60ee291047dcb98dbb04e63efbc7e4b7a8ad66f8bd32f04" name="jaxb-xjc" arch="noarch">
  <version epoch="0" ver="4.0.4" rel="6.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.2-1" date="1675857600">- Update to upstream version 4.0.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.2-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.3-1" date="1701086400">- Update to upstream version 4.0.3</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.4-1" date="1701259200">- Update to upstream version 4.0.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3971d826e2ca2cbcb03e0a700ed675be944664a2e29de03e7ef5e4744212561c" name="jaxb-xsom" arch="noarch">
  <version epoch="0" ver="4.0.4" rel="6.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.2-1" date="1675857600">- Update to upstream version 4.0.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.2-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.3-1" date="1701086400">- Update to upstream version 4.0.3</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.4-1" date="1701259200">- Update to upstream version 4.0.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.4-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-5" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="50675330ef2588c10f581b767342ac8c25e74d6359d8b105ad45b6c8617a278e" name="jbig2dec" arch="x86_64">
  <version epoch="0" ver="0.20" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Michael J Gruber &lt;mjg@fedoraproject.org&gt; - 0.19-9" date="1676203200">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Michael J Gruber &lt;mjg@fedoraproject.org&gt; - 0.20-1" date="1694606400">- rebase to 0.20 (rhbz#2238815)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.20-6" date="1729080000">- add gating configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="841feec1d463e3b340b2db9a28b7e1a5ff9f74ea0f1173559d9544d79ecaebe3" name="jbig2dec-devel" arch="x86_64">
  <version epoch="0" ver="0.20" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Michael J Gruber &lt;mjg@fedoraproject.org&gt; - 0.19-9" date="1676203200">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Michael J Gruber &lt;mjg@fedoraproject.org&gt; - 0.20-1" date="1694606400">- rebase to 0.20 (rhbz#2238815)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.20-6" date="1729080000">- add gating configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="ef55371b2ae013af0b975aa78db2317911ec4d5501538d18e2cfe0510d22a2c5" name="jbig2dec-libs" arch="x86_64">
  <version epoch="0" ver="0.20" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Michael J Gruber &lt;mjg@fedoraproject.org&gt; - 0.19-9" date="1676203200">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Michael J Gruber &lt;mjg@fedoraproject.org&gt; - 0.20-1" date="1694606400">- rebase to 0.20 (rhbz#2238815)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.20-6" date="1729080000">- add gating configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="3b612f041ef69efd7de6e4f123be52fc1e7eb040b5b4722ef5e0c3936be49212" name="jbigkit" arch="x86_64">
  <version epoch="0" ver="2.1" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2.1-27" date="1700740800">- SPDX migration, spec update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-28" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-29" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fcdf2f6b159b348676b183bd1cfc4ce22121abb85ca4eca1c1e15f9299c8d56c" name="jbigkit-devel" arch="x86_64">
  <version epoch="0" ver="2.1" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2.1-27" date="1700740800">- SPDX migration, spec update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-28" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-29" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="abffd98ca1c1c417de8f24761e529072d7ceafabfb15938c03804dc938b8f48e" name="jbigkit-libs" arch="x86_64">
  <version epoch="0" ver="2.1" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2.1-27" date="1700740800">- SPDX migration, spec update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-28" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-29" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2b3754b0806a6091d53ff81275c07819ba3ce22662f236b69ba2b59d23a1e2b0" name="jcl-over-slf4j" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="13.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-5" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-6" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.32-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.32-12" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.32-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="775caf2d64b0f609fd24faf66929e86bfd906719ac8fa0827aaab851913da1c7" name="jctools" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="4.el10"/>
  <changelog author="Paul Wouters &lt;paul.wouters@aiven.io - 4.0.1-1" date="1689336000">- Resolves rhbz#2092837 jctools-4.0.1 is available</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.1-3" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.1-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.1-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.1-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.2-1" date="1706788800">- Update to upstream version 4.0.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.2-3" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="df2683763200139dac35f14de43817501e20339854407fd827247da96e433f82" name="jctools-javadoc" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="4.el10"/>
  <changelog author="Paul Wouters &lt;paul.wouters@aiven.io - 4.0.1-1" date="1689336000">- Resolves rhbz#2092837 jctools-4.0.1 is available</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.1-3" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.1-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.1-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.1-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.2-1" date="1706788800">- Update to upstream version 4.0.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.2-3" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="abe102b1cdd24acce159c3e3e489d823bb9fb00f7c0128143c05573df6816bda" name="jdepend" arch="noarch">
  <version epoch="0" ver="2.10" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-6" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10-9" date="1722340800">- Fix unexpected permissions of regular files</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10-10" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10-10" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52690</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10-11" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f7a25204e03fcf30acef62961516cbcefb7f806c1b0645ab37de0e9d4e137920" name="jdepend-javadoc" arch="noarch">
  <version epoch="0" ver="2.10" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-6" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10-9" date="1722340800">- Fix unexpected permissions of regular files</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10-10" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10-10" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52690</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10-11" date="1722859201">- Remove BR on java-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="459dfc4bd94710037906855542d13165a9f148252464557978d9fcf9c1b0aa39" name="jdependency" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.0-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 2.8.0-9" date="1730721600">- Fix build failure by adapting test for JDK 21
  Resolves: RHEL-65449</changelog>
</package>
<package pkgid="59a86147922143137648f08a5f9a1d22e2f8fe539e655e15209a505097fbd2be" name="jdependency-javadoc" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.0-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.0-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 2.8.0-9" date="1730721600">- Fix build failure by adapting test for JDK 21
  Resolves: RHEL-65449</changelog>
</package>
<package pkgid="2b34fea42b09e10cf5b02c049e4bc3f361ba395d6f4142a2b66446a1afdd4857" name="jdom" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="38.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-32" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-33" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-34" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-35" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-36" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-37" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-37" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52691</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-38" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="77cf5d70fa83a257d3d1afe1fb7881f12d0282a1c9889f3f9ce3f214cb655da7" name="jdom-demo" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="38.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-32" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-33" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-34" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-35" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-36" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-37" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-37" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52691</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-38" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a0063569ecf5513496719499674cc7d8820f41a284e13b5b6b5ebd3a0c20ae57" name="jdom-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="38.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-32" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-33" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-34" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-35" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-36" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-37" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-37" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52691</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-38" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0110248da2fc0b4ae20e934a6e64507e72fa773b66d43f1521fca7f673181afa" name="jdom2" arch="noarch">
  <version epoch="0" ver="2.0.6.1" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6.1-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6.1-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6.1-7" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.6.1-7" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52692</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6.1-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="378288b42a8689ec7e0ebf296062ba8ab363ca7ec457d1af00ef0e92c520158f" name="jdom2-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.6.1" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6.1-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6.1-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6.1-7" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.6.1-7" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52692</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6.1-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c0bb1fb8a0b0701c5b5503c950cd57554e1bce740ca8c10f6e1d541062d8fd2a" name="jflex" arch="noarch">
  <version epoch="0" ver="1.7.0" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-14" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-18" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-18" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52693</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c16aa74c97e71cf3e36576d6ac50433414817eb5cdf6bac4e773a995a4c40a93" name="jflex-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.0" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-14" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-18" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-18" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52693</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="01c9f7ed364dd874ca5324bb21d6004af1dc0e7dcd32eb5c530efc0b5067748e" name="jitterentropy" arch="x86_64">
  <version epoch="0" ver="3.6.0" rel="2.el10"/>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.4.1-7" date="1706270400">- Initial import from Fedora 40</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.5.0-1" date="1707307200">- Update to the upstream v3.5.0 @ b178ef6b (RHEL-30639)
- Use proper SPDX license identifiers</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.5.0-2" date="1711972800">- Rebuild the package for RHEL-10</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.5.0-3" date="1717156800">- Update to the upstream v3.5.0 @ 48b2ffc1 (RHEL-30639)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.6.0-1" date="1729857600">- Update to the upstream v3.6.0 @ 11829386 (RHEL-64946)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.6.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="00067412d904a0c4bcd4f441fb1369b276af1337706106e6f17396b53ace1015" name="jitterentropy-devel" arch="x86_64">
  <version epoch="0" ver="3.6.0" rel="2.el10"/>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.4.1-7" date="1706270400">- Initial import from Fedora 40</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.5.0-1" date="1707307200">- Update to the upstream v3.5.0 @ b178ef6b (RHEL-30639)
- Use proper SPDX license identifiers</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.5.0-2" date="1711972800">- Rebuild the package for RHEL-10</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.5.0-3" date="1717156800">- Update to the upstream v3.5.0 @ 48b2ffc1 (RHEL-30639)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 3.6.0-1" date="1729857600">- Update to the upstream v3.6.0 @ 11829386 (RHEL-64946)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.6.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d7db2a3a46d9202345b74f57a035270bc62781436799425c07e2bc0377680fc7" name="jna" arch="x86_64">
  <version epoch="0" ver="5.14.0" rel="7.el10"/>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 5.13.0-1" date="1673870400">- Rebase to version 5.13.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.13.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.13.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 5.14.0-1" date="1702296000">- Rebase to version 5.14.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.14.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.14.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 5.14.0-4" date="1715774400">- update license to SPDX format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.14.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 5.14.0-6" date="1723204800">- Rebuild without generated Requires</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.14.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="02b0d7698ca7662ef4853b32a24bc57f616c3df0b8814aeeeff45dc49c3967c8" name="jna-contrib" arch="noarch">
  <version epoch="0" ver="5.14.0" rel="7.el10"/>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 5.13.0-1" date="1673870400">- Rebase to version 5.13.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.13.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.13.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 5.14.0-1" date="1702296000">- Rebase to version 5.14.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.14.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.14.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 5.14.0-4" date="1715774400">- update license to SPDX format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.14.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 5.14.0-6" date="1723204800">- Rebuild without generated Requires</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.14.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="02e72a105d7f6a58c13e169e1a61e21c4842da62e93c40ab6c89588b230a856d" name="jna-javadoc" arch="noarch">
  <version epoch="0" ver="5.14.0" rel="7.el10"/>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 5.13.0-1" date="1673870400">- Rebase to version 5.13.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.13.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.13.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 5.14.0-1" date="1702296000">- Rebase to version 5.14.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.14.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.14.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 5.14.0-4" date="1715774400">- update license to SPDX format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.14.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 5.14.0-6" date="1723204800">- Rebuild without generated Requires</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.14.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b0c987b521c1f066e4333821ef51ac3ced68576cabe47dc8e8339ae08df308ce" name="jomolhari-fonts" arch="noarch">
  <version epoch="0" ver="0.003" rel="43.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.003-37" date="1669982400">- Update license tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.003-38" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.003-39" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.003-40" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.003-41" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.003-42" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.003-43" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="34740f90b09b9c42efad4132dc830798fd31002de6d0bf22d25078501c43b7b8" name="jose" arch="x86_64">
  <version epoch="0" ver="14" rel="102.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11-8" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11-9" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11-10" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tulio Magno Quites Machado Filho &lt;tuliom@redhat.com&gt; - 11-11" date="1706616000">- Fix test when using zlib-ng</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 12-1" date="1706875200">- Update to release v12</changelog>
  <changelog author="koncpa &lt;pkoncity@redhat.com&gt; - 12-2" date="1716465600">- Enable RHEL gating for jose</changelog>
  <changelog author="koncpa &lt;pkoncity@redhat.com&gt; - 12-3" date="1716811200">- Enable fmf metadata format for jose</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 14-100" date="1716984000">- Rebase jose-14 upstream version to c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 14-101" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 14-102" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="1f1f5bbf07bbcdab6dd7391c61fccc726fd53ef654e23bee17ae20cd86f30a3d" name="jq" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="11.el10_2.2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.7.1-6" date="1729512000">- Add gating tests configuration</changelog>
  <changelog author="Scott Poore &lt;spoore@redhat.com&gt; - 1.7.1-7" date="1729512001">- Update upstream tests to disable fedora repos</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.1-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Scott Poore &lt;spoore@redhat.com&gt; - 1.7.1-9" date="1751025600">- performance test support glibc preload test</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.7.1-10" date="1751284800">- Fix signed integer overflow in jvp_array_write</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.7.1-11" date="1751284801">- AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.7.1-12" date="1778500800">- Fix CVE-2026-39979 out-of-bounds read in jv_parse_sized()</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.7.1-13" date="1778500801">- Fix CVE-2026-40164 - Denial of Service via crafted JSON object causing
  hash collisions</changelog>
</package>
<package pkgid="885da0d900ad59dbe9fa9a54a68d7a87bfc6fbf9d1497ab31a222fe666faac62" name="jq-devel" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="11.el10_2.2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.7.1-6" date="1729512000">- Add gating tests configuration</changelog>
  <changelog author="Scott Poore &lt;spoore@redhat.com&gt; - 1.7.1-7" date="1729512001">- Update upstream tests to disable fedora repos</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.1-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Scott Poore &lt;spoore@redhat.com&gt; - 1.7.1-9" date="1751025600">- performance test support glibc preload test</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.7.1-10" date="1751284800">- Fix signed integer overflow in jvp_array_write</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.7.1-11" date="1751284801">- AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.7.1-12" date="1778500800">- Fix CVE-2026-39979 out-of-bounds read in jv_parse_sized()</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.7.1-13" date="1778500801">- Fix CVE-2026-40164 - Denial of Service via crafted JSON object causing
  hash collisions</changelog>
</package>
<package pkgid="a3d9782dcae1638910c98259afbac251d0fbf80a1b985f24d4175af6042fbd1c" name="js-d3-flame-graph" arch="noarch">
  <version epoch="0" ver="4.0.7" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.7-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.7-5" date="1689163200">- Switch to SPDX license string</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.7-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.7-7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.7-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.7-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.7-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3220918ddae8d4c5ee4726b31fd48350386475628c2fbeef609be362bc9badb2" name="js-d3-flame-graph-doc" arch="noarch">
  <version epoch="0" ver="4.0.7" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.7-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.7-5" date="1689163200">- Switch to SPDX license string</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.7-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.7-7" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.7-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.7-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.7-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1edfb93ea2a2576ab1def6deb05111120488fe0327d182b09658983cd40e984e" name="jsch" arch="noarch">
  <version epoch="0" ver="0.1.55" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.55-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.55-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.1.55-11" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.55-12" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.55-13" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.55-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.55-15" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.1.55-15" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52694</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.55-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f8a4bb9107fd93b28a7c5feca237c0a15f448b9b5b7d343d304f7320d1367e65" name="jsch-javadoc" arch="noarch">
  <version epoch="0" ver="0.1.55" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.55-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.55-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.1.55-11" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.55-12" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.55-13" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.55-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.55-15" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.1.55-15" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52694</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.55-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8dfa09211b76f9fe1c9182b5214fcdf35534213436554e029c14e07f11b9ecd2" name="json-c" arch="x86_64">
  <version epoch="0" ver="0.18" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.17-1" date="1691928000">- Update to 0.17
- Fixes: rhbz#2231647</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.17-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.17-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0.18-1" date="1730808000">- Rebase to 0.18
- Resolves: RHEL-65629</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0.18-2" date="1730808001">- Fix problem on upgrade of doc subpackage
- Related: RHEL-65629</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0.18-3" date="1730894400">- Improve fix of problem on upgrade of doc subpackage
- Related: RHEL-65629</changelog>
</package>
<package pkgid="68c4f0f4d9f2e9c88d9f1891af860807c6831f6b6aa81ffb1ae270046e376490" name="json-c-devel" arch="x86_64">
  <version epoch="0" ver="0.18" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.17-1" date="1691928000">- Update to 0.17
- Fixes: rhbz#2231647</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.17-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.17-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0.18-1" date="1730808000">- Rebase to 0.18
- Resolves: RHEL-65629</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0.18-2" date="1730808001">- Fix problem on upgrade of doc subpackage
- Related: RHEL-65629</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0.18-3" date="1730894400">- Improve fix of problem on upgrade of doc subpackage
- Related: RHEL-65629</changelog>
</package>
<package pkgid="cc20b243c614c8cdb55323caabe7149992e4cc5b675174dc646db562fa2ff808" name="json-c-doc" arch="x86_64">
  <version epoch="0" ver="0.18" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 0.17-1" date="1691928000">- Update to 0.17
- Fixes: rhbz#2231647</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.17-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.17-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0.18-1" date="1730808000">- Rebase to 0.18
- Resolves: RHEL-65629</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0.18-2" date="1730808001">- Fix problem on upgrade of doc subpackage
- Related: RHEL-65629</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0.18-3" date="1730894400">- Improve fix of problem on upgrade of doc subpackage
- Related: RHEL-65629</changelog>
</package>
<package pkgid="df69cfc4f2b7191c83780921e8bb983b7f04073adbeb9ef74dd8b7d7b57bc281" name="json-glib" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.6-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.6-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.8.0-1" date="1694865600">- Update to 1.8.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a87e776981fccf870299f0f814dba3ab1a76131b4d3a73599d9626d161d9109c" name="json-glib-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.6-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.6-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.8.0-1" date="1694865600">- Update to 1.8.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="da9dbbd62d88abc42835d02da9b023cac8b2f6f4bace0ca5c8499204fa63babc" name="json-glib-tests" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.6-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.6-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.8.0-1" date="1694865600">- Update to 1.8.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6f798455d0bd64928cfcb46f3a219ec4dc0b9fb6d23687009b1805a42caa9f0b" name="jsoncpp" arch="x86_64">
  <version epoch="0" ver="1.9.5" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-6" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.5-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.5-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="711b5e8f911445f0762d763fb585f02375ff041aa1ae4bcfe2ecc4982e3b7fd3" name="jsoncpp-devel" arch="x86_64">
  <version epoch="0" ver="1.9.5" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-6" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.5-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.5-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="97b30ad41561d6c105e6d3f1e07b56f136dfcff4f49f24a80452db100d5e5c5d" name="jsoncpp-doc" arch="noarch">
  <version epoch="0" ver="1.9.5" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-6" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.5-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.5-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a8171b36a2095c3490d7b05e20ed067e066e488e68df68ca0382b3ae0a480712" name="jsoup" arch="noarch">
  <version epoch="0" ver="1.17.2" rel="4.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.16.1-1" date="1690200000">- Unretire with version 1.16.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.16.1-2" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.1-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.1-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.17.2-1" date="1706788800">- Update to upstream version 1.17.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.2-3" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="802efb8b02bee8e2644f2be5d627c7d4c7e775f6925925264c437101c3352b4a" name="jsoup-javadoc" arch="noarch">
  <version epoch="0" ver="1.17.2" rel="4.el10"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.16.1-1" date="1690200000">- Unretire with version 1.16.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.16.1-2" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.1-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.1-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.17.2-1" date="1706788800">- Update to upstream version 1.17.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.2-3" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0e3cb21f554fd3d00ae1dc73d5e5ee6a278fb298a28a4c71c9db01b276a06170" name="jsr-305" arch="noarch">
  <version epoch="0" ver="3.0.2" rel="17.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-8" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-9" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-10" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-11" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-12" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-13" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.2-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-15" date="1722340800">- Replace CC-BY-2.5 annotations with Apache-2.0 ones</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.2-16" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.2-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f9f05a5aaee99fa3bbb3a06b4191749acb30465bbf4f92539fe8069e968d604b" name="jsr-305-javadoc" arch="noarch">
  <version epoch="0" ver="3.0.2" rel="17.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-8" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-9" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-10" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-11" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-12" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-13" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.2-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-15" date="1722340800">- Replace CC-BY-2.5 annotations with Apache-2.0 ones</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.2-16" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.2-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bb47e63ea3a10df0d6eb028c814156fb294c531fa4d1c804ec7227fddcdb93b1" name="jul-to-slf4j" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="13.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-5" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-6" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.32-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.32-12" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.32-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="59f2bd9201442ac7e60b80cf92eec2d99628ebd0d2c14b4e1b0a960384793a25" name="julietaula-montserrat-alternates-fonts" arch="noarch">
  <version epoch="1" ver="7.222" rel="1.el10"/>
  <changelog author="Rocky Linux Build System (Peridot) &lt;releng@rockylinux.org&gt; - 1:7.222-1.el10" date="1709640000">- local build</changelog>
</package>
<package pkgid="753bc58b518f457cd438b092737f8f5b4383d8c57973a1d26c1db610fa64da60" name="julietaula-montserrat-fonts" arch="noarch">
  <version epoch="1" ver="7.222" rel="1.el10"/>
  <changelog author="Rocky Linux Build System (Peridot) &lt;releng@rockylinux.org&gt; - 1:7.222-1.el10" date="1709640000">- local build</changelog>
</package>
<package pkgid="8a891b4ea364148640fe2e367a33f6966f58523e7a8bb45de52ce8242361bd0e" name="junit" arch="noarch">
  <version epoch="1" ver="4.13.2" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.1-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:4.13.1-11" date="1676548800">- Change packaging to jar instead of bundle</changelog>
  <changelog author="Chris Kelley &lt;ckelley@redhat.com&gt; - 4.13.2-1" date="1682424000">- Update to upstream version 4.13.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.13.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.13.2-6" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:4.13.2-6" date="1722859200">- Port to OpenJDK 21
- Resolves: RHEL-52712</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.13.2-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5556059d112d354cb547a13295c735a08f6a9a6d1915a1b5f8c10bcc4955e921" name="junit-javadoc" arch="noarch">
  <version epoch="1" ver="4.13.2" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.1-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:4.13.1-11" date="1676548800">- Change packaging to jar instead of bundle</changelog>
  <changelog author="Chris Kelley &lt;ckelley@redhat.com&gt; - 4.13.2-1" date="1682424000">- Update to upstream version 4.13.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.13.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.13.2-6" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:4.13.2-6" date="1722859200">- Port to OpenJDK 21
- Resolves: RHEL-52712</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.13.2-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8c037ccc6c871b8abff1734a84a7127f06718568912fcd9cb4567a99ab7628c6" name="junit-manual" arch="noarch">
  <version epoch="1" ver="4.13.2" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.1-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:4.13.1-11" date="1676548800">- Change packaging to jar instead of bundle</changelog>
  <changelog author="Chris Kelley &lt;ckelley@redhat.com&gt; - 4.13.2-1" date="1682424000">- Update to upstream version 4.13.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.13.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.13.2-6" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:4.13.2-6" date="1722859200">- Port to OpenJDK 21
- Resolves: RHEL-52712</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:4.13.2-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="98587e1662215cf2c4296decb4838c2a868210035f05ad25bf121d66b8dd4955" name="junit5" arch="noarch">
  <version epoch="0" ver="5.10.2" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.9.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.0-1" date="1692360000">- Update to upstream version 5.10.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.10.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.10.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.1-1" date="1706788800">- Update to upstream version 5.10.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.2-1" date="1707220800">- Update to upstream version 5.10.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.10.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.10.2-3" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.10.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.2-5" date="1737028800">- Remove build-dependency on asciidoc</changelog>
</package>
<package pkgid="01932afc1288f4149ea2aa67f8c050585cd98080abea95a99b3e8e1bbde9a257" name="junit5-guide" arch="noarch">
  <version epoch="0" ver="5.10.2" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.9.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.0-1" date="1692360000">- Update to upstream version 5.10.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.10.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.10.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.1-1" date="1706788800">- Update to upstream version 5.10.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.2-1" date="1707220800">- Update to upstream version 5.10.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.10.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.10.2-3" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.10.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.2-5" date="1737028800">- Remove build-dependency on asciidoc</changelog>
</package>
<package pkgid="383ec84edfff7ed1c8db80c32b4d0d3d6cdf956d553ed40d0955c8ecfa9cda4f" name="junit5-javadoc" arch="noarch">
  <version epoch="0" ver="5.10.2" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.9.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.0-1" date="1692360000">- Update to upstream version 5.10.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.10.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.10.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.1-1" date="1706788800">- Update to upstream version 5.10.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.2-1" date="1707220800">- Update to upstream version 5.10.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.10.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.10.2-3" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.10.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.2-5" date="1737028800">- Remove build-dependency on asciidoc</changelog>
</package>
<package pkgid="38a4ce3eb187669b583c9e593ce6f696aaf7195a798eeac64b7c8830ab6732fb" name="jurand" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="5.el10"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-2" date="1678276800">- Skip interface keyword as annotation in name matching only</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.3.0-1" date="1678881600">- Update to upstream version 1.3.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.3.1-1" date="1679572800">- Update to upstream version 1.3.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-3" date="1693396800">- Obsolete javapackages-extra</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.3.2-1" date="1700568000">- Update to upstream version 1.3.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b40a0a25a235076d59009f28eb15c9dfc68d4026a8e928902c2c2ff8238568b5" name="jzlib" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-24" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-25" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-29" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-29" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52695</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="48ca33093e7316c921402db657ae0548867f630fdf6af25dd6bd3f58dc4853e0" name="jzlib-demo" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-24" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-25" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-29" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-29" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52695</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="acc17fd0fef33ce2ac02eaf74937294e4cd11d9e7b31bef02768595234992c97" name="jzlib-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-24" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-25" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-29" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-29" date="1722859200">- Switch Java compiler source/target to 1.8
- Resolves: RHEL-52695</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ca7f50060a473a501bbb9b32e3a74423543ea99dbeb4da4887e4ab45a9e9222f" name="kabi-dw" arch="x86_64">
  <version epoch="0" ver="0" rel="0.30.20250210giteedfcbf.el10"/>
  <changelog author="&#x10C;estm&#xED;r Kalina &lt;ckalina@redhat.com&gt; - 0.24.20191127gitbd56a60" date="1687176000">- Migrate license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - Packaging variables read or set by" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - Packaging variables read or set by" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - Packaging variables read or set by" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - Packaging variables read or set by" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="&#x10C;estm&#xED;r Kalina &lt;ckalina@redhat.com&gt; - 0.29giteedfcb" date="1738843200">- Bump release and update to the latest upstream version
  Fix DW_TAG_unspecified_type issue
  Resolves: RHEL-52280</changelog>
  <changelog author="&#x10C;estm&#xED;r Kalina &lt;ckalina@redhat.com&gt; - 0.30giteedfcb" date="1739188800">- Bump release
  Fix ET_DYN vmlinux namespace support
  Resolves: RHEL-78572</changelog>
</package>
<package pkgid="833d605a1ed265a39172b9f67e1654503f6048824d78cbcbedaf9e99f5f7221e" name="kasumi-common" arch="noarch">
  <version epoch="0" ver="2.5" rel="47.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.5-39" date="1669896000">- Convert License tag to SPDX.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-40" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.5-41" date="1686830400">- Fix typo in RPM macro breaking ELN builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-42" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-43" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.5-44" date="1705838400">- Fix C89 compatibility issue (#2259428)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-45" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5-46" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5-47" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="10579d1b6717569d51c66afd87fa8ddc19b6cf740139e27835484af64a2f8573" name="kasumi-unicode" arch="x86_64">
  <version epoch="0" ver="2.5" rel="47.el10"/>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.5-39" date="1669896000">- Convert License tag to SPDX.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-40" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2.5-41" date="1686830400">- Fix typo in RPM macro breaking ELN builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-42" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-43" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.5-44" date="1705838400">- Fix C89 compatibility issue (#2259428)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-45" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5-46" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5-47" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="83ed184d5f90aa54f096b4edb52f880274349d4d07ef9a55bae9e4fd5d1c0b6a" name="kbd" arch="x86_64">
  <version epoch="0" ver="2.6.4" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.2-1" date="1692878400">- Update to kbd-2.6.2
  Resolves: #2232126</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-1" date="1695211200">- Update to kbd-2.6.3
  Resolves: #2239620</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.4-1" date="1702641600">- Update to kbd-2.6.4
  Resolves: #2254010</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.4-5" date="1722254400">- Initialize variable to avoid possible uninitialized use
  Resolves: RHEL-40728</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.4-7" date="1736510400">- Add vlock option to issue prompt before invocation of pam stack
  Resolves: RHEL-57035</changelog>
</package>
<package pkgid="174127b6482b5bae89e99adacd4d142d9a85ee95fa3aca9788bbab7fd78e7b56" name="kbd" arch="x86_64">
  <version epoch="0" ver="2.6.4" rel="8.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.4-7" date="1736510400">- Add vlock option to issue prompt before invocation of pam stack
  Resolves: RHEL-57035</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.6.4-8" date="1786449600">- Fix openvt -u process matching to be more conservative (CVE-2026-72693)
  Resolves: RHEL-235987</changelog>
</package>
<package pkgid="c72125646e3f214ace9db71c22c23368c4165441244010c5fcceeff9a9dd1a76" name="kbd-legacy" arch="noarch">
  <version epoch="0" ver="2.6.4" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.2-1" date="1692878400">- Update to kbd-2.6.2
  Resolves: #2232126</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-1" date="1695211200">- Update to kbd-2.6.3
  Resolves: #2239620</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.4-1" date="1702641600">- Update to kbd-2.6.4
  Resolves: #2254010</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.4-5" date="1722254400">- Initialize variable to avoid possible uninitialized use
  Resolves: RHEL-40728</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.4-7" date="1736510400">- Add vlock option to issue prompt before invocation of pam stack
  Resolves: RHEL-57035</changelog>
</package>
<package pkgid="8758502585353454af3f0637c2d249158a300a1752522d1ebb99c3623293bca9" name="kbd-legacy" arch="noarch">
  <version epoch="0" ver="2.6.4" rel="8.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.4-7" date="1736510400">- Add vlock option to issue prompt before invocation of pam stack
  Resolves: RHEL-57035</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.6.4-8" date="1786449600">- Fix openvt -u process matching to be more conservative (CVE-2026-72693)
  Resolves: RHEL-235987</changelog>
</package>
<package pkgid="31825222e0e0ba348ae0fba24877c1e252c0d48a04bd23a7edccdcafc2d951f3" name="kbd-misc" arch="noarch">
  <version epoch="0" ver="2.6.4" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.2-1" date="1692878400">- Update to kbd-2.6.2
  Resolves: #2232126</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-1" date="1695211200">- Update to kbd-2.6.3
  Resolves: #2239620</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.4-1" date="1702641600">- Update to kbd-2.6.4
  Resolves: #2254010</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.4-5" date="1722254400">- Initialize variable to avoid possible uninitialized use
  Resolves: RHEL-40728</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.4-7" date="1736510400">- Add vlock option to issue prompt before invocation of pam stack
  Resolves: RHEL-57035</changelog>
</package>
<package pkgid="34db7e9e6c949888225a6c0ffbe59e24f9852623537b34bde5848a5f90cc6877" name="kbd-misc" arch="noarch">
  <version epoch="0" ver="2.6.4" rel="8.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.4-7" date="1736510400">- Add vlock option to issue prompt before invocation of pam stack
  Resolves: RHEL-57035</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.6.4-8" date="1786449600">- Fix openvt -u process matching to be more conservative (CVE-2026-72693)
  Resolves: RHEL-235987</changelog>
</package>
<package pkgid="ba9870690251598e3508689d58e242fcb1c2f827f098324ba9a90a23189cfa14" name="kdump-anaconda-addon" arch="noarch">
  <version epoch="0" ver="006" rel="20.20220714git7ca2d3e.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 006-10.20220714git7ca2d3e" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 006-11.20220714git7ca2d3e" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 006-14.20220714git7ca2d3e" date="1713787200">- Resolves: RHEL-29570</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 006-15.20220714git7ca2d3e" date="1715083200">- Resolves: RHEL-32899</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 006-16.20220714git7ca2d3e" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 006-17.20220714git7ca2d3e" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 006-18.20220714git7ca2d3e" date="1742904000">- Disable kdump.service explicitly if users request to (RHEL-84190)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 006-19.20220714git7ca2d3e" date="1745928000">- Handle the case where systemd isn't installed (RHEL-87148)</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 006-20.20220714git7ca2d3e" date="1758801600">- Feature: Set up crypttab for encrypted dump target</changelog>
</package>
<package pkgid="51042c0fb2bb5ce5e1b6be96f8b46eecfadd2b1370ba5af2e5f35b0a69c8a6ae" name="kdump-utils" arch="x86_64">
  <version epoch="0" ver="1.0.58" rel="15.el10"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 1.0.58-6" date="1765972800">- Skip num-threads when -E and -F option is present</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 1.0.58-7" date="1765972801">- powerpc: Set nr_cpus=16 for kdump kernel</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; - 1.0.58-8" date="1767182400">- kexec-kdump-howto.txt: update paragraphs related to disable_cpu_apicid</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 1.0.58-9" date="1768910400">- kdump-lib-initramfs: Fix performance regression in kdump_get_conf_val</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 1.0.58-10" date="1768996800">- sysconfig: use initramfs_options to reduce memory usage</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.0.58-11" date="1768996801">- spec: drop dependency for binutils</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.0.58-12" date="1769688000">- spec: drop dependency for binutils</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.0.58-13" date="1769688001">- kdump-lib: always disable systemd-gpt-auto-generator</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 1.0.58-14" date="1769774400">- spec: Add the missing 20th patch</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 1.0.58-15" date="1770033600">- kdump-lib: use EFI var to find UKI</changelog>
</package>
<package pkgid="78ca086e2579a34d75f43550905565bcaf5ce516e7403caea171cd33af3e2be6" name="kea" arch="x86_64">
  <version epoch="0" ver="3.0.3" rel="1.el10_2"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 2.6.3-1" date="1749384000">- New version 2.6.3
- Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
- kea.conf: Remove /tmp/ from socket-name for existing configurations
- kea.conf: Set pseudo-random password for default config to secure fresh
  install and allow CA startup without user intervention
- kea.conf: Restrict directory permissions
- Sync service files with upstream
- Fix leases ownership when switching from root to kea user</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.0-1" date="1753876800">- New version 3.0.0
- Remove broken keactrl in favor of systemd unit files
- kea.spec: General cleanup and removal of lines that have no effect
- kea-msg-compiler was moved from kea to kea-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.0-2" date="1754049600">- Support for sending startup notifications to systemd</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.1-1" date="1756814400">- New version 3.0.1
- Fixes CVE-2025-40779</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-1" date="1761825600">- New version 3.0.2
- Fixes CVE-2025-11232</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-2" date="1765108800">- Support for sending startup notifications to systemd II</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-3" date="1767960000">- Fix files owned by usbmon in image mode</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-4" date="1767960001">- Create /var/lib/kea through systemd-tmpfiles</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-5" date="1768219200">- Do not set environmental variables to prevent clashes with compilation
  time settings</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.3-1" date="1774440000">- New version 3.0.3
- Fixes CVE-2026-3608</changelog>
</package>
<package pkgid="62189651fc2657981b6ab2ef52742bd6804ceaac8f039a1581e176fc1ac86ded" name="kea-devel" arch="x86_64">
  <version epoch="0" ver="3.0.3" rel="1.el10_2"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 2.6.3-1" date="1749384000">- New version 2.6.3
- Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
- kea.conf: Remove /tmp/ from socket-name for existing configurations
- kea.conf: Set pseudo-random password for default config to secure fresh
  install and allow CA startup without user intervention
- kea.conf: Restrict directory permissions
- Sync service files with upstream
- Fix leases ownership when switching from root to kea user</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.0-1" date="1753876800">- New version 3.0.0
- Remove broken keactrl in favor of systemd unit files
- kea.spec: General cleanup and removal of lines that have no effect
- kea-msg-compiler was moved from kea to kea-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.0-2" date="1754049600">- Support for sending startup notifications to systemd</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.1-1" date="1756814400">- New version 3.0.1
- Fixes CVE-2025-40779</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-1" date="1761825600">- New version 3.0.2
- Fixes CVE-2025-11232</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-2" date="1765108800">- Support for sending startup notifications to systemd II</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-3" date="1767960000">- Fix files owned by usbmon in image mode</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-4" date="1767960001">- Create /var/lib/kea through systemd-tmpfiles</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-5" date="1768219200">- Do not set environmental variables to prevent clashes with compilation
  time settings</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.3-1" date="1774440000">- New version 3.0.3
- Fixes CVE-2026-3608</changelog>
</package>
<package pkgid="c5ad4a19926bb530645f94e8c2be007d4036958ab2a6c44f34f1d1c19de3cd1b" name="kea-doc" arch="noarch">
  <version epoch="0" ver="3.0.3" rel="1.el10_2"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 2.6.3-1" date="1749384000">- New version 2.6.3
- Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
- kea.conf: Remove /tmp/ from socket-name for existing configurations
- kea.conf: Set pseudo-random password for default config to secure fresh
  install and allow CA startup without user intervention
- kea.conf: Restrict directory permissions
- Sync service files with upstream
- Fix leases ownership when switching from root to kea user</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.0-1" date="1753876800">- New version 3.0.0
- Remove broken keactrl in favor of systemd unit files
- kea.spec: General cleanup and removal of lines that have no effect
- kea-msg-compiler was moved from kea to kea-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.0-2" date="1754049600">- Support for sending startup notifications to systemd</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.1-1" date="1756814400">- New version 3.0.1
- Fixes CVE-2025-40779</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-1" date="1761825600">- New version 3.0.2
- Fixes CVE-2025-11232</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-2" date="1765108800">- Support for sending startup notifications to systemd II</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-3" date="1767960000">- Fix files owned by usbmon in image mode</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-4" date="1767960001">- Create /var/lib/kea through systemd-tmpfiles</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-5" date="1768219200">- Do not set environmental variables to prevent clashes with compilation
  time settings</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.3-1" date="1774440000">- New version 3.0.3
- Fixes CVE-2026-3608</changelog>
</package>
<package pkgid="6ce9667e7218fa73d47151f3d30298a2ea3b9c0635317750c52c3e1350149c83" name="kea-hooks" arch="x86_64">
  <version epoch="0" ver="3.0.3" rel="1.el10_2"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 2.6.3-1" date="1749384000">- New version 2.6.3
- Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
- kea.conf: Remove /tmp/ from socket-name for existing configurations
- kea.conf: Set pseudo-random password for default config to secure fresh
  install and allow CA startup without user intervention
- kea.conf: Restrict directory permissions
- Sync service files with upstream
- Fix leases ownership when switching from root to kea user</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.0-1" date="1753876800">- New version 3.0.0
- Remove broken keactrl in favor of systemd unit files
- kea.spec: General cleanup and removal of lines that have no effect
- kea-msg-compiler was moved from kea to kea-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.0-2" date="1754049600">- Support for sending startup notifications to systemd</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.1-1" date="1756814400">- New version 3.0.1
- Fixes CVE-2025-40779</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-1" date="1761825600">- New version 3.0.2
- Fixes CVE-2025-11232</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-2" date="1765108800">- Support for sending startup notifications to systemd II</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-3" date="1767960000">- Fix files owned by usbmon in image mode</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-4" date="1767960001">- Create /var/lib/kea through systemd-tmpfiles</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-5" date="1768219200">- Do not set environmental variables to prevent clashes with compilation
  time settings</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.3-1" date="1774440000">- New version 3.0.3
- Fixes CVE-2026-3608</changelog>
</package>
<package pkgid="318bbd72b275fb477020a5f5efa1cd00782dfdee810fca0a75e6b35604529536" name="kea-keama" arch="x86_64">
  <version epoch="0" ver="3.0.3" rel="1.el10_2"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 2.6.3-1" date="1749384000">- New version 2.6.3
- Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
- kea.conf: Remove /tmp/ from socket-name for existing configurations
- kea.conf: Set pseudo-random password for default config to secure fresh
  install and allow CA startup without user intervention
- kea.conf: Restrict directory permissions
- Sync service files with upstream
- Fix leases ownership when switching from root to kea user</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.0-1" date="1753876800">- New version 3.0.0
- Remove broken keactrl in favor of systemd unit files
- kea.spec: General cleanup and removal of lines that have no effect
- kea-msg-compiler was moved from kea to kea-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.0-2" date="1754049600">- Support for sending startup notifications to systemd</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.1-1" date="1756814400">- New version 3.0.1
- Fixes CVE-2025-40779</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-1" date="1761825600">- New version 3.0.2
- Fixes CVE-2025-11232</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-2" date="1765108800">- Support for sending startup notifications to systemd II</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-3" date="1767960000">- Fix files owned by usbmon in image mode</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-4" date="1767960001">- Create /var/lib/kea through systemd-tmpfiles</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-5" date="1768219200">- Do not set environmental variables to prevent clashes with compilation
  time settings</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.3-1" date="1774440000">- New version 3.0.3
- Fixes CVE-2026-3608</changelog>
</package>
<package pkgid="cebd0c2e870681615fbe71321ebd67884586b447b0d4da003f09fd3fd5164e95" name="kea-libs" arch="x86_64">
  <version epoch="0" ver="3.0.3" rel="1.el10_2"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 2.6.3-1" date="1749384000">- New version 2.6.3
- Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
- kea.conf: Remove /tmp/ from socket-name for existing configurations
- kea.conf: Set pseudo-random password for default config to secure fresh
  install and allow CA startup without user intervention
- kea.conf: Restrict directory permissions
- Sync service files with upstream
- Fix leases ownership when switching from root to kea user</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.0-1" date="1753876800">- New version 3.0.0
- Remove broken keactrl in favor of systemd unit files
- kea.spec: General cleanup and removal of lines that have no effect
- kea-msg-compiler was moved from kea to kea-devel</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.0-2" date="1754049600">- Support for sending startup notifications to systemd</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.1-1" date="1756814400">- New version 3.0.1
- Fixes CVE-2025-40779</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-1" date="1761825600">- New version 3.0.2
- Fixes CVE-2025-11232</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-2" date="1765108800">- Support for sending startup notifications to systemd II</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-3" date="1767960000">- Fix files owned by usbmon in image mode</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-4" date="1767960001">- Create /var/lib/kea through systemd-tmpfiles</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.2-5" date="1768219200">- Do not set environmental variables to prevent clashes with compilation
  time settings</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.0.3-1" date="1774440000">- New version 3.0.3
- Fixes CVE-2026-3608</changelog>
</package>
<package pkgid="f792867b6b03ac8db07f42f06c894a97a2f82d32aacf1713d1451459fd6d67e6" name="keepalived" arch="x86_64">
  <version epoch="0" ver="2.2.8" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.7-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 2.2.8-1" date="1686225600">- Update to 2.2.8 (#2211385)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.8-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 2.2.8-3" date="1691150400">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.8-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.8-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2.8-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.2.8-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 2.2.8-8" date="1732881600">- Fix name parsing for CVE-2024-41184
  Resolves: RHEL-49565</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 2.2.8-9" date="1733140800">Add gating.yaml from c9s
  Related: RHEL-49565</changelog>
</package>
<package pkgid="bbf1ec282adf224fbad552b25b7aaf923377074270fcf3ebe7e705f07d554fb4" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="0c26127a471aa9f7141939cdbe3b95c3688013331373b8e0c9fdae54ef0466ea" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6c6679afa7a9092598cf5e016b903d4c658cf4d98e3af6b06887c11176f045a4" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1a98489e89200b064430662afb03befdea7b3ef92084bdef2dc6c88bfe60ba7b" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2d27cf97b9586706af1bb73323ffdb2762eb6fbd25e074c70c494c76e4d87090" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="196359a4c131a7576dbdcdc42a435024e3720d7a2c1546f8accc2bad577be1d1" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0f781534c7dcef7360aed09b6aaca2cde6acef380645d3054f22228f78eff201" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0df63599da5766805c6b4c083aa0fc3923afc44435665a0458a8b43afc68091d" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c0b308b73b9e233425e14b87e36b62e62cdda1ff7a1c3bef7194bef2e923674a" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="05854ab9fec55427e207919635a25aa9064e480f86f80ee87ba12a0a9dbc413e" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="73ebaa9a6e4adc38e8e3c76d920353f3cbeb385ddfe783de0bc79d36af6b4ccf" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="19e431c7dcbe16f68e2543907250781fe3a03b32c6b5c9e06c641dbf74517546" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="af475808070a6ce15ca7beb9e0dce07dc09d428ee28471c2e8dfbcab9f63c823" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8a9219232c5e46bd0b8e1d16f23236ae607c2f8ec33cda301416cddc83fb4485" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c39084b905deb1ce3537feadcdb9167e8ab9d1a61a31ce7c80e4fa0ad2d4d8c0" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="002fc00d51e711b6e31119eb2860f2d7b6be9175844bbe02a6f3909f0e9c4995" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="eca872043a8ba5cbcd052872a22fcdc3e517a5c7a4769f265db4f80a7f7529ac" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="93649c58f904482ddc99d6ac8c2f2a75a750c9609b4cf07d2ca2cedfdcd68f45" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e482d8ac9b4f160e771ee26bc7dca56968c70bc7366022997ff117efb50ad342" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f9ed0c0c4e6f0aa02d9f8c83bc51a13138ad909d94574c725ceb413820ef3492" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="ec59f90a1deadd760bf56cef8bc230d99a4c381c3c217b63504da55b86fa4a25" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="36d687e80defc4c1cd8534b3591fa74597dbf9bcc7cf19db978cae0c8f37b199" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e2c0bb7c3b358237667a3f92728d03fac932a2fb24cdf0bbf7aaa7cd44d08eea" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0ec78d7214254693cc0aa058d495f15f90495a1dfdad7fb72aef09e51872cb4f" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e330ec284185958abb955141f20d89772813a6a2e6c766eaab1159807cc8ac01" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b9ec0c0a21ea1879e3732d7cade4b6224a2d183756434d739f4fb031910ac6b3" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="92811f4ca2ef2726d03626d8498b31f3cfaaa73e56545bc156030a105e84e927" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9040ad52c27b787f8b83ff2c0aeade48ba9ee40d816c4b1547cce2f2b3de7be5" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2829a4acd8377fa62f101ee551de0b212dc820a22cb2b42895c21bb76497d59d" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="18ce706f8f967993b3ca7433d2d4085f6d1b1fe60d8628cf55271bd7cc69a830" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="aa6914a11016e1cf57cb8c0385d9b3f85eb7773ff247452716d64a9425d132d7" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3569043d0f32b407bb07ffc174ac808d51bb2ca73b596d512efdab3ae8582a7e" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ba08675e4d95ea87be7f451eb7536bd0208544e25abf412e0074d41832854e4f" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b4e8194e4ac8799b3b4ee70f3287dd4bc02df6b92753b1ef66334635e3c8ca8e" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="246562e1cc51bd34c34879e3c703d5970c2f96eb5c0e8aeb54ad325bb1b8f150" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="17dcdc5f31d1ec8e9792a3ff219d8baa429756026c26213b40253660e8bd8f5a" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c784b6b2f916f03ed7a0b5cd7b03812649915d3a64c66c5ba007f14b935bc78c" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="afd42150261a987d913bd561a85a778f0ac6e4b7ddcb612d358cd379e988e4a7" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="993bc60cd08ff1706f1dc646180169c36bed364480a46a1440a8a7606d2d5591" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="5fecad08eb96742f2ad279af949d038d5ff01d2e5cbb5be1e7573cf5cd5e29b6" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f03a1e018c46c1bd08f67cdc726062c067f673e5fdc0752d26900c1ef0daebf9" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c3bad476e550187ade473e3f11bac89fdabb9b8ccd82b99a553915287286de6b" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="553f3719f7a3c589db0ea28690f81977aabf015eb41a056303162ef2be18a671" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2d797caae9380b283e4f21a44688b4193c280b0782a834e8e8932aead5ef673f" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e322dc9b32416d1a0bc51a62276def9e922c48548a99fcd9496ac60bca5f7791" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="784e565caf8b72fb13192b4c985a0cf38dbcd9d9a3064812cccecb003afa9231" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0e4161bac80174f3f7a29df1240fb1c6d5751e3b0dc3cb39fbec2b70992c3fe6" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="abca933cf2006f7a5a4184a41d622edd64c2c1c785f18dc6a44daab546ef416f" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9141a5156e631e46bba85b64f08224a15432e160ee3f2b8decc079e204873d9d" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2dfdc6256be0d36a04a5a8d58041c94c4cd37a2e00a738b125234c3766851abb" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6eb2e9247235be05239299e430710d6e8b107c5819bde2ca3b3e908a3aa8b3b1" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="44ab5eb5379a6c07487ab2fb6becefa9dbdb979f17a3b381aec8e79af007a2b1" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8f9cb47eafd146f53ca21107441872035eaaaa3cb851a1e56804cb8fe31ebe53" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f30ab0b35957d7de04dec6076b194a6659d98f54cc40b9477b70b847a361389b" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3ea257c53e44a95265c0760f8a6fe01d83ca95a37a2af9e3f8afaf27e76a1c30" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="346673eb9914bd098f8f96dcef4bad18a7ae491074a7c0e45d8a7913de210677" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7a5cc52af883454586a438d38401e6231f073ebd99f2c1d792a45740a7e81704" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a46a0d9868945cbb285aa9e724b7558727bf2f9cd5ca65f829a7fc1583f597fd" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="ecb40fae85a608d996b16d888d798a16ad0f89b2add2ec0ff879cf0ff5fa6fa2" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="204e7f5b53914757b9f2690efb21b8b101c64e1d250e1bc6fedb1729f51e867e" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="cce6c567aa51300d106ed1be66c97cc3db6ea8b02570be18aba688d46e1e19e2" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8c8d74fb43b08d2e1597819b1710583bb7ebf4108d916917070c0f18163b406e" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5409aa46b4c34bf27bdb81e6e455f88150ee2ac023b732ecd5fe0973958c645c" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2f96fc6b17ac20a7a4a6ae04a6eae08973aea8c933be1459ee5fce83d666cd30" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bb8e1ce82eb37eea0da00fd8be9e306b477f98aa90b690d706ca920f5e60db26" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1e576f6d0b0f495c532f70e1d190d6381ba0d8e9a9c0538b3e40a7e4f5e34dff" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="916190271224d3fd19e9c393f286b64d55a9d1ae61ea46396aff9d6a7d02c14e" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3585ab7241bfc217d72cd9d337094016233b0928f88201090c459ebae823d298" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6b13fa5b3f9f39cd8c67de475faad3ba6b2e165c3930f4912d14c8e93e0a1e84" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e5315832c91c62a657c89a57223b67c009070e3b0031c6966ae94cdfcd2b0619" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2d85d079d05fe92c4629aa0fe49e76379b57b1f3a2bd2919cf06a22b53155383" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="fc5da97cf2c2c5af53d31fe2a73d17d8f238b5b5cc0e0539c105394c2a9ecd2f" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="fd77ae7d3c8e3329cef9fb9eecfcba3c913dfe7431edaa7018d16d56942b8d51" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6df786ddf2e0055225e8d7a58cab24393e74605b0ff9f637c0cfff8707954af4" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d30d65f3ed4d8233b5110322381c82331b81882e11260f17b339fc286d26e828" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0351df1009494bec851b397b3430759915e51ceea7349b2509a271dfc762342d" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5776d82763a5a59d46830c776fad46aae7845a89378a278f71684858d16f85f3" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="f928dd4e5b0070070f1b18fe9f7a7d687ab58aa596c19d9a9cf50c275d670ebb" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c9a6a6f257b171199ff353ed2b3aa4065f7d2ed812c71fda5fe8a44525f2914b" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="909581e658622bd88d41767ef1c6a377f440787e9eaf0443380c206ea94bf7e0" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="cb28b1f7082b767374294c5712feccee2aa50590746a9a21aa9c51fd9bc20641" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5a4a08c2898019d3d842e2c9f29b6c7dea3b7d5d60d866a485a689d02783ecac" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="73515c0eb034f824e56a6ecb7feb73c23846ef5415b550c8165bac3551a63eec" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2a7379fb80c02e1ac60dd3daeb8c69418444b67352a972597cd8390ed5b61447" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="53a6b7340f3942131e75b2e253e353f2f224f6dc7aac2b731fd755be78846ef2" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5c9fb0b047db44ef42479d7bf8b855f5c8958ec299bdc878690ea89969c5dd8f" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="df8ef8512b3e797afab168184bf9c174aae09fa5112eb7d54a5066c684fe8cba" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="44f785b50fc1f90b2d7550cb1d4753ac94b45b65d75128f82cb120072280030e" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="cdbce86ba0cfdb91ffb089b80880f04cf075c1b540f0da656c109a5b136be61d" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2bede457cb310c0bba84b897259ac63ab7c77754a824cea8236ea99869382a90" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5dc0242013da178000e3608d3f891c3fc59047ef24488f6e05a65e6cdce292d2" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ad9eba9daf7f08b4eb8ec21ecc663f144bd15304c2c7f5c605e0cfa93f3767f6" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ca533a1f1f8c8a3e16e271ea104a018124370a00a1cb38df4847a1560ebf563f" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0b4147f1600d24ff5cbc5e97cf71708ce0749c6348b6d422366313bf01171025" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e1bd6dfb5b94dd91c74c6c49523d172e68b0a4638700be2f6d2df5e884ce3512" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d7e229760cd012581ae7f8d20948c686066447826bd462f0206e5de1e8160173" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="e8746ece9e0614cc00790b61c331b37110345f65d1f583dc9af746b805c11346" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="97f0b1762bbf3382abf6d8df2c743dbffbe97060536a489654129f30939ae29b" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c5810bd30db2e599538a34ecbbcbec54a44f04870776a95e5ead425b39b6cc7c" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4cdf68bd9c5b9e65c215092dbad4b70e94e96caf9c515f66ef0088690b750473" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d325814216839887c751042a1acac800019235e390666292ebee1f270a65a7d9" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4d147a3fe47363d7c241835c116a344f52b321b05a4833644fcf150f996c69c3" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="da5340ee52ba36acbb9152d553ad3f0c9d0e7340df72677decce0e97c4738a15" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0ea98bedb693b753044792a6d682a4286d791fb769a0bc1ddd015690d805ab04" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="cf752f67c5fa86e44a10349fe617cfaee03b71cda4e67b0b4e5fbf4f76ab2161" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1668ceaf37d3181c97dbe1cce08720075068beafbee1b35eaf72d665cb5ef8fc" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1dc03fd20646e8be27393716db271411090839fa097b61cd104067606f099aa6" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ef380b0fc46ae707114b3ec52c9b4d753a946e7f4d7e0f3e6be2d455fb027853" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9e2f99a1b618340d24ccd73e425660fc94a97050457a654a8f685684282e3848" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="99e4fcf012fa97cb9bc0197f5dc3ac4752bcc93b157f66e5d99c2ea7bcb179ab" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="06e0a8fd6e92bdc7c6e30509c363fa3d351126d2f9e5aa1bad918325fccff854" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="55729216f86cd4527767f95995476c2bf392da5060807a3e655150d450581c60" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="67ebc7f8be4e8a41129e0f49c97e580413a2e8f56d1cf61a35132bcd7134d71e" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f9f6f7939b9aa1cc3ee6972b251fd0d7501bbe70bbc5b6ecd01c08f053d55c3f" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="acf47f6ecfb0befa1b54c9d03de5035d256c9352b811cfc258dece76afe73cce" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="a971aa51f897d3c207d82cc4fa11bf6c249700dda6f8db692398d119335d5043" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="63a3dbe4ccbf8222e6008de75dd7da485def781bf8e86416819f4a3bad95f877" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b23690cf02940853d1d0f61f57b6e073e71b798bd80f15999675438bc40d61cb" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2966ef4e056499839ed1f6c522e106b3a4cddb1fc41086d4778813f090735525" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bf904ad108e8a03b2a07745927a8c396aa684e2dbb8c6d66399b13aae56a158f" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0348291c497e5de0a655f989ad900675120506058a7bd44049fc40e66012da80" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="070c28dcb7df33442f9df7a8e20f40708bc99da53e6b90d1d585b84a4d070907" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c1ca2732fdce5519f642061d06c1e31b5b38e8adb13bd973f6982eedcbb7374f" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b742f371397af36fd9bf36509fe5e8c25dcba69c3178fe8b2aab7bb11a832910" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a259c1e4fe0c5651f2372cd64f593f4232a1dbfc96bd8819c2126ff0c751791a" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="92c798052880727dfd647e967e70226b3d41cd333552e3356515fc9681dc02d7" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="447857cf1f2837c68bd38125dee9a6997f56e44f5d86e71df834d534a70082bd" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="78c9583aa8fe38129358850ebaeae5c08e86366ec61e59c3b1bb644293d965c0" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="27ea51ad150d049bcdeaa1f172fad11d038a5517144268676286a862bc4561e7" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2e412a03c3628693855b985c87c8981a603b3d76c06c591c3444cfcab840430a" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7f245f15597a21317ebde44635bb23c6995c7da263e588499c36e0e6e4368a13" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="283a1690d235ed59b5d4bf917ae9994cd1b9ec8bb329bdb52f39f758f1a995e6" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1c12c9550a9fc1b4e6339598649b7fe9d559fe64d8c78f93e568466493d5a982" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f8e24bb6f85a3462dff8e3467b9c64e61f406d9f212b1edbccf70fbe6d6b3798" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="3400d646382eb6bfd47297e94ea5e50d5dcb1cfa085661840f5b060a2421da1d" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="cf3ed2336c133235af7ca13274bec1790a0e2762cff5e97530b3991dda892b27" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="96b5f72f28a74775bc178bbaa4b2769e238eeaa9e648d3340c3b3f4ae4c6df2d" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="974270c069f36607c8aead608d56df45b6c77367aef513b4e81316db1aa923cb" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a04a260417c2d88bad48855a59e93fb3ace73cbf10230080627b92c0abad2f09" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7b9b6ae11d4551350f73badff42ecd4e71963fc500f93a3ef53fbdc4da01f52b" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="153b50efc5f0854777c7cd990505014b954e500b82e58a37ff37fd63f3c1858f" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f34d791781b58b0db05df52912ecb9f6fbde4b46f7ce047bb5abfe04a9324b4e" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e377f5c015879d7753a0eaa5464037a604f6cb83ff7132cee2027407c534f894" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ce08b8977e30e825727bee5cfd0fc3cab7b9c0ae2102d3984681c403a7f36de7" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6e9426a1107831eef30fdcec28d30d5d6eef7fa23c573f3b8d101d037f0d2eb0" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1638b81198cdaf0b5e4f27c8744dae8a9816ec071564bf89ad2ac6bc4668f9b8" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="28e9e2c086cd6ec7e66b82972739e2d312d21ab3009375a0dda96e43bb7a0b36" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2aa50a6407c0114441773b4bd7ab0cf37746441e722c5f56e9ea96dbae06ea41" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="78b2bf0201fd15f95731e514ff3d020f681c84ec6fa7a6a0f0260568c0738d5b" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9231978ed8af9f8aa0cc05404cc764973957f680b0dccc81f827df09bc7f03d3" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="aadc021a816f2c1975051c974ad7011d800b6ad401780c26e3f6a1b8903370a5" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="790894c88289e249fcf21fc5e4bd986d1b6b3f319bd9d38b8678ccde4dddb96a" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e9482e581ee69a7fe49e08293869907f133ee87562fee6a343391f28ee652da7" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="3a7b404634a7feeb4f109f79c373b1452b17f07ebd7cd38879b420729056a200" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ddd8ad1478e23f2ce8e28bb931f3037316ec2cbf603f6ce58799343205bd6706" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="aae9daf1c400aa455e1c68984421f8dfc26dae487a79e454320b714f83ecea46" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="eea0c02dfd13c156b7fbfc50a910cb7653f7fa3f6a6a9d1f2461db5b2a9de0c3" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="101c8eb90de1407b2b9a1e5569c985fade850bcf8c8965f7d878261bbec18dc4" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f9c559097a89374cac79125ad9f6341c69cb04ff764a21974094e5e3184d6013" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="472560b7b5bc33db03e9fcf999bbb7254143fb424ef3cc674e800c5834abfdbd" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bcd38d43e0014557dd618a04f91bef1d501aeb34ae36da625437bdf5f39416e0" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8d050953ea6aa6f747d19921a715497986911de3e1e5d15fc1d8384f3c2ce2aa" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f737e189b28504f101edf72c404d234dc77769ffb17f466f2aa5524c0db071f3" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5bfe12c99f690eb29773cbd72df13e5fef168ba7e3252d15c54e40b760721f32" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1bec774f099ccd7f5ffd1626663d4082bc1daac7421a25d082f7e3d7426f2611" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2ee19e59a0e247d93501ccbce691ab0b8823c3d20cfb55dda38b537af11a55c1" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="757b22d24ae79c45eb690077dabf7df00079aed8f56f9adbe1ba7577236b9b48" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="cdfdf692ddeddabdcbc396f0f24c38d4d0ce6e444cabc2f5b5cc966097bc84d5" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d95bcc2b5d32b28b656010e4f54d3b1147f3dfc7908f331960220dc0fa24d41e" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4f7c23b62613331e143ea3400d5f0bab4c82010468657759ae179cb8c7310ea4" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="29299f3162cff74d94e526ed7b774e49187f10c387ff549a4fedabea5ed87b29" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c9d0c028ce224ffec840c40d14773c5f87b9a1f01eabe56a3ef5c06c59fb5169" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="7d0c751156b18db9df01f688d0026c1fb4411b4856e45d9b194dfaf7fed19d49" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b8eab83e47e9b453fcd0b8f4efdbc9040a8a3162865a1ad3d7b05b9b8a508e16" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2edbd57de2594eed80ef7e873a5c84e53d91b906cba127c7ab893507f1a17b22" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4e702b2b309b5fd0f88cce5d98014694101867d8d88220bbcf889d5141d0640b" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6a0aa31efc9f3e9c2b15053a3aa033c2a377afe216cb860de1a3b448e3196a53" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="628124708dcd008b477f9aa51778cae6ae8423a414a89b5ea86abee2e9f0f6d0" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e6fb71e8dd2670e15468664ec89ec275d75e7d467c7c81b05dad00d1989fd475" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6d2f5d55286863749dc70485ac661284f4604e513f6c9df94181c9a8c6450d87" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7ffe7239d17856b87a0922871e77bbedf0d11341aa1f6b422c61800fd15ef1bf" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b485904410a20fabad2099a5a0b67108911fbcabc61b69d02d12a3b477191559" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d332c0c554f91540f82c4a24fdd6dbe6433afc1d19f6f16bbeae4b5c4092cc23" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9fe3ab38ffbe3b31c74f22d0537c0c8433c259ae23a014c97451fff89dc75207" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a35d261bcbce0a6addd92e88396f497c53c25c4c9950175d269b98f108262036" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d66eaebda17a108e0b36122f6c12029c0a86bfd1604f2d4cdf7c139de7c089db" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b96386d7147263bc0c3f7db65f6804a19a79a033b6002972dbb3bbe32443f162" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="42ea364520362978bec692bed8b4ce3dc3c42de511898c33f41b207a50249b31" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b6f3a3fbe23df9b1d294ae4d65e167cc30544adb4c5516210a1384567cbc0af2" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9195d8de00337a0a8149d4ff7ba5a068461c0d56d8c19df18a07e787c120e7d4" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="feb082b1090cc2f4bcea2f7664ff135c2c4df06b8fd4c85f16dfd64799705a82" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="fc57d9f6ecd521c0d684890bade08110aaff2849f3b84718a5ac1a96d86c7de1" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="07dfa7b39c1617a05b5f362730c74f3c7d62920dd92089b357cbbf800ecc87ee" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f07519ca22019934b9bb9ec4dab28d415f26bc2185639f509829e171264db514" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="467d778188b8b91347d45850d9acf513695a480f2f7ad7b95b8bb3cccfd11b1a" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="beab041f9a07a6875852d257cd8d9162d602d610e6af5ec8e09784da948895fc" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="17adbeedfb32fde729a9ffe3747c6aa093901b6ca7c6fa385d628a6f6c9fbf23" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0e90d4802b95c3ced597dd953889c34dc36da836eacab740638dd53ddbe3b071" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c38c8cce6bd94ad0a3c8eb480255490f10ef67b075ca301090e8bbeda8e3b1bd" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a7cb39c9ea72d4e63d7e7485d3f5a99cda0c88dd82cb890fd63f8a91720526df" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1f95f8c62aa1b5172809563bb6c31b1d575e17c24c4128b7e78cfd7152e257e9" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f015e8a5b867c39ecc199e2af0b6e6cc0bdaf9e2eb955d51bfa2cd5ac5383e6a" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="83f7b296d6c8cd8c79b2414350dedd5be84a315f7478cf314345b41e1b110310" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="60892f31b93aef5fa0864358146652cede8445a1cebccbdf9426cc2f6593d394" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b9e2705d2f627f408b43b81d8a1e9bf541bcfc198536479892d530046897357d" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d37c693a4cdab827eff0dd1e2ab05c430667f357bacea1aab4ef8c645738bfc3" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="333ad32f294700b3ae4346c385c00542944fadd527b4428a16ffc0df7daf5ded" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1cfdb4d0d7cba4ff1f31d24ce04598988baeff21f2347be80cc248c61189da92" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="551279ddc58f9dd98ddbb200326f18f0e70fb2d417544fcf1ed1f0adfbfbb7a6" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7a4f74c820904887d46b7867328ebbacbbbfe33262c87f5f0179639a2e5b5a84" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="3040dac7b6d38c715075b67216357e2b2fc1eaa6e0c3e1019cc4f37f8fdc6708" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="48698b3a82205eee5e78a8bad12322c9244ca36f52931a7540bc1c9b7f295d8e" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9c1a82729a1d72b30bf234a38ebe97ac043349d17cbd9670900f15e9e407f2ff" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="32879db0f161ad5c45fd6f00dd29e7281e2d8036879d706f696406bcca6feb55" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0574b12a0ddadaf83fbbd1964f33a58936097e7183fe2722b04a22621fbfffa0" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="248bd0b5bba299ea8a6c340bea94915e3ab4384d119bac52853b36d3a9981cf6" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="db545969f4137fae9eeec358fa762b3cb19ab3a55dd299c2629ddfbc2cbf575b" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bf0905ea7638351d7e45f721cfde88a90afb34c60d69e3710b4b25f46aebe83a" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f1e45ed38543834cb3ee41a83ad014bd9e50af30c6dd5cae29fe7b8fd13b2377" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2e27be9fb8c8d736af3d7ae0298da6565404804cc755e55fda8672115a11e4fc" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="de7bf06bb3b64595b578f1f6cbf65cb2417ab4f6ebcffa7a8329bd5f000c92c5" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2f637c699feae14b7c4b6451e0894ae671d9a7bfbb81dc8eae619943a16b9396" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8041ea47c0ab3dc2d0aa681f4cab76606d7f2dceeacfb8bae385cceed8315093" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c9261c1777c70ed1a48eaf75204b2df6e4157f94dfcdd3e5421163a2de914b28" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5f462cb4ab0a447cf280ad0947839bde835de3d64bfd8ecd72a4ee8719931261" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8f0e964a32f2ea0258cc62315d107ebe6b97a6507073be57fb22bdb7b812cde8" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5a924e295ea0a35b29812054f8873f543ae0b80bb96f80f0194d799ecfc1a260" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7569e80a40b452351dd9640082f2424c532bc15340e20b0d2211687fdbe07212" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="048dd2e4ce8d35f10c5869f06cf4852ec05f74be47f430bb71d5a8c4a2555d0e" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="9414fd412d088fab0ca4384113051c19d0ffc7081004cfd075b8b6801668bd50" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="befb8ed51c8ac609b85c44b4b5a8c8b25be9d03e2d2dcb59910681611ceb7e49" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9ee39f1b1e6fc01b063bd6996a59d83d54b0ed602ecd10e654591ae4ec0bfec1" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2410128a78082edb4b3fdfae7fceb08d2a859cbe9529d696166886846116448d" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="878a2b9e051fca09d965cbeb77bb91f590ddb2be1497652bb5135aa80d833980" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="497c2ca75f05941fc5eb150ac33bdbc3bbb1edc618d5860cede1a49863fa5dcb" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0c4ac3f901ca21a6359ed83fbcf2f3d6e35d8d3935e3c30666df28a6cb983092" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="269fabf991b0a4580e25f58da96684be715d12d0dbdac6236bf9f4e178fb1c3c" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f58718f3854c291ae6cef3d725443903cf579c5b8147b156bb8b8d710afb4a96" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f8a2600a9da0e62afba093c11ce9213c7676b820753fd73de4c519264f06565c" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d486118c0177a8f303f98017e0637fbae123330ff4bb0a619ac5a48ac689e4a4" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="40fcbfba5144f98a5be74f1976898afd17ba902f422dc5669951cb31683d156d" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5adb002f0755f4d6c834a798fa7e6d27ff73d09ba087721d8f5d607202eac7ca" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="973b512187b2e5d392b23ea6ccdafb3d2c2ad433f1b1310c7c21b875777ab869" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="67d49f33c7be5b7a23e4d8099ef5f15ab5da1696a41ec3a7e3ee14c9cccbc27d" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="96d29e95c4cbb926c4bbcdb8d94931fa444de4b54551e45f59c69abc762f3e4a" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="55629ebf84e7b7b65a2ed27bb1621da7b97a28ad94ef41cebc6681bf0bc572cf" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="710e389634d531a0e85b6eaaf5f52f9e0f402babf6710afee9414606ca1d5222" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a4a00b6c2b44a654baa4b9c059fb7af5838f1fc365f7932f917099eee4b1cd6f" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="7d261829c8e8c3d23388e5a936c928b5d8f8638b4b746e1b6034744642ed4692" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0a4b24ddc9f73dbf750556d6ac5066e7d66fdb5ba3ab3fe13ec89b29406f3ef4" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1144716fb2a5508b4c13444dc5adfec21a391f5c6af39bcd42dff354a11cb381" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="40594c4f26e6cd1e273f3c916d6a3bf71afa23da60ae73d4ad034ec55a5f0a3f" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="480e50eb9e7e57d95daabd3c3373e1a8d5bdea3f4ac97241dacc3c2995a40b3b" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ddf79c88ae86d7d037e4839ca91a45631a8119246e17073bbc3992547cd38e26" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4019ef288d47ceabe89288a688828dbac3c07e52dab4b9c5526a6cfefb64c37d" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bccb301e0dd4709ba8bfb863f59a22c00bb5e24a649545eef17a208efc575ff9" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ec7b2b176f0f84bce9bf97ce47201a49597d4d1dab50b7a21aa91b672208a2ef" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="12b63d9a3dcb742a8b06b027d0c53fa659a59a78af8fb5b401b94f8931732b33" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="de8745aaf0e253ffd91fefeffd4d8f2cde6555ad07cbd2cbd46faa6c9bf5f4ac" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="799d17390eb5b65294052d90f71052a66cfa1f270f6aa2474d1691c95889b36f" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="17efaf0704462647d36032db1c53fd14451fde1f9e4c30460110a58ee6b789fc" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3a3d88796fa354c73c0b8bf2a01bc5d1cc12290aa5f1cced45d6274426b1bea0" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2faea7d10ca2ca7c9e4199595d0090058cd51a086038dfb997f1541042f33ca2" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bda8cffe836b1d39ec0c9b414f7bf3af1e92b5b18d9de57496636873873c9d09" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="82440aa9fe9a33a9855fdc69be79004684e9f6830a2d8a6820c7ab93dc95895c" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f9c20fe4f23c7e8fa76a706d31ba3688f26addc92e4c622fd03e1e28ce2b6571" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="78a3488c65561577da1328c51a99e06d58a80f76d19a8d88e57f505ee9145005" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="7ae00d3ef9fb48a2689506fa35ded67fb9ac179a0e5d4c24a7b09d12e2a77e11" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0ef464da2c385480691e7b15bcc928dd55f39c85cb0f5877331c4ab00c07626c" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e040ad8a7241cdd585175cfa651c2ae4f3ade8115599605dc316dbdaa081fc61" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0c3bd1b15f8c6af6e46ed8fa0c1efdf9d68075aec04af19d438c6ab80fac8847" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d85314875946c1fa63009835622efc182ddcf423171b31f40e1f2359a528d0a9" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="24f313006b06a4ebdb80ea4884119a667961594d4a8c7c034da77941479bf4d8" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0e3fb5c6ab06ad786976f031b80c40bda19117ae7ab0a943783d8f3bec18bc12" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4394091db242a4680f03bd15ff855fe4c93e66d685ea27cecd94605bb0cf0bd3" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d6161f1728e621f0bff2be0c94b303c07898744d2e9f15e2e120d8192afd9304" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="040ddacc2921742cce72021e0dfb700f0fd4965e61c479f3c052233f7fd745d5" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4e1c3796a6f25320d7acca89b6240b1e910fac69dc6a51e7aa838abe56e56524" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="aa0c46daa8f486aedc096a1ef12845550a73a9fb01f7a4699e83576a00ecec73" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bfa660e351d70113983d52eb6744a690d035db8a7b52b6f7a7a79756630820c6" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="679ea3b35f9d0dfdda025fdfdf25bd2993562e4d50ac7f396766990699336405" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="06bf0047f4210407b333dcaac34ba0d163be21a17cd3a224e7726b1f940f3815" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9faef4c3ff3a981b77bdc4f096a2e54543dd95c399ae019df6b2818f36eba23b" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c75538aa84cff5be1d87654ebd6c931f99267b2f2472192dcefbaf5ba9217aff" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b089fdc55771e5852102d7dd0ed21cace2dd64e4384ef3eff015e042827fed96" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="235dbcf23308012754b4ea8e752a9a6fdee65283dcc3d303d9fbe761307c9c40" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="c497d81dc44c280031625d6b33598fdab6fb6d07b7f408b1d85bf0da5f62054c" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d9eb12673f9c7c033f0e9e9d074b4679936e0bc2d8e344b8a24031b0973d9700" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="62ffc951b1f2cc19d900302f089f71ddf4bf9010dd4f5fb10f20626a845ce09f" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b2fcbc01be34b15d6dfb8e5cecbbd2d0b1b6686dddd96f424f9e7067375c6792" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bdd9979fce47b534445f43915819aff595bf19ee2992abd7aebb8851ab4f5b8a" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6847dac32adc01ffd7424f72c7d9bd78e7ae506dee2b2ea0e56ef681faaab68d" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b7b6dbfbbb90a3981e2b964aa93a6afa8f8c050cc1f911dfc596887862f492f0" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="fbc459a65a53629779391b6e7ec9f9fa51f13d0a61cb07c3bebd4b4d9f4d901f" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="febf18059a204f38f11f3084f69a274dd981ab16d84e5442d34bb3734a789f28" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="697326583e2b9b9c59440c002327e56e479cf72c1a30210f3ef7b528cdfaf2b4" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="35ca8b06c23a03949b4b06793d336057c582d8c496df8a6936f5d8dea2d73658" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="cf03dde29661233c2027f5783c67e1d03af03c4b568afa18b2670ed5350de1ee" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="cb0fe75e2b4a945769660ebb3123cf2dc17551ab253e61ac10e394ed76d0c3cf" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="92e4a4f5f3cc4cbbb5e37ac3f21f5290c9f678c994085f7a2f5f094d31489a84" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="90bf3212ae4f7d42cc8df84f329783657c74d72e404fb3a821a24539be7503be" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="794cd89d24a5935f5108b2a250e4571858ea13f6ed4275c8aec77ccdc9417de2" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e32dd86bd2f3cd2d50f980320a73efe1a8555f4584ce5e7a3eab7b6393af70c0" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e0f542340a622df1b5d4b6e621af4492b25b4cc90bb7295f3418c999b0fda3eb" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="77040b4339e64712f38e90fce3cbf695dbe471cd5409885423baef8aa71529c1" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="a8355675158fc819b5beb177d1c6babdbd752a46f65ecb815df8a9a7818403db" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5244055249de06a0d73af381d63f65127c4b8253c2aefa200969bbbedb563354" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4fde4b6eeb32b484441e459e4f13cfde0fdb5a60ea271314285b2e64dfadaef3" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1051ea8b6f5d4af5b65e1244f1129c0e7ac2c2d0c8732bce9a1e2b032f706965" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4ac276c4862d503eabb40e6ceba45039545f8fc1f1966a9b56ed296f56c3b1f5" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="16dbb30caa3ba47eec219dafc3ff72dd7f9d191f900338e865e30b45d391758f" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e5c735e993e390a144726c7172b7c1821d0c3b29fb82bfa02d92e589acb98a3e" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="012e6e3be6e007f90c00d62d706bab13d3226f5d1bdf32f170e78b9d979743db" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5e9db0534cd47315883ffa5954b866e2f333d1b14d43f9d42841d677dbeaab15" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="983e83de715fe6ec1ac58261f5d6190e0135d0381bf4700ccf0cc532a81fd19d" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e8839ad029c7ea5f0e2c89dd4b49dfe713548fdfa96971eae0ceaafa4a138c09" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="fefdb3db8220bd9f0271439b673408a998db24b28a30280759a981a40dfce91d" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="aff431b51f035e4433a460be98a5cad9d0ed0888b175ac490739b3b81626a56c" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f92ee76e4fa78b61e932e7f2af0cfb706abb0a7ea20fe267250f17c2c4ac16b5" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="27efc0b9923293b00ba14ee1f6e6b6bbfd4b0b493e7210c9742048a24d54ffca" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="314b885f28b8a56bf4e37131dc3ef26d976631d542e799ca94fa1ca630c47850" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4fa85cbc8e3666d7e35e0ea184fdd30d9e3c0751c71b54ad7060bcde28987b76" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1125e76687c7470f4eba64706ad340ff3add5d674d0ad08789ea5d5cdaff6d16" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="107c3b665393c8cea93bdab5013385825fe7b00482a8a9da51d8a704a24d7677" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="a0fc8161e6f20884af4e64d1eda7d00716494fd9241d98fe0ed160ae029e9c0a" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4cfe6f95f1f8214046bb1387d4e420c1e5f68f9cabb6b9030945e2d0908a8552" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c0f6bbe802e6a14dd3775fbba506b7aba69414983183e1fb13b2fcf0421de5ad" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="725e9589f5c1c776bd122ba817a31427894ef5bbfbc63b0d2713d068a070ce4b" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="fa9c0f41ff791c82acc9c62b44adc007ccfe737e2562b77f45d4c55b96819bb2" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="18ec8c7388dfad19f5600ff9ec9f1c80fbd0b018c2870dcd792c6a3445dd3d84" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="fe105d75b637b19dd8696776dc8f1b24c4475f6e3cb6f4b83fb7f1f9f296bf37" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6280fcf105c88e8fe61174b7d8d74ff6e0206097f5da8875e1a044fa755665cd" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="49ef236a48992fd3b6991c354c42466887a9e16f367b9897bb82c9cbd182eca7" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="32e95ebfe60a1885abe87494ec210d8d85f5dfd080160b91f815cc490d034c8d" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a845d0a5543ad13d7a0fee5f84df08972c11f024c288b39087ebf0c2c891a083" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f563982b2477c8e8bae9e3344280b10da31bfff1716e9349529a32133b30a5e3" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="24f123440608b8215c840ab3420a1390fbcd5c12a998343a0c04d5fc2ff808d6" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e977e8e4482643691d19bf09da4ebfeb6233e2f63f7adcaa59a5b9d25321444b" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bf4b5a602144c48e4fbd8c8e1e68f9c1b66b1760bbff0d2481b526bc0531a1f2" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4459f132ea9cfd7e1d6406d7029929ed9896b4c847a950602709d1d3691460cb" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9b6d5c5b641f73b0fbe0a3a87500441ef34d02842f33cc9fe76e296623c4dbd9" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d83586d6b1f8f309cb3f92bb67fe84a44d4de8b4491d0f2304a2c478e623e039" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="41c155e320e335803591c7b9dd4d6f0d128e24b3ec86423067920a052e08a29b" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="195f517a48be7d50a4e382753a9b15205c84db346fcdd15d9a70a37776f0e3b3" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2671bd542bec20c9f7a0f6ac180f3d211ad16b356759437e0a6b3df755aaaf5f" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bc3adf129a27229a347c8fdb8a74abfe7648ea924635093b626e072d06699e41" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5e10c599edbbc3db099f1159eb1f6382c54f95fc8fd13a8b8ce31a270ee19aa3" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="dbaa69beadfae0d1ba35b8557a82df87662d24d7f59b2a41899c753c26fc8cba" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1f61c69de991f8283cdafe4dd665a370a3804ac44e0194b634d9ff48e0140f1f" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a78273a7386c38f9fefcdf32c752feaa866fb5c6da820d53425b8a42a9caf8f5" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c618e5d7fb9cc0dd584fe7ca4408e9cc2169140ee9787278648577eed00dc773" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2e78af0b7e2a8e782cd31fd7476f0bad3e5ebbba58a499f5afb8f1345a2804f1" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="66be5b4e475d33e4bfa65d3ca7439144f58e368bc6caccda97d94d3d31bed34c" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c2c041866914b556ddd8915ea149f2afe317a2d67c124e2552c9cf776aa42fbd" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c5dd1155e1b93414247a4b9d618ac1dee6a78ea6d6637655de241d1eb1ec9bd6" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ada18b9f2e86476b481fa71d43fbcebf5e3deafffc26ab6db18172d04f5aca5d" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3ed96d02d98a17ba32403023518f2f95758e3de8d5c14b2faac5404292d2f962" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e19b093107836a02242cf42fb6fd423b5588b472efd63b721d39c6587008af29" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e9de9f14837e89817eb99e3689bba6054c26ef2b10b99934a7e28a70dc377adf" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="122bc0c18f698251b249042e888b09428aec7cbb30b8a406cb835cf90b5b5d68" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7df93ff801f03be051647be253fda9a99a17bc365784fdf559cd05aa4221aa04" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6687e94203a2a152af07fa4f112004a8aaf0139053bd63c38ac7b52bfaf9fd1c" name="kernel-kmap-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="684b021e0442e364216638939af6c26e0378d175405c538fbbb7f4fa0c090d18" name="kernel-kmap-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c03c3ac5ae9597eb581d25c54319f09abf8a175153b4768783192b7a0ad85139" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="0815a20749467e2ebe667773a053b9094b5fe952f4a7ed8b9ae6f27550f69a6a" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f8000eebbb6d6a16d8c31248cd555d41ea2f882a1270d0391e4efe4c2f42756c" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8e073e970c6bd5442325da5c3cbbda3d8e0c9f0b90d5eb50ee2e52948c1c54fb" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1eec9ea7a415038a64534af0261798a3bf869d232888b7b498c7a00ab4fe79ff" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="548092e9ea6853ea7f8a91c9c504451012ba8d0d942d3183c3c7b989498311db" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9c674cb0c6f230007e0da8608c0541f7df735eea31f7ed22ea22ecd9a8c8bf6e" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d12140a9092a2ea71a7ccbedd9829d6d45df495693d4342e84db208a640f56d4" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="51119d8443a07ef7792337bc0c421292eb1d418cd5e98ca9853772d89b42b400" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bfd35b2f6607350d0e54d537cd8a86f69e190aa17c3180af67a8100d34501c4b" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="223de9970571c458ca6a5b93f4d703fb08b02d109f0d9bdf5438fab4fa4b0d3e" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="285f8d01c237028cec08fc2172cfdea3dcec97a86f5e7cd454a0498e885253ce" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="59e061aadd74cfecfc564a739a055217a8c567b667b9252fae501820a9f1f5f2" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5dbeddaa1fa1c10103531bf31521fb9896f0b8206e5ba0dc6eb5a5ff5c2aa914" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a8ba4b8f8bd31d93e64f6c7f3dd1f9d0a7d0fbe3a1ddc0d1f688b2204e23e4d8" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="071045d77157392574e8b9185dfe97de6baf07e4d2fed5c5fccdfff3cd641ecb" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6a6054008e58896b3e6d8bc6976d26bcbeb964b196513c77c65ef6ac057271fc" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="535de5d27378fec4628cc832af812a3e40c0b49b9a7b09da156c7c12b05e1437" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e27129a867823f7363ac042296c20df931724c5a380bf004fc8de49b447f7a31" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="816fb6dd195c04f790a65d7003961a09b6f635a2ee55b8656c69dd1afdeea8d2" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="6db69a169b2436913926b10088dbe573e4f80e6294e9cbe47cf9bccc512ec95c" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="061e026488d27b9a1bd9354cb3ef1e3d6fdf2c447574a42673c89414d4c574d5" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6cff9386d2bbfd4580b6c0736b6cc398b498785c4c97a62463c13666ff261db5" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4406dd9f1268c6f14c64dce0d084f2acac7ec4e07763e98ab0f2f267974c9392" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="790c623a65908b64fb377ffd37694a08c02859a627787348f115b20ebb6faf99" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="28500c38c235d3f943d54ad7b46da191cb832c873e436d130e25f06ffb792263" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="88cca67ce9865acedab120d0cfc0c714abbfd9f92c1aa9e63fa21fdb8215c329" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2690d54d14bdf5de9bcfb230d4b79e6a090e4e86669c97ea709981d820720438" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9ae88b04f2f1860887c378493fec4e96e0a94833087d2a2426ceab0033090cda" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6889208925f883a0f73d9dee5a338b98f23c6d3554aa7e21561d35cfbb18ae67" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="98c828e44776af5f996536325fb9d4498bf671e58cddd61b0b5cd1774cd678c3" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8d29fa1a756d23e6c9b462ffd47bfb8b2ffde7886ac60ceb742e123eebb763f3" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f61f5a88df40af47934e97c2e2ab9810b2fc01e5f6b1cf15ce361c636f755a85" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="78a6a00ebf5f60169d046e36de1d5d7aa90cae2a08075012ac919fd0e2c3c89e" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7554fd52285c0bd793039dd22b62ae2c3c3b3462e7b49379fd0f10e49b533d40" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ec1f3e2f6c4e74dc6d053bb2af79a0c8c4cb1b16dd134d1c9c1dc41d883fd1c6" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="520fcd499662ba7391eb72880357aee7a5f4c3e950780e4ed58082942a867091" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8b7fd9f68add0d6037dadc58f42f4914197e12ac8cb3689834f815a9d42a52fa" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8db10e7d810b5e7b4715a02be3ecc3695f658a4fcb53717a2acf7f9f1c363ce0" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="090d91b0607aa07c3f2de7d45cdf3369185faf490719404518a9896abe2841a0" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5377b4b8b67914ece0f362884cccc66ed586ca6ed092690c40f98932f9e2b5d4" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a65df41589b8d9c863d178a0b946e2d6fa7760ed294b0b555e6fc2bcd54fd6fd" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="65fcf06b5bde7cbc9c3df607ba488576df87841fd73e3776d157a38b94430578" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8d339a3d9a054a8a9a365c1784ee8631d52f68cd57e7d200ce6f378e37c16564" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="cf69eaabf38efc115530b771e84c4e5b776d3e91a562fbab1ecb51702cc52b6d" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="135ff7aa3ad594dbae51692039d8cf7748cb9a6f2a2f74eea1e09ffadc0656c5" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2a085ea6846fc91fc7b47329bc772408fbfee3d9d34fd453c06b978e19d40ff2" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="62c5fdb1639e386c802db65fba173222f4007416927f6182baa8eb8af3b9f141" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="cd3dde004dd27e45e0e498dae94966c7d517f8ad5a621c03e91e11ffcb49208c" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0643b17451badd91f30203e4f23167b6be11d2dc47106363c5de9143708f21ce" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0b76fa088d66acb459e38f902e07f5cb6b4525b71e3d2520b49f5f3454d02a95" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c57be018f3ae52e2f187672940bdf30df38578e78b3e8e3a4b5736c19a4fce3b" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8e54246e2db814d6452b47ec853418f7f86e471e3008ba066c97aac02f3320f0" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="92f952050acf7c5673b5e0b9b7bd980e3341b80769e246cd43da958d6bf9422a" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="28286a47f5c354b984efcd32afbb15b2f9c21c17390bed74e0d1a97f282b3834" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5b1927e47eb96a9f06d23032d46cdf764fd1ac194ba1f5edd39fd4be2423b69c" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="dd2d501087e67f3c8566af75f3ec5f550c9d099905c33e6e604494a318db95e7" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b2115ac489fbb57a15a9e50bc38551eb5e1b471a80cbdcc53dd098c35afd7381" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="6444d71ea80cc38658fdcd0724128a0705545030cdcd794e534c93ac61e11cd4" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="954204cae8ab3df698cd9f3d3496073470e48657bb45caa8d3d45db2b0a3667b" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="859942c6b30a1429c02f21b5ce49fef413953987e0b6c2252d2e6ab4ea4f583c" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f5c0443940bf69a4bde3238bca685cb5e85f2626f4b5bfc3157e5e3193239f35" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6ff6cd8c1742b522d6fdebc35147bf8fe761ad654ae69e405638524f6a1f1ceb" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9c01052edd620cde23e1ae2ba6fd7312e4791ef18257ffafc02f7ac88684befc" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="455582ad7eb3787a848740076f6a00b7a0c9352a493dd7e0cb4c791a0a1ce7af" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="fd4edd349594efa369dd7cb93e14abe0791beabbc9eb83a1aabce578b57f4556" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="63fe7d5dc79789a6291febf70e6cc51b255580f0c5c050f97d46cd6b09b7ab39" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2531251745d29c0018e536f42a9b6b78623ec1710349f3f8309af41713cf2e4c" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9b1b9de2b1816ad55f0e83d69cc8547a49c39932a4189d76ca0de26b21e0ae10" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6fbb178c9b9dd454069f70e769078aa20d3f7d01e94ce208d4d9ffd7ab52d8ab" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="61ae477c8ac374d072141e95dbc30f3b96daa27e79f57009c3096d5f027c703a" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b51f8d006f26cfe1a4df77f30a95684cafb22d53b7374c6fb85cb8afa769cb15" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7e26cb3f6b84502a90d20ef92d1fbd2fb3f022a4b6636a5113d97d62a4e0af11" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c9c34b943c273b82a1fdf701f6bb5dc912d592f73972e0a157bc1e722a4b2e7c" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="418c21fd8bddbd41f8a7820c2be715f8fbfa6db12aa0a65b09bdd011d8a03fd5" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="997048c32d93b658098c4283f048860f39f787a89f6a6a877fc1641597e173a8" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2904d2edcfe5ac605b29f37645dc16363a83767e58f717776d526624fb6da132" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="37b23a55261ac9d0fedf50e29083106b728cc603e7158f8a1c452da8e9cd0265" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="dba9a9ffc938afdac4640ce76ca83eb9d4c01533eddf659c9eec26ef6d6f875c" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1c1fc5acfcfd1baf88576838f80f00abf29fbc0d337d040bf71fc5619202dc0b" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7c66a4c2a7e50254430cc88c7ec9cde55e8a22342448c1a7f156092f26abc92f" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f2580c724a7bf376b2c8037f5a9d6cc91fa06e4e476151b3d00b801233058d82" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e6278d96368a86a733f82e4ff07752fbac79e3378f6a1a5c91a1791b95d1b500" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="303de2de651ab35b3e57d6a5c01a3b8a96d706d3e18b53f3b69395fb74391a20" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="57145229b7ad4d3e4e061228eca759223e44296ee6c7b13a225e10d36694a86a" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f12a004ba5a12677612a4ffc869a90d58a1956dd818f582c39560bc2c6d01697" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="945b1b14b8388bb21f9405572a3a69ec0d588d52d4b75f8c8e4e91900ae7e3fc" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e3e9daf8510eca5217e73fe79f382c61d126145654214dd03d07b1ceb8c7ba53" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="164f02d0479933b026e1af6aa35357ae3dd99a57262f752cdebb7f3ed759628e" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="85cbff3f678c8aeb89530a869037c8d54b4308a09006941b37b058abdcc059e9" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0b24cb63648fdfb3498460e6efbb6edf60f759f992d49fbff7908bbbfaef67c6" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6b1c56c203b06bc0e47977c0915d96294a4c2430d2d21aa0aac80ae4accf7bf8" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5fe5c180fc6d601a3adeda41157037b082b74f151dfb7219243f54aaad3eac24" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4c29dfd4ead550bfb157f341a067f0e1f91949f9098f51009f72f0c530e9803a" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="420ee6e7b28899bcbe3a099b63aaacf6bb975f1d40f53b4aa074f16f42c25363" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="45763fda2a38985d8d2fa1e25e736c1d4bbef2a65473b1296f1de6232f8ca4a0" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="3e7f98837c66d322344580a9019674513c6cc05ba27b57874cf3ef40755fead7" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="080734bdba0ec5abbac470294e32ae4905ff6534f0ed6e09bb4b0c5a25e09dc2" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="795b8f613055ecc09d0644f5dcfddd839759eb32cb6d50955a09dfd86e86ca03" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f62799802d3714f83782c331f8e4211aaf3df89f66bcf283b5498ca3bfb5732b" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bd66ae6d4d0307e121aabadd01ae91751127652cfc8df2aa8c63c6ae89ad1234" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e522f28d2a8b968c6f0bd49828cf8e7355e283c57dad37a0ecda851ead8eb372" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="24770194b9ed9f38636b9da386cfd9ccd31fc05d250915bbcb5c8f22968f80c7" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f4378f7e2e32e39752f6f815003182898b2a95e51c465529a3bc04a86002339e" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ef4b63f6f93973f818f754dc81370b19ba7a9cd60993961b20faf850bce79f21" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="90036e2123bbc8fd0bfacabca88c8ef3056b339b2a1edbb9178f4567fe5b38f5" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e0f781a604b94812342f28eee2fdabe74e588d1b4c4656a7cf0d1d8157e66865" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="166d04118e289b568572928815a46151cebfd509c2cb8aded69d84cf02c0934e" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8c1247f25bed1688828f236fef234837e27899e01b8a24594f500c86e8bb9ad5" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="84675e63e2f3b26d95a35c7f228f3f51acddb234174f0ddfb8bad7c70879ed54" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="31ac3d86e7fe75ba0c0b6e590215dea133c00f01a2533741bc03255ea1de4f51" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="19c664c91c37d1630d829faa5fc30dea67bfaf9ee5f6e80097345e766783b9d4" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9cb7277bac6522988c3cfc1df25894add5da452bd52d24a48ebb8eca7b1f15ba" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="93a305891a11af0c762cfd7e17037adebe595f5b9823db85d162ad5536080bd7" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2c6cc046a2bfa48e7410277d112bcedc1b96fe1f3fd254b840f4dd3f2b4e26fa" name="kernel-rpm-macros" arch="noarch">
  <version epoch="0" ver="205" rel="27.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-21" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-22" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 1.0-23" date="1709726400">- Add riscv64</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1.0-26" date="1743508800">- Finish adding riscv64 (thanks Zhengyu He)
  Resolves: RHEL-85853</changelog>
  <changelog author="Eric Chanudet &lt;echanude@redhat.com&gt; - 1.0-27" date="1762344000">- kabi: handle symvers.zst
  Resolves: RHEL-124727</changelog>
</package>
<package pkgid="62f5e73f3daab99d4242b64e9ecbb2061f632dd25ac852370618ab394f92c768" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="ddc020488868e8596649e17e84931371d814da7752857f4179e327803f640d54" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2607fdb0941fe5dd24f8b67a595c3f1c932ad704dff65994d08ebe56a9f7fbb8" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6946bb2ae0f1b57997642b53b5b8e101f6e8a451d1797cba0588f186ed43b9a4" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6db35dad6e569cad70b6551971aec9a6c2053c04c3d8d4988be3f27b83ad0a62" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4bb62787514507d3d88ecc444dde470053397dcd9d2cdb5b141fb60ae65a8e7c" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1f0167dc6a3f8a992c3443928828afe67965850215df863134ecb5667acc3d3b" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ae95eef42d4942b8e19331680fd83868f5b988fc5023de710430a0e702198239" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6929f8670a646eb90bd23a759bef9c672bc47d3d1c14931c6cf9128a15897936" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f7115f46e3cde9a0f4df6f0ef31f2d17b3d483df191de6d5a0bb8a103aca03c9" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b3fd9a8d439eb2ff4c14ca126770f5d2b1c05564437ac20c8b971b0c32d9998e" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="363062de0e5bd83789bdcfae76bae624b4f9207b49063beb5c38801d3e8df5c8" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e21fb325b387730891c5b3f2576369e76275e23b9aa278fe5375cc81d85a3698" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="91a6231ecc8a4ed34dbc4471b9ff67c6b3027dcf744765318c745d74091fa48e" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e5b8208afe5ef1229dff923b9a547957120edf1d91c0208d509c7e5e6db95b0e" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="318afcc5f7937c5cb12e5fd2a7bab279239ea4d691154aadd511bc2887bb8555" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="780e639627735ae726dffdc914cde98756fd40c643ced90e0b46e86a5b9c3231" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e1d21337310b5201233cfe7fff3a0a845354824301365a122911a811dfa34098" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b7a1c7d181fbb170d449776093d8ffe425b5b0e87f66d1bb51813eda5fbb88b9" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="46d9e73610eb471492ff18212b50215b520c85a1656fdc2588141fcf3c16fdf2" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="a7b642b12f2e594dfe72656843fd1144bcaaacfa8df52ba0b511fff9090181e4" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b2b00f744dd1fc8d8ec55f439a0ad3dd0236e16582bfb23eba1ac50764933cf0" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9776033470ab4d3a66493ddac41141baaf57d1990c1ecacdd17260a1f5666372" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6b02953b9602a6f4240e9e18f9cbb7dd2c68d876ac465bf46c9dbc3d4642ebae" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="686a525bb2acf7788f622fa9130f6967a4fe2f221470b0267bae12de04be67ca" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="752c53730e3c5b1faf3ec7a2adcc28ccf03e6e986edf617ad0e251a38a93fa17" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="71fe0deb1c62fa2dce05f33cd5961cb261d3c0ddf2a34eb9dd95d172dff4ea36" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="776808c1a6d3bc0cebcf1b3475ddc5b7235592ae036f5242faec20c996625b09" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3271824f4ad71cbc0464e3eeef1e13ad4b31616395a84873017ae9c73044aabc" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="65ef05b01d780ba8c99f107c92440f984bc3fd08c63450f11feeba634d505559" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7cd9c9a2001ac0b7151d301e1c8b0f6901d00719e1c1a3b4b13febf87d7bae95" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a5b76d8ecf74c8cc218321236793564a0368dab4a5c8574175bca8dba57f4d92" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7a56986c2c3764867a856ade625324a7c338abb5140adc79033c63f9d1126362" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e0598aab49d3461dedd9d6e4b243ba5b69fab189b7eebe837f5a9617348c2e6e" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9b13f9008eda1032bf7101b9fb083b22fbb394064b3898124b5dab37165fc362" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3be5ffb8f38dcddb980d0cbfd98e7dfda53ebccb68db60c054cb1b12ca594fa5" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="dc39d564e6ac26da792e68fa7148fef90d21fa0bccec3c0eb55ba96142888f8f" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9583e260a0aef1652bc029c67e891636a899527f66122643926ac5c2d7a2bc67" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3f63762e5b517f9fa9bbdf132fba1c5f63900904437df75a726751a3f0fe56ec" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="55d7c6d946dd2e38f3d7137cf0a59ad84204afc79a9351c3e50fdf5234471e8e" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c1744e060b45d46ad35cfa2cc9491d48ff9b1b74c19d545c11b7fc12b3fc693e" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="57bc337127abb2d9ded7a64b4f420799baccbba3bb4325b05b74551125bf8532" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="140773d3a1ab99da0598ab8db68a36d94c66fd496bdd673172b5d3d44c577913" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="adbfe66a9c61e337f1b3e7a01411c4e33ec9c2e71e9e2ad90219c16388a80e09" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="dcdfd7f3c37061c6741b3523db0da71b84b1b784c7c4e37b78dc48d14ab101a0" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a0254ff06824d0a2c0e70c1ccbc7a06b6f15e7db03cec0bd57a78af73c3ccae4" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="68c2235d28055a9bc33429d36c80bb92b81c11e01db388e2b57708bd98c1cacd" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2cea05ef5a3bacbdc7cff4e4a961532014c5a697cd50da9f6a678b7c042b21f6" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ea4ba186bec57a713b5a3a0a68c1b01648341b354c31cf7c9684dac252e0fd97" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ca21b2afd5d35f969e5e7c15c75b55a526333f9b28064ac76bf888d9e0a53cd7" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3d5b3440db8a5a2819b374805455f4a5aaff9766dae7c43114877c80951b2158" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3865ddd54ed09c651f75daebd6ca4efc0adaa8ba2cca98bbeca551b4b6e909c0" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1b8510a4c49ff92e224257b21bfc0ee86883e765152cea5dafd5b73a22cb64f3" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="57117b624a7b07e5bc369deb0c3946b93e2e7ab8e6bb7d068f5fae18b4c6c8c1" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0192c2018a23fc3fc360cbcbfc87212c69ab89eead2813447ed2ac654b07bf0e" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="771c2531caf7f135aa102caa0a86007873001271fd090125be88ad5c02448775" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b39aacc86c42b1d441a3c7289ffbd088fc1fc5dd16c58e47e357202196be8f82" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e3d13f90e83b9f9f28ddedfb2292383da0b93dcd0546b1e2c07c2862d08065d6" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="1590d892d72fdf504b1844c93184279478b7f8220f4573a7afbd8b754d53e673" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3872b217d9e0c949e6f4cf8a80f4fe56ba3ce39f948056807e99d2ffc0b7841c" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="14ef5ccc6cc1023923b7e2718a847d48039aa313b827337105e269a963463de3" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="aa857b4c7f2e322cf71e9dfee8151f98620f462f7bd05b9d04be49ea4a5442f6" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5ce5086d7e03742ebe0b0f750cdb9f2fb691465557072da949789e7641aeb98c" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="58241935644432eaa143f9548f22c1f2b1ccb09d8721afb80b5f0391a7ae387e" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="28ae95fcd2eab1049a3a9c1b094fee676522c53d75734d124d4eaebd51845a01" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3d6f2efb65999c9e609f220ff4ce4360b2bb0297838e33c8d42a5f8311997395" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="07745534e680115c66a553b581452aa00b25a27aecdaf4a920f3a0c214d0bf14" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a024b35d10d8703e81b03a2325736a4b6076b1bfc48ba025692eabeb25283b17" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="90c8712f7ca299535ee530a8d2d437e795e7b8f07448e6af085e0f37354d8ef8" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1de14b98b00283e74d6d3ba20ea26591d1f1e99911f2575055c506f11e6d6909" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="11a4452be9cbb989e1a3c920e395c56d2aacc01ea7096e1c4ffdb898007d0ff6" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="86f26bdb11ffc2b1552f25e25a22fbb35f6383d09a104680154e1bf1632613f9" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="029d67206932553e9e285778a9e07a9ff6146e67ed5f5431db2f85e67168e26d" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="46c61f61dffde44db7759905a0cf8c6a2c4c60a51931345ed488c37b1543b090" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="fa9b5a5f5de7da049cfb228ed64b453b6ad3b888fd6e75900c21b958e3d0892a" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="812dd64021ecd9a31741b9131c7f0f7e2644b251afe63114e8bfcdfd8b57afff" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="293c0c1c73b46a3c80d99607ef8baba4552379df624ae9cc3e8f976217a78c7f" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="3304b2b4cfefd8481901812f4c3f5c26446f89a3f813d0ebcc86789051696e95" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6c2a23e12c552f3d46138023b353e3834a6944d04b2932b5d79bb0fe181e9bcc" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="033a7cffb74077f65551d8dbeb545a57b84c440a6d777ca03f7169fc96ebcc31" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="528f3e9506136011133ac47a182621022893a13dab302d9055639eb3e86f88e2" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f887f5bbf0dd8d024b01b5adb5d69a77325dd4c3370b103a01ca1decf178bba8" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e5411de3f33c5c00b719fe82b9018ebad461f2ca59eabb3669e2ca7d9da0756e" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="81e45d7343fb133a48ce0ef73381814ecce9d739887f7d8dc61d1fa387d4e313" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c33a422e07f924dddfe784024d552fe317d8650a943ca3c8c36662ecd972d6d3" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="dfbc8da6572501436372eb62a25138a6e96514a46206628b5df67eaccdf5a070" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="365c685017d678aef8ce7e22f9d39d410aaea2d6bc166a3a13c4e16dfa8c5cef" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="61abaae5cefd30dbe5ad5b75972572b2b97c5341b61dd624cd4a49614cc5212c" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8ca01e1a148394f0e1391773ccd95568d225c695aa38d2b890cc75e707961385" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0006625a0c34242a3055981bf54e6cacdf7947ee4e13de82be97e28173778293" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5cc75391686f9450e2cead7b75fa9954c40bc67bdabe27175c5f8bb1c6e1dd91" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="58de60a13d9307eec2a4c0c1f4ce2e9f522ae78f0bd3b5a265b1900bf27c3dc3" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2e02c19119d76a4bca5cac93639a649afbf901546b993e22212613adda3565f6" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1084cdf3c9737e970dbc5f0814966e016f8bacb5112e432c6abcde4eecf2e296" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a5c62b33f9e5698c44c376eb281caff001b2d4eeef1db27ff02745e8feea0097" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="364cb8263b9ce33691e66e8c905bc91519f45843705c4b671363d38361d3163d" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="52553b5812987d00c0babb755f0074430671336ce620ff79793a812569c22631" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="87fcf726067b6b56ec420f7ebacfa96dfcdf79e38d3e2f4313a95ba5b35b931a" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="31ae9d57f71a72e5af2fe9e32fc80a395814cc03298f33a97b5e8edf1d8ad9f5" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4ee3c065471fcd7ef82737540e6c5af843c1b2395801cc57973ce2dd16e544d3" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9918dd822d40f1791031b2ccb221e31378c09f1b970021ebf41028221418e7ab" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f685c97114424f6a812a4dcf5ac235b6a8bc6710421e6d6aeaa141eb05442e71" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6decde6259f41640dfca4a0d5ba29b46392c878ce2cb12e97447eb51fc7eb9b7" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c49ae5de4e57116811c1dd7bc14d9946509482ea1c3f5134ebfd0e709971c36b" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3b52cc6f308c01ee532aabaa9ba5d7a23cbbf28a2f54e47ce463c6fd6be1fa8b" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e605a2c8aa3da0cb366be646fe681d3f1601dd20d70c2f4f14bed45758749dd9" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3b380706ea07ea1a6012f51ba3c6f7eb7cf57474e1f43bd8064910ff367f55c9" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3368d4f3c836efdb27cf4efddffabed3df61b7e46457e83c6c2057e280451d1a" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="11ec359b33af436f6bf0abb3a5314e4981b17ec7fd8e24fdca67e2e6cd830ccb" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0c9ccb5a00a985868996ea3d2a11f3a8582d0cc3208d2299045ffa296daafd79" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e2cbd9f554ac5ab7b7ad7694d69973ac98485afa281b82b28b30fd073c2b7af6" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="42dc2627d41964c75185652ee90a0efb15e68c6b019bed51e91b0399a9bc8274" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e72441cfc6427bcb345845a26ecaf6f183accac7ce10ae5c0758e2703ff4f5cb" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c9a364bf39ab4d7d45524695b0e0efcd9908ec66269844ace246d748c8e2a372" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f9732bb8a25c21e126eeb08e53c28332591054430da10f5436f9ba74f8f7304f" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="4794e34de5f9e39b3dc0001966b04a8b557df95c7b59632062eecaff9c5390d0" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bf5d6c73b2fce1f6879f47a8264fc77922e6439a3e1cab4a3212a08484eda6dc" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bb5f89c4937f5efe951f6be5fd84cd7534598c3790489726c4ade67a0e56bd63" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f00344d8eaf1d270378749a6d1845e0d40b9ff529ce7d2a17a317331e32e1260" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0d2c614464a0c6f41c4383c0446ae44a1822c8f4ed1f571684c489af20408de3" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="90c796346c7f39e70bdca76f7e848d3d70e76cf81d7a50c6ed42551eb3e7a2fd" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f342859d0e6118a1a5fa46648bb03c4012829d7e76818a2670af9226e45c978c" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f6b9684f5b33a7d429a4aeb7f2f2b0e6a826f053adacaceabd7cff783aaf52ee" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="38830dd8f75fcc49b60f948a2b27eba268d75d900eb75cf9bfa903a6a03d3cad" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3de4da7f84f5214dec3a9d45f45a65b244da29f51c602e74bb13ab25cea057e6" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b6c40b3cba29eea395248d1f27c18c62456d67cc7c6d222db0be64ff9c44bb61" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5161a89803020bbca89913b6d2f7898b1bbc8870733aca7415a4f1e8af2f45b3" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f1d11819ebcd04eebd9e509990df6265bced8fc68ab154ecd316f339ce7c817d" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="572746b5a57f0b0282792cf3b9577c24c0d49b5a4a95143513fe69dbfcb9c6dd" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="93741ff2244229ce9b4e4e158e8f79f9e4c9f7d91c87955076401a8463c1423a" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ad1e8256736b7dd660e6494a77a131dcffb4eb740fc8408d71458cfa4ac64898" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="fcd8ae3f1e38fb3458271e861dbe3f73cf79324c983bf1b6d08cefaec46186d3" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="44ccf96063f4f97806e0b8c47eeca19ecea3f96c1b1abaa4578eb53cc5fd5016" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="27ee0d8438352757f7f378c735b099ee2ea16822626f42de4075e3e661704f47" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="61afcf7e4116bb8643248ade9f47b8437dc6c9f8d4d8d0cf40003c9e1d6bf328" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2122898680dca8f0814697794d7baf8f9675b2f7b4eacf780aeb13a3efcbedbd" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="89c5524c107e73c8bdc41c931580922caf3807cf771aa199fd8fc4e150a181b1" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="fc6eb22e189d4b592390e9db635cf1174931bdc5113c47b9cab99d0bbff191ac" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="00dcf1fa934c9401efcc80de648e3a918730f97f4c966ccb98247e7dc5689a3b" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="80607ef151cd9150053b130894768e0fdd0870addb20280588e68628855e71ce" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c68e6ebe0af493db7d25f916dc15a4bded056782d59aff2cd8dda4f2045bcea8" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6472ebbf52f6534f079a77cd7579edfd32d1c1d011769855c897184f82083a71" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="51d746689109ae9216f2e282274cf6514b1c7ec1a73bc2037a3e2ba52d5e1319" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="be73e8d0459af13d6b2ced3a428645bdf6c9ddeee4a0ae8b23fda1eb7eb31c65" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="cee35de8698fe467297164788de892a7f52b79a0a9672d937c6952a8f227e91a" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="17342b99c58a639ea2fdefdf764998b5a8df93736ee4362302533d978625e5c8" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b4ba295665c4f1d56cd01238403d70d74435d57cceceb10a7aa80ac2d26b23bd" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="38600129412d6a9ceddc5d3a59456bd507a962136258ea5574615bb09ea4cfbd" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1e451174124280ad444893f641301e500139c5c470914ce29e171f5f14e6cfb9" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b2fb2a649686f9181f69ad028a969fd285a19ed9c81281a570c27c3dba19ec90" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="81543de9f3e724042788c500fbb2f1de31d00f647559ee54f0f3c693606df925" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3373ef6084ddd90988f98e94d0c4e9ec7879f5d47248436254d9572d4bf22490" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2b35c50be8613fd051abe9b2508bdc02024541b4a7487d61bf0b8d3feef587f3" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="b50ba237993919272f2dc0328b29e298b48ca07809b10e1fdcd39b509a3b2f1f" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9065828421591a7ace2ba4126d80cf91c2447fc6944314dd3ffc83f8c3754a82" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="fcf6d76ceb87f7370d98236e7f3f8c2f8d495451b1b459868c457aed476561de" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b6edcfc119eefdbcb8dba139b33fe0e66e7eeca32fc0aba19dd3f41f8000d5bd" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="69633155c8cc38c49211a29ea382e9829388bb2ff6ffc3ed1bdda79ce4bad1d1" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="30f7d0b990e2bca89ee740fe257d158b454efbae1e44f38ecc9c0e99402ab454" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8fdd3ba2178d42c9b95f5cf4dfa7677028a7fbce608bc7d5bf74078064c995c1" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a38952ead5b82e6a05e1026226de2b618b74f8b42c7f06a6f0c35cb54921f2e6" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="559f87ef43b8274a20faede1654ef6c2f9692d4bae900177f7b95fa4c29b3577" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="fab2261dcce6cdaad3e8e085b318d6143c165630ad0b99229ed4382a0fb97901" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f53915721b3063a06a721bacb40072f5d867b389ada88dd73080b25989b5f3c9" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="14702550b6d26c907a9be3d3f9c4a235002d2151af4302c645c1e2fd60c3f91c" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c0f022864ea2c8bca32ae43a2ac1c4fc47943960cfe345ba4553acc1741b09b3" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="74a1f31452b8adb0e2988ec038c87978d498ff2f7d2469f49b58f3ea7613e4ef" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b7c59f4bcd2c372d680372c8f0375eae43888f3ae85c3319423e63ddb67a34ec" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="63676489dfb22a6baf6df3aff16125a4d142bf6174fb56ad95757940b319237a" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4258c2ead7ae3d568e60491b6fcd2cec9652639507ad02798c10f7e4d1798b31" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7a56a0555ced92015b9c740587c88b2c91777190820595efd39ca0ce9fcaf06a" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f428add77a1081f0d925dc00d608bde79d9298e6afbaec17376eac3614095083" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="a4c4926ee5bbea7c486184e3e0083e2b73e055bc1959f1e0141baccf2fb2260d" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="69c7a017362e6650244a3d2a5639dd442df95f72af4466075efb03ceac1a56f5" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f5f6e42441e187495d52a35095f7fa3cd08d793a6bafe149f08c55d64eefd4d9" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b599cbdf944ee42427590540fe955c0847ba088678b0d8bc31525b367520a7d5" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="de2eeaf17c8dd3a82f5f3d66132a80808040ca12ad43caba0937b70ce43827c0" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="55889e0a6e0986face34961cc5076453560aec5f2ec8a5189ee2a3396ffd4896" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8eb2f4a46faa6aac171178b4cad5f512fa0851333aef3e7afb8ed102e97304bf" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e91645bcd89ffa76d764db48e6f73b7c48a6aaaf48d9ef085aaa1e76a0c542f2" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e9c76ed18c5c734b9932a98825afa1ab1569683383d359a71c119907759e4dfd" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5c8fec04c756163852c8ac9933cab1fceb093b529c9f7b4f7c573ed8b61b0a55" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="55d83510d6972f7675b1a845788b30184d9cd4823d0b8b0689595cb469be97e3" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4ff42660f4f41b655c61da65bd10bea60ef3aacf0883eecd1c6eb557744b82b9" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="324d0d01c49bc79968c093c5e53ce7f2a80575b2797beca8b666dce1cad5717c" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="72037049a64f685feaf478576d41661ebd9e44afba8fd934e5dbf760e42bb79a" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1e539a42c3a7164c217f62e74dc810f913000bc34dbc7f29f02d0db41aa211fa" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="083e2b109de1acba4d3044ac109af90b00e97b26922ee9cb3c46b1de272b2413" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0c0d62a4aa6669679adca49dc11b33c3ebe20c0fe6fc9be3d5b8070d7d1737fa" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9b2af8ec896f4a67d94d7b425c146616947d19c6f3270e86f80fa23a80b8b890" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8878b4d7ed871bcb07e182ee2d6386640ae21236d2fae107948b9ad640cbbcae" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="4b71d559db95859e21af91d78367c08cddaf3ef98b19f128a7241d8603eb2610" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8a9b3f61b024845c7f1bc8f117d2636c66795be703a1f8ff184b58be8ef2b543" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="43bf85a30cecd5a7343424e64fe5ba0ad0d4945db20d82d46f3702291d29e480" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b92723563b313b539cb7a5b2f9143d0934367bd2abb972753525cbde85e9f7a4" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4b00abea99fc47c6d847444acbc695832db59d67c33283878594cb1bee09c370" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4567e8830ebaf6a0989cae57996efefeab9b6cd72e98885d9d534073be7ee95e" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="521a850e946a56bf543cfaff3f9f97def6f11404cfca70695ad1baffef86bb12" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c9eede696fb56ef3711c8eadc08113d59e3592f374fa9b94ab242d84bd7cae7f" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7cd1050fa9d1c523da54211875330a3893f959529e07dfeb26fdd4d6d40ac1dd" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="466d21807b30f3a6809a9b294a2f677261861cf0fdcd8d5f4488ffd6eb9f989a" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5ec425f6bf0452db201e7915ad5d54a64f2094afde11872dc9125fb145e507fb" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="95fd785b0e0b816d00b2252271042b965d5d1ca1c4549ff831ffa8ec222e1227" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c36a040383039290f084f248e0f4a13d55f5af763f8105bdca9952d35e478fd6" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1bbc72e0fad97be02d6c05d96ee9fd4cb9cbef8a291cc8bc7d004482f4fea884" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="317dc9861be65b491c88b8884a1411732a0750bc93ba41349e376f78af4ea14e" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c5b641f4a1b3ce0b36b904e7224109987310d3d190b60aec3c927b5493d69256" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7f7d186e2807390b73e5291e40bea2346f3829194fa9cca370a025fd818e9180" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6f79022c28090da91b0e34a80b79f9f236b241120c3de392609fa6b04cd27d6f" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="394fc3f9d9dfb68a8e20970a045988bd5f4cb3bea79159213eeb245c93b51135" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="4f5afa177af2f4f655883eeb2f10a2916f6e2aa3a930c250d263f6b271f39bdf" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7310a4830d39c8d72f408a9c1fecb13034038a18e0d1839550346123d9a8b15c" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4d28cfc53cb84a42f725c8dd1bc9a28b0c62657bdbe2d5fa442c7197cf583812" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e788643d40679d1e81593e99d45101850757040b5a535784034b000b593ea9a3" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7971383023b2a4b63aba086bc7aef5139a24fc7c37404c2abca3bfe942b884f3" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2ec8b44de8859bcb3cd4c90b0124c6a1b3592c3e999ff4bdfea050edc68ab9a4" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f08277dd536df19d50c8499ec05aa00cc7f3b25e5357936c00a367bfe28d83c5" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ce1e23f5aed17f112c244223c29aaed10c89f908da2d097901b53592996b1a0a" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e6d4c8b4a047223834a8876370daef7c37ac6a9d8ebc9652e306ef482e804ee0" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b7c6beaea306b162980a142810cf254380a342f0901fecacd449167d97733128" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0a51e842f64048d0ace1c81510a4a46c39df7079423b9ed1d7a15f92bc97de85" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f8c5dc9b3c73eabd83a923241a10bf27365a68db307e62dee90e53a205ed8326" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6899713995b058e7a41310ce04f37f75889d63ed9ee4f2224bfd59d614a036db" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7f9eb286f7105a00db44d1e9aece3aea388512b671278245d82bfc56220f84fe" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a50668e888f98ff3184ffcad386c3a080616a46fc6f714c31b7155052a2ebcb2" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3308cffdffca62a81481145db8baaaa922e9ed4dd601a5991103b2065e9805f9" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1158f188e9aedd7563710260d0ded4c06b0ce04966916815dfcf68abe96de5f0" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d6f61af0c21d506b2fe41a9143ae007c214e9fbbbaf9e196617a8a6d8e7da6b3" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c6801059fcf578388a26fc0e9605bb7ff824ebd6f81c442ed5ccfa9f36c74de3" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="5c0c9d55536af24eaeeda6179aeb482067899b6bb337dc454ddc7a753c1638d5" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="483d8da15c138294a9ee185b4f9aa89d3db0a0d78ea3130086aa32f1be0d9c5a" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a46096b5c81991014dd47857d5214ba9b4eb1732c5b1fa920da14af1b4f8aa04" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ca897dd4f86d7f3c26318f1d549dabd25d436bc1c8a442da454b4a99ebef6dd0" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8e85023c86519bb42ddc92da246df3af3598c6989ecdfe6b5cac170320569058" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1de4f930a4300f2b11e5eda6b9f7a66e053b0c42d7ed1453da222dee550148e2" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="924027937cf1eb6dbc2e0cb4b9240ce6ca799bde02b72e10da90cd893d47dec7" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b29645f21af22b6b1aa575805a2f0ad46fdd752d998d3a415410fb86339516ee" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="121d1897d7edce4dfb7b0d8ec017d5dad2bf44bece24515ba6c7d6f98de54e58" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3fccee9eb5902621de6b003938dea512816bb6391bf94e3badd27bbbe42d944f" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="98e5db21c19cac0e637e7243313cb4d565ad3ffbc8773c9e625dd15cea8ef4f0" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d558879b0aef03b1d80562bc46eb653d3d717630403c10eb3970ac89830b70a4" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="33ec44fc231815af35967ea2e4863f5629388abd9b787f321d0dfdea033e888b" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e2b44862dc90ae36d057889d35837a53f29fb288ee4def4b5c772fae32b0474b" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d09822e545d36a317dd46d77b31d6d49760fc6222c0495ad65825f44a7d00078" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="da3556765714b39bce572835885f3c03d03833a26f5dc58b4e517ba02a314605" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="fab1e770c109ddea723302955f081cf948f6f8d9cf4d27f6ab65997800af1c43" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="924b25d77ce06fb98ce0d6362cd7208c53c8f093a92cd8e0fa08f14e6d41b1a0" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a7c9012fa8cd0f11f900c18eb00b87a4ba50a17d588cacc8e9b49351e4fe6bf5" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="4599654c67b12703cdc6eaf356328cb48cb91d340a8f2b84a408be28a0802a28" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="44fb665c4b1cf935f3a3101b16422b7dc43db6dbf974ca220163862b7d25c6f7" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="288cb2811f7748048fc38c20834b591a5873f06460b7cd8507f47ed1bbd66e30" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5353121be859150d6c439c9dc85894a5662c2957e6ad81b7a1a4a7301e212e62" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="056b6a2b9e059bf570d826879e1698429300d25a53b544deca3a5e2064af0a95" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="09e1b90bf74fbf13c56e5a14a59757970a6eb961c1ff26739c8106e8252ca83d" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="620decd447fbb396161132132a20776ca8d76c455f0108576ee7cd40b2acaabd" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b810cdbe3d43b674ec410553ea9f92e397b101abef1ef92de3eca6d4d2a3f702" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f0a68a07d405d7fefa13768f4ada564ac935028363c245de53ab2215db6da807" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a45cce9719de8a8d43aae11441536a45f390a920dc5239422673debd67c60ea0" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a1628ec3ac3159c3bb83255469a9281f264abeb5134892cae3f1bd5e3f70dae9" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9196833285bd21bd74136f26257581fbe0b07b6a8f942632cb2a738425348180" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bd62b052aae31a498dda6e3a5ca42a14a0eca86c48a132f947207a99f835a34c" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="acbd49093581f8dab03d0185c304c72313bb70eb496cf919e171e67fd1012d4c" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d30f872bc93c41adb0738b6d52026b1878edfacf45a0b9fddd25c9957517c27b" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a3693913b67a0456101aa2f865085959708e0be246cf44a61fb7a0d16d0aa904" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="76bb2d2d0ac97c37a8c1abe68a8f195bdd2142ad0f70bca904bd0e4b8c2f1614" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ea5ccfdc79966a68b22469d2e019bff57a754da7378304a060ef54b399638aa5" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="44848ad7711897891c27d92ed016e1496acb2e804e33583fa26bf8522af32423" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="0b3f4021077295081a9b21116563fadf5fea6eb6a3ad139fd71513110db4d057" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="aec4c374ef59d5ebad624245b24014af7d72dad74d524cc8952656ee2270f10d" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="974fbee8ddaa81b800b60a601609609c58b721e60c60589c535dd3913d950e0f" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="05c23164b1743c050036fa523cdd73a60cc9f4a3ec95391a9301bca2ed083501" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bedab67f2d986adcbeb0f036fbacb9d5481a885945b51db9bad6df3ff6e05d95" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e0f923c85658e46db056a3b2b4d995fa5b40931336ca6518fe117ace3c952357" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="03cbe972d63728f85382dd3d15cd5090033ba93c99fda0bf64af634f70b9f69c" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="22bc0685fe28a4ef5d1f0ad140e7759f69bfaa1e9bbfff5d07b72a64d7be51ab" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d58ed5a3ebd835afa9ecc744cecbe73e78e1c1a33250a696105f371af5e4c706" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="705a5c1bf22aa51031d06a287a146f52c2696230e344699ee25bba38ffc977fd" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="08f9169041fa713e408ea11f73b9f702b02cd45017c77dda808440d01dfed93d" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ac03b952eb5ca12bbcfa217bf9dedc8cd26063b05ceaf91079ff38b8595dafb6" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="94ef04ecf34781d8efe721aed73bac65ce4673621e6126e5ccb2a204ca7798fc" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4885d8bfdc3411915c8ad7bc8cc4b33c8162b799a0c0f5c81a022745389dde2b" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="132fef1cc4b53ca28c3c77271a5fb4f213b159426cb59a7b2895e2aa99ed0bee" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6306e818d794d303f0cde38e4471715a14d764d1b3310940e83f6e27b14ae754" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a4e6891240998eaf4d0af2040b7996e22ccbfbcee21361adecd7c373aac22e53" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3b3c146de7c8ba2d088764ceb442737335a4058065bd6ca5d5d463c0fbcd06e5" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d541eefb5c2be5faf3f8c8e99b500859fbcd610b009180615c19bb6c6ea20b1a" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="ab8fefddc64719ae9f19aea08989f7fcc29be701e9ded03b443c20ec1eba2988" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e195c8b5441c91d72228e9219ab7fc906a62904f1d2e0113eda59a03d6fee1d9" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b9fd9d5b4131999f6c8d81f530af4bc1c913c55196af066b60b4f445a3bdbfd1" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e18b74a3577af1485b25f7652fe007016d84834d32c8fb18eccfce09dcc6f8ab" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="81e08c6714e5fe1eaef22253d2817608aaa8bae0eb23fd59c5952a557dfd2e05" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="34882e011e6de91ad2ce26faa062a2cdc78320a00f88ef12f48244784b960499" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f52cffb1e06937a321b6e8af08126d39c2b361d13210cfa394fff3f09f750a90" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b2ec2ed42f60aeadca54aa304cd23f1a75d62850156ea7420c40180ad850b0a3" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="28128a9e6ac67d51c5b1556771c473a08b4834b6293e44b435dce65bea31db76" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1cd5b1bdf46ea6ffbd5080384798cd1ea2dd8d4ea87b9e80005bb60e06f22518" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="909a054e1d8a0601b06f74e492b2b864362fbabc8a3b94fd64831953ce2fb558" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d097fb5d5b824b73fce375e37dfa7675eca97d47e6e041138656fca3503af892" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="93c86d9a9fea428761fd8711cf01231dc9ace8c780c62f36ac12bc8496cb5501" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5a1b37c9e78c27759b83f45b9889513df0812ba5f8f326d9fa85074b6dca90e4" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5706e98aba57d794370e30bd3962fef17b6abd804f5c30d3a9a6bbedc94792d1" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9a182025aef45495769ec086f8ade8d8101edfa85d2bdfb81fc3d0b4e42a9756" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8af45422eef6b0b301d7e2909560b6b0db7860afa02321bab82ea70a45984c49" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9ec4b055c7917dc58ec8f45d56a5698c8b8166cfeed17132339f49bcff8eb5b5" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="eda2455d59896619cac0696b9e0f8c0493030c8360f03250f847f3c65b2253cf" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="f3065a4d492a3ffe1ca9d5cce6e06983905435e9cfedfc8e021ad1d5772c52d6" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="04b4a26182d6f65e0b0a1f27ca659f15271e96ad3c15eb7d0444619caa9fa2ff" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="96414c7b6d26352b856e47d6b7550046a5dd5c68e7d870f0f62cf6b45ec5d527" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b66b13f2f662c7d293107c902a6452378fc4a785d9d531dd46a1f18505f00ad9" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bd2d80142166441fd709b4ad0edc44d5b457bcec3c604bb66c9a6a39d4b25b66" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2a75eb93c067d28987979c3ea78fabd51190cb4c00dd439614fc382c67f16da1" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="19aebab822d48346dd96bd48230d3802632a4932ccd5531081f358fe7b49eabf" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8e2e14b790ff6b7a7b07c0cb93f26799f583b9eafd4e11128556437423ba6955" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="23cfa21f0541bab649997781e057249a8558b8394cc50f0300868fecdb633900" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4a3fc25f042fdce800d3376c3d57aabd49d1b4f5c611502e70df25cc6256ac3e" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="69c694a6d7fdb2095c397bbbc8893961b682e5ed2ebfd11e517b47099f44ff35" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f0269947013faa7d611e11e55137528ba7d7182905edf036e2d4a9e7910f5130" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1536957497329f7ec7b7c0102a914f0e3149df844a4faab5eddd4a0f2c384ab2" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e5167584cb1d6bf439e4d14de37dc56521a468e6c1bc7250a375d6351a8e39ca" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d2b7fa2fdf552f3aad8003ab43105e28b5bb41e84f5feb0e942906cc9748f604" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e0c21c06531212db4cf418e98edf3a8c62fc7812e05f832b901b4b96d2f25fb7" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ff510b1a0a73d740b1c1e48e10ccb5be89bf57d49128a2d86d5c9d0401aaa3f5" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c3f8f9f24fc51627cc040d3d7361ffe269dd325f085332ea57947dd0c1a91f40" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b2b5d8380866739668eb213beed2b1a617b974041e9666fa851a21759d174f2b" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="bfc93daa92a6cd16dee301df753ac8d69b39aeebf63941b3e1f09bcae81f8ac4" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e9cdd65fa2aab7d6a051a35b320a4b8925dec72f10aeae9a71126481693045d3" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="387e5ee86cde3790523731e931b6482f4818d3ea9ab5d828ca4aad17ba5a4db1" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4c603f5c269105d3176435865c3699fe75c330c45411d6c112b242fe7bb2fe28" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8585827e9f2b20c8bafa0468d46122382c45080b2c6b877d7526df3fcbfa7a44" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0d91fad123c99cd8d45673e77b2aa7a74a4e4b52dc8de77db8d80e37294b71a5" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8c13468addae35f3b699f7f4a3833965c28c63d5bf5af87d0dde1088f77a0172" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="dd641d9dbc388f0f908cb45feb482af555378dab3e5f0f3443332bfe024a5154" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="020efd3f0ebdb8a03cebd02e434c285ef6df3811bbe23b7a16cf820ae31fa26d" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7d83f592369df45de13a19f03884025ebdb543d8fbd9f2a727c783088f4db38b" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="28dc95b47d93c3ec5dfcfddde818fcaf96a22da6823130230bde2215c22ee7b9" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c03be47970fe0c5287a182335e9b38688e081ab0cb60b36041ff1a859130da2f" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="53de187d5a272a8a0a49425d4b67f71cd21bbff15911565bf493b3b6847a99a2" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="be6ee077bd7e4460e6daea198a1c2bbd3c24903197bb8937dd1136ab33a2b3db" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6e25af42c5d4689cca2ae28ae87266658c0b7c24e9a76ec65d3a6db7b797b80c" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="cad5b853bb5e58ddfeb3a2f5811008f291c5d1e285b7916fe59ced71557cb185" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="42ec65c51151cbfa267878ab919c7c5e1814337b01abd6f5196e0a64c782c186" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8d5954f70533fd08a17bc45ee3ebaa89280ba27b4a67e1193549f547879c71bd" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="35c98c5b5cefb0e990ffa3adfbdd7d75c47275f39cd71f96718d343e1068c176" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="9d51feb06c8d47fe756f6094ef8b36a396491831d807b99582435a95e76fcd37" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8acd8d9e379503fc31163c9c442a34bf8c33cf455ec27748fe17b28c1d821b60" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d497ad452513e7e95db9afa52a1ec23ea82c0f1926ecc79c1cd2720c8225bc20" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="266059c5129aa1a3ed0182289ab910e05bdbdd640090f8053725a6570da62060" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0c7c36a13124e5977422acb4188c0d3d50e4b12054a71c3440cdde8c7a84a3fd" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="57ac57b91adabb44926c26b5e0ca2b62ad3d39be3e949e4d93203cdd37cc7c92" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5b34a9c32c5fadba64f84394044b20bebece12b7a41856376c1b083df962858f" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1f4174c17061712c6e0379178249ffc9b606765c96735f5d844dca3c6ba1837b" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c2c9ef0cef7932a3b8c581f34fc8f18ad4581b113aac50538121fc7650e8e4c3" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2744426ce5a490a8135b7637ad6abc1e023b1541de9abc738b16f1bc4daada3d" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ebdd6464068cc3a512bf31315204a6f85647b4e5530343ce320436f153761827" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8e1e9f89aeffac6087c9b73feaa8ab3153360e910baeec35ffcb8a96e4fc6bb0" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="02e26267709c3d1eb9a33d13e65bf828351ab165fff5342e58813009c6ed1451" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2e17a3ad5b4137c4b20359f235b45a70223e628c94c000e0800be8d0871bdfb4" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="eb2334e4d0569c2b3fd2b739844a6d928670c04d47e1607382af0846821f04e9" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3925ed4ff38f22c91a6b598cb4a6258505a43103a8ab38154d811674b9526ead" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1c95d1300388072c98f7925a5951d68280da387d662d72b553488c4cd54803bd" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="dd3274dcf6369863e0446550bb2824c1b00ec25693bd5859cd85669edb34221d" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c4ad7f864f23c203067c920d747f26924386d5cdc26d98018316551181e92695" name="kernel-srpm-macros" arch="noarch">
  <version epoch="0" ver="1.0" rel="27.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-21" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-22" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 1.0-23" date="1709726400">- Add riscv64</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0-24" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0-25" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1.0-26" date="1743508800">- Finish adding riscv64 (thanks Zhengyu He)
  Resolves: RHEL-85853</changelog>
  <changelog author="Eric Chanudet &lt;echanude@redhat.com&gt; - 1.0-27" date="1762344000">- kabi: handle symvers.zst
  Resolves: RHEL-124727</changelog>
</package>
<package pkgid="7b04904ed38f7a40709da8f580aed014f7e86d557972928ed9efb1afd6bf2673" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="7d1cbb6f1553fb0830d9b502021ad68bd7ab6a0c1b803942a0538ea129f0bf0a" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2e6681b57c634e39c634bae3a130e28354a08579bc328009c4e51f0de563a1f7" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4d239c509991455a6db5cf96a14a0e8547b5eaf1c4b8c12731e9224e371b3a16" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="ab9da3c20373cd44ec539f76859d69316771fd50e7c7e37a0b955e886ba8ff80" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="cba9bef9155f85eb1d655fd3fc92b06668bf5ff4cf10c53c36449f845792d30b" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="01f631bd8f2797771d4853875ec289308d8c7c440583ac11a67d680040da5203" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c5235637147e06fa699d4e25d7f92a1fd4c21d01fc0ea3811e95e1a9f93f39c1" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="942414ad55f892c66f9d722d9eefa4382ed81335a02a4f15b7ab52670273ffb4" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0476084e4b2ecb176bcd7ee32bcc797916e23ff81f3a45c8c87980b948cf67ec" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d89c4feb39506ee6e43ec41637252615183f7cdf8b7724975125dafce0541425" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5f1dd43bf3e55b13b433272d61d2436a151c42420a0db3ae37f0d8a39752a1bd" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e123d7904811b19bf746ff22e17ab79a5f35d93c0d75094e5579a25b60bd2bf6" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="411bb8f81761ce102882ea6aa5eba5993583cde2e27e02834500bf47b85c0d91" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d217b1876288f3ef7e60c11c5fb614ae50b801c472d6ba485e8f0cbfe518f876" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b157bbcd28ff6925308d62e130d6a16772968da100d82b247acabf7c81069d78" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="995cf4d1a146e73471344ef98d8b9b4798a3e45ef5c748ab50d64a72f5c21028" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="baf00784f8d1da1d070cde6b0d11bf74796c3a861ba2dc74454ccee0e0b60280" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="50dbc5203100d3ee70710809ddd7e4aa0642f225868578e5ce3642fc1d0994ce" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4fbc83691fe5f36871c653f4eb5153ffc73c8ced25b220abdd5ba8be3eb4fa3c" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="6de6ece43f4aaecbe642bff0ca3b5bc65d7c57d1c09aebbd54e9e14a18aa5aee" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="91ab09a4ae1b6ba6eb1a6d26a4f568ef2b0ab3b60610977412b0fe11e1848905" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d69e15e049c9ecbac043b6088b2771adb0422f9da0ae8e7111e567ade22e86cd" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2f947694d85cd7ab1750e5c56962594ac22ab67ecc9983aade39be6e95114f94" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1be11554fff2ae6c7a3203258ccc7e5cf6fd77605e8e09c3cbffcd9ff01f0806" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f1e52fee8ac6146c082e789b44cb528e358ad88ca2b82f1f0f9e58632422712d" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1824cf502f81232c81e45c125f3b8f6a388afba42d136174ae7788c9ee9e621f" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="110fc6bcadf86647b0cf4b6bba1c46a136ced73b153410b3cd441dd3c3d851f2" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="258aeab606ac2ef6c5f99e3e60fe8ff1a2cc44287a8b6f16af4d029ba723fc65" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4cbc3c98261af45b96e10cd38af953a6e2c3c3b50261d6b80eae2880460036c4" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4007e67fcded3ac5208abf67cffdc00eab54dce0f136bb11afdf71872ce8b6f1" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="edf68a900529cec3f9481e0421defb1c9256d63cc9193aa0059a0217db9f2c14" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="210f3c64cfd074cfc616f2636bb40dc737eab22a6075491b5b07a7be9174bd7a" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="834bdb9138ec2db7db281d0d22183ec8f0b54b2607d36b78a1322d7017ee31b5" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d58a2f8b08a5d0b9cd92c3d60a9498f7ff07da7c97a30b64d2560635f70cdd9a" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c5309ac1a9c2b86f29f9e93e2f201485e3e57e826ab3be997b0bb781c831137a" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="fef38ca0f161fee7975d283dd93828f1c6ecea86f892a36b47d40c6b6278af1b" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="37539c1409de0d816093b1cf7fabb2bc9679b2abef163f5d35cc6ddcc3520401" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="561c49c761536a4bba5ab77b332a5f0ce67a15663e8ea92093d6e71ab12324de" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="529156c2fa7aabd2c31a41a0fdf10759ea0ca04ce4563fb15247251f7bb8aa91" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d700bcdf3d172c3bcf6bc3338f753532ad38adec591a126f088db461aebe2532" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c04fe5f1fa6f092552604f936b3d32be56834b86f647d85277f6ecbf5314f345" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bb9be1266ee8c5cdd9964fc4f4cd04971d7d11d0810e3508daf2acfc6fb7898b" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1be520079dd8d0b9710560ecccc4210e59bcc791403bcc35c33b34b39e3559dc" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6f8b05df9957f237eb2204d1e452c2bccfacf297553cad92811d262704b69bac" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="340a88f78b0ddcedaa269f9c06201bdfdb17455010806c6467df82c001fd4c06" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2e717c49fb8dc531cc9a44897934358c266c1c53cccdd2205881f9f4d226eeee" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d20a95c1809c6b24c327b955c2faec15e82932c2da73f94b1166530da6dacdce" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1b4b61070dd007bd4e21a318e53fc4b0ecb7272d3397bb51e1c14978e84b91f8" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2acf3d9239e51ad4050115e984aca870b45f797ce3d042507ffdcc079aef5a56" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="14360d463fc7d1d313ef5e02708e005b2e29adb58ee427d4922950dc3b206096" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0b9b44f0668b50cd688e0720ef481d24e3f08eb9d186e6ed1342282b71df69cf" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="fce72767ba8f6b1ee30aaf052b4fc62702250fd91dc9ba709a209b4f8cf6c2bd" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="652684e460a91071615b4b301c1079a1d07250b4d98843a376a3c08d892a6564" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b34d9c58bbf2860692dfa9cf5474791a79ad08acb4edae2a580768e7e0c815c9" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="448a1a674ee330f2dad4cf8fde9a8b7957fba57a0a6215aad568d92d38d9278b" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d54b56579ea1b13076975ff87c7fcc29d30b63f7d382fe8a4a4ac400e66e73b4" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="23c2979da4bdec459329db1d17027275449b7e566308a77937b7a7b87b968a29" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="51a14013bea9c431e99283d7bd6f4b7ddb8e6743a3b5e5d7a8651e01ea57170f" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5105593fa0cf777affa6df67198eec020e5f348e8c277e2ffb12fffe8ce2dcda" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0295abeb96bc43c86802162484861e6b49e46e0e7b52b194e21dba78a3f4ff04" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="fd80bd20e1cea2938c5e372b169608dc4fe930bec61a71c7f2378df14adc92a1" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="7f2e5af262d5f4e0ec75e4e2475701ab5053d9281cc55e7559234ae8f124860f" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3d4670720d34c673e9c0468db1b984cf56cd14e543ada8b13915d9043ddc41e1" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="65c053c77c83a25c03e6c9eaed23936f323e03f2f6ed3bd0a4e7ba4cba696e6c" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9986fd522e40f62f58f8cc86269892d8fa87f6ca0b53846f0f0d70b579ad3ed0" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8761e0362cba7e97149c2636276384302a69bff0fef9cc21f550d18e31f792b5" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="bc7287e5282b9d964b3e2c6dfb5733d1d2ca932bce3a0822505ebdfb764e8deb" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2503705c318da4f7e76f2f92b2e30e00d8991962ed55f4cbf90722b784d9a814" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5a68721c6538a32cf3fc48cf546c0597a71ec711fca0f7487efa0cf48762ed56" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="df7d6af617f04470d9b54116214a25418a9749ce3f0b090ab960cf5e6c0dbeca" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5e405d1882501f9783e5e4db8294cd7aa29190de6d6e168039630954fdbb2075" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6d08523d90199e4e53a985be3a4aa1e21ae3be9c6080eeae323d42e3d5acd52a" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b53307b10c8631885fad54ca7f283bdef177058d444b600b95b4ab5f4ec889d6" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c61744e15477faadc15ce9b10a9eb8e31c9cf345a1372ac19afa42a43c406997" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="e30d7e7a708d55113595dbbcdbf76f8719ca3f4891cbf9287d85dd9cb94ee223" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3cfdc13c14230c0b03e4f81d037b92684a281e464b5454da682c9d2ee171a205" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="c7530504bfcde625a7d0a0a39b24c3093198ea0807f57965c73e06b5bde13aff" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3c9e68d7c1aebfb6ddf41dc32c594146518a284b6d74c7c7fe4266f22d4fe879" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="127cc387a3def4c10e1ed5c11232645a722f2a8a03769f0a01ad7e93e7cc5b18" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b9c501738bc86d574ca09903e9b275a75bca7b0f3117c1f24c728d68b44815de" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f9b93e09ee1c1022cd4969416d2201a4a3d4b040f10dab05a721e955298ef5ae" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="32c566f6d9fbc19bf7eed90d6466223e6a7ad3424a70a73a4ebb55c630797cdc" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="22a4f4d527d5bc3c264fd6420c8fd3ee47b0789690d53f63bfee79866578be76" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a95abadb219ee4c3bad5f2a60aee89027d6c3377e6a18893066b151b2f3acbdb" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="57b33076b6d7b346ff13e64f602264363a1c981d30254898f87781fec7c7c250" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1f1cd3f77318a3b5ceba0c793148776256e6370ca1fb87fb0873cb40628ad0e3" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="08024f078b74ee7ad43d49c8362c79aafe7dad748d509dcf568a72036c4a1644" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="9c15dd7c7c8f89dcfbb127225da52daa1f13c53876508d23915986abc8fea361" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5613ab446afbe0b83b993813843bfe82abdc05b5a698ee1b0107ef6a5e3e54b3" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0c141a9b203ebef719e1a9f979c2fab0d72d7da4b22a247d097b90d8a882304b" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4ee85d818a2dd5ace8efb48e17c3fdbe9ee0c799695561ddf7221e53cad588b1" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4a01f9cfeb435d10183e043e89d77678351fb140a79fc04c1f917a85858c6caa" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="83ce882e3ac31ee4e61fce2f5c80c182e2ba677c4a0e728e93411dfbc6f5a198" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="4c906d3c3a80522110e821213652af5c0418f43955c52709685f811ac72ac272" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b5bcdecd26f3e5b419e610bee36a0265ec014bd1b0048bdd55576751dbf4bfd2" name="kernelshark" arch="x86_64">
  <version epoch="1" ver="2.3.1" rel="4.el10"/>
  <changelog author="Zamir SUN &lt;sztsian@gmail.com&gt; - 1:2.2.0-3" date="1685966400">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.2.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1:2.3.0-1" date="1704456000">- Update to 2.3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zamir SUN &lt;sztsian@gmail.com&gt; - 1:2.3.0-3" date="1706011200">- Rebuild for libtrace* update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.3.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1:2.3.1-1" date="1718107200">- Update to 2.3.1
- Build with NotoSans font and remove gnu-free-sans-fonts dependency</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1:2.3.1-1" date="1718366400">- Update the license and convert it to SPDX 3.0 (-only -or-later prefix)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.3.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.3.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a297bf440e569f825be12d82881839041dbccd2aacc90d571cd635d6d443f73a" name="kexec-tools" arch="x86_64">
  <version epoch="0" ver="2.0.32" rel="3.el10"/>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 2.0.28-12" date="1718798400">- Resolves: RHEL-40200</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.28-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 2.0.28-14" date="1720785600">- Various fixes.</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 2.0.28-15" date="1721304000">- Resolves: RHEL-49401</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 2.0.29-1" date="1723550400">- Update to 2.0.29</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.29-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 2.0.31-1" date="1745496000">- Update to 2.0.31
- Resolves: RHEL-86467</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 2.0.32-1" date="1761048000">- Update to 2.0.32
- Resolves: RHEL-113403</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.32-2" date="1767528000">- UKI: Fix the size of real payload</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 2.0.32-3" date="1768996800">- Drop weak dependency on kdump-utils (RHEL-138692)</changelog>
</package>
<package pkgid="34674051cf3b270f6d577b45b0e0e673ece8c8e70d917562c8b5fcbbefe676f3" name="keycloak-httpd-client-install" arch="noarch">
  <version epoch="0" ver="1.3" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-15" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.1-16" date="1678190400">- migrated to SPDX license</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.1-17" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-18" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.1-19" date="1696420800">- Resolves: rhbz#2115262 keycloak-httpd-client-install missing dependency to python-lxml</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-20" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-21" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1-22" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.3-1" date="1726833600">- Rebase to version 1.3
- Resolves: RHEL-59677 - khci won't work with Quarkus-based Keycloak due to missing /auth path</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="770e0e62fe6b6701e6aa473c0445f2427a97516f7a122d71bdaefe5fa6fcc6aa" name="keylime" arch="x86_64">
  <version epoch="0" ver="7.14.1" rel="5.el10_2.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-14" date="1757937600">- Properly fix malformed TPM certificates workaround</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-15" date="1759752000">- Add support for ECC attestation</changelog>
  <changelog author="Marek Safarik &lt;msafarik@redhat.com&gt; - 7.12.1-16" date="1760529600">- Added manpages for keylime services and the tenant
- Added support for ECC attestation
- Fixed man page RST formatting for rst2man compatibility</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-17" date="1770033600">- Change ownership of /usr/share/keylime/tpm_cert_store to root</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-1" date="1770984000">- Updating for Keylime release v7.14.1</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-2" date="1774958400">- Add patches to fix DB connection leaks</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-3" date="1775044800">- Remove unbounded functools.cache from latest_attestation</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-4" date="1776340800">- Fix verifier race condition on agent delete</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-5" date="1776427200">- Implement verifier graceful shutdown</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-6" date="1780401600">- keylime: Fix hardcoded attestation challenge nonce (CVE-2026-6420)
  [RHEL-168795]</changelog>
</package>
<package pkgid="26deb696e0f5c4bf4022fffd1797c5405a885d8296e6ea4b97d53eebed0fe2b9" name="keylime" arch="x86_64">
  <version epoch="0" ver="7.14.1" rel="5.el10_2"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-13" date="1756382400">- Avoid opening /dev/stdout when printing</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-14" date="1757937600">- Properly fix malformed TPM certificates workaround</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-15" date="1759752000">- Add support for ECC attestation</changelog>
  <changelog author="Marek Safarik &lt;msafarik@redhat.com&gt; - 7.12.1-16" date="1760529600">- Added manpages for keylime services and the tenant
- Added support for ECC attestation
- Fixed man page RST formatting for rst2man compatibility</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-17" date="1770033600">- Change ownership of /usr/share/keylime/tpm_cert_store to root</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-1" date="1770984000">- Updating for Keylime release v7.14.1</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-2" date="1774958400">- Add patches to fix DB connection leaks</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-3" date="1775044800">- Remove unbounded functools.cache from latest_attestation</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-4" date="1776340800">- Fix verifier race condition on agent delete</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-5" date="1776427200">- Implement verifier graceful shutdown</changelog>
</package>
<package pkgid="f0f2e0e80d94c9758453613b8ba6a45f5469211b21a48e28d696651940aff593" name="keylime-agent-rust" arch="x86_64">
  <version epoch="0" ver="0.2.9" rel="3.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.5-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Karel Srot &lt;ksrot@redhat.com&gt; - 0.2.5-3" date="1719230401">- Add RHEL-10 gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.7-1" date="1737547200">- Update to upstream version 0.2.7</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.7-2" date="1738929600">- Update openssl crate to version 0.10.70</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 0.2.7-3" date="1759147200">- Enable different key sizes and curves for EK and AK</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 0.2.7-4" date="1759752000">- Enable ECC attestation</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.9-1" date="1771243200">- Update to upstream version 0.2.9</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.9-2" date="1775044800">- Use correct port when registrar TLS is enabled</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.9-3" date="1776945600">- Fix upgrade to not remove keylime-agent-rust</changelog>
</package>
<package pkgid="d6ebda59646d4a37d360502902f8baa80cbf1bfbc8ff6aae7cef7b1a5cc1082e" name="keylime-agent-rust-common" arch="noarch">
  <version epoch="0" ver="0.2.9" rel="3.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.5-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Karel Srot &lt;ksrot@redhat.com&gt; - 0.2.5-3" date="1719230401">- Add RHEL-10 gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.7-1" date="1737547200">- Update to upstream version 0.2.7</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.7-2" date="1738929600">- Update openssl crate to version 0.10.70</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 0.2.7-3" date="1759147200">- Enable different key sizes and curves for EK and AK</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 0.2.7-4" date="1759752000">- Enable ECC attestation</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.9-1" date="1771243200">- Update to upstream version 0.2.9</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.9-2" date="1775044800">- Use correct port when registrar TLS is enabled</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.9-3" date="1776945600">- Fix upgrade to not remove keylime-agent-rust</changelog>
</package>
<package pkgid="d64a12acbac89cfdd50ca35c3fdd32f3e6e979af28f571e948327bd45ab4c8a5" name="keylime-agent-rust-ima-emulator" arch="x86_64">
  <version epoch="0" ver="0.2.9" rel="3.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.5-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Karel Srot &lt;ksrot@redhat.com&gt; - 0.2.5-3" date="1719230401">- Add RHEL-10 gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.7-1" date="1737547200">- Update to upstream version 0.2.7</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.7-2" date="1738929600">- Update openssl crate to version 0.10.70</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 0.2.7-3" date="1759147200">- Enable different key sizes and curves for EK and AK</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 0.2.7-4" date="1759752000">- Enable ECC attestation</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.9-1" date="1771243200">- Update to upstream version 0.2.9</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.9-2" date="1775044800">- Use correct port when registrar TLS is enabled</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.9-3" date="1776945600">- Fix upgrade to not remove keylime-agent-rust</changelog>
</package>
<package pkgid="18cc031b8895762fe397d71a081cb725550bcec78c51b2bbe5556d0b20bf96c2" name="keylime-agent-rust-push" arch="x86_64">
  <version epoch="0" ver="0.2.9" rel="3.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.5-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Karel Srot &lt;ksrot@redhat.com&gt; - 0.2.5-3" date="1719230401">- Add RHEL-10 gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.7-1" date="1737547200">- Update to upstream version 0.2.7</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.7-2" date="1738929600">- Update openssl crate to version 0.10.70</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 0.2.7-3" date="1759147200">- Enable different key sizes and curves for EK and AK</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 0.2.7-4" date="1759752000">- Enable ECC attestation</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.9-1" date="1771243200">- Update to upstream version 0.2.9</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.9-2" date="1775044800">- Use correct port when registrar TLS is enabled</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 0.2.9-3" date="1776945600">- Fix upgrade to not remove keylime-agent-rust</changelog>
</package>
<package pkgid="2e77eb9265ce6cb83f0bd733ac9879211c8811b554feda1a028ee55e2c8bdd5e" name="keylime-base" arch="x86_64">
  <version epoch="0" ver="7.14.1" rel="5.el10_2.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-14" date="1757937600">- Properly fix malformed TPM certificates workaround</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-15" date="1759752000">- Add support for ECC attestation</changelog>
  <changelog author="Marek Safarik &lt;msafarik@redhat.com&gt; - 7.12.1-16" date="1760529600">- Added manpages for keylime services and the tenant
- Added support for ECC attestation
- Fixed man page RST formatting for rst2man compatibility</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-17" date="1770033600">- Change ownership of /usr/share/keylime/tpm_cert_store to root</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-1" date="1770984000">- Updating for Keylime release v7.14.1</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-2" date="1774958400">- Add patches to fix DB connection leaks</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-3" date="1775044800">- Remove unbounded functools.cache from latest_attestation</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-4" date="1776340800">- Fix verifier race condition on agent delete</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-5" date="1776427200">- Implement verifier graceful shutdown</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-6" date="1780401600">- keylime: Fix hardcoded attestation challenge nonce (CVE-2026-6420)
  [RHEL-168795]</changelog>
</package>
<package pkgid="13dc480a3a1acc7404fc14d260257b52d73bd441425f450c49ca3be3baf7616d" name="keylime-base" arch="x86_64">
  <version epoch="0" ver="7.14.1" rel="5.el10_2"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-13" date="1756382400">- Avoid opening /dev/stdout when printing</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-14" date="1757937600">- Properly fix malformed TPM certificates workaround</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-15" date="1759752000">- Add support for ECC attestation</changelog>
  <changelog author="Marek Safarik &lt;msafarik@redhat.com&gt; - 7.12.1-16" date="1760529600">- Added manpages for keylime services and the tenant
- Added support for ECC attestation
- Fixed man page RST formatting for rst2man compatibility</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-17" date="1770033600">- Change ownership of /usr/share/keylime/tpm_cert_store to root</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-1" date="1770984000">- Updating for Keylime release v7.14.1</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-2" date="1774958400">- Add patches to fix DB connection leaks</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-3" date="1775044800">- Remove unbounded functools.cache from latest_attestation</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-4" date="1776340800">- Fix verifier race condition on agent delete</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-5" date="1776427200">- Implement verifier graceful shutdown</changelog>
</package>
<package pkgid="32febe2f1fdb7916bf4c25dbb5b434fc47b2e85b9a15d5926b02a39cdc54c912" name="keylime-registrar" arch="x86_64">
  <version epoch="0" ver="7.14.1" rel="5.el10_2.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-14" date="1757937600">- Properly fix malformed TPM certificates workaround</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-15" date="1759752000">- Add support for ECC attestation</changelog>
  <changelog author="Marek Safarik &lt;msafarik@redhat.com&gt; - 7.12.1-16" date="1760529600">- Added manpages for keylime services and the tenant
- Added support for ECC attestation
- Fixed man page RST formatting for rst2man compatibility</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-17" date="1770033600">- Change ownership of /usr/share/keylime/tpm_cert_store to root</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-1" date="1770984000">- Updating for Keylime release v7.14.1</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-2" date="1774958400">- Add patches to fix DB connection leaks</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-3" date="1775044800">- Remove unbounded functools.cache from latest_attestation</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-4" date="1776340800">- Fix verifier race condition on agent delete</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-5" date="1776427200">- Implement verifier graceful shutdown</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-6" date="1780401600">- keylime: Fix hardcoded attestation challenge nonce (CVE-2026-6420)
  [RHEL-168795]</changelog>
</package>
<package pkgid="802662010d2f22620be6889104fbf94e0bfc3a49b5fe53846aa0d9de0d2eb6ca" name="keylime-registrar" arch="x86_64">
  <version epoch="0" ver="7.14.1" rel="5.el10_2"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-13" date="1756382400">- Avoid opening /dev/stdout when printing</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-14" date="1757937600">- Properly fix malformed TPM certificates workaround</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-15" date="1759752000">- Add support for ECC attestation</changelog>
  <changelog author="Marek Safarik &lt;msafarik@redhat.com&gt; - 7.12.1-16" date="1760529600">- Added manpages for keylime services and the tenant
- Added support for ECC attestation
- Fixed man page RST formatting for rst2man compatibility</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-17" date="1770033600">- Change ownership of /usr/share/keylime/tpm_cert_store to root</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-1" date="1770984000">- Updating for Keylime release v7.14.1</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-2" date="1774958400">- Add patches to fix DB connection leaks</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-3" date="1775044800">- Remove unbounded functools.cache from latest_attestation</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-4" date="1776340800">- Fix verifier race condition on agent delete</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-5" date="1776427200">- Implement verifier graceful shutdown</changelog>
</package>
<package pkgid="dcd20951fcfa048f3adf49d51eea2041e6fce414a3e3d27632e42bce0af96f4a" name="keylime-selinux" arch="noarch">
  <version epoch="0" ver="7.14.1" rel="5.el10_2.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-14" date="1757937600">- Properly fix malformed TPM certificates workaround</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-15" date="1759752000">- Add support for ECC attestation</changelog>
  <changelog author="Marek Safarik &lt;msafarik@redhat.com&gt; - 7.12.1-16" date="1760529600">- Added manpages for keylime services and the tenant
- Added support for ECC attestation
- Fixed man page RST formatting for rst2man compatibility</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-17" date="1770033600">- Change ownership of /usr/share/keylime/tpm_cert_store to root</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-1" date="1770984000">- Updating for Keylime release v7.14.1</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-2" date="1774958400">- Add patches to fix DB connection leaks</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-3" date="1775044800">- Remove unbounded functools.cache from latest_attestation</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-4" date="1776340800">- Fix verifier race condition on agent delete</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-5" date="1776427200">- Implement verifier graceful shutdown</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-6" date="1780401600">- keylime: Fix hardcoded attestation challenge nonce (CVE-2026-6420)
  [RHEL-168795]</changelog>
</package>
<package pkgid="849975168d75d786d7a1bd2c2446679de92d374cc11fa9ecaa59caf400bcc87b" name="keylime-selinux" arch="noarch">
  <version epoch="0" ver="7.14.1" rel="5.el10_2"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-13" date="1756382400">- Avoid opening /dev/stdout when printing</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-14" date="1757937600">- Properly fix malformed TPM certificates workaround</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-15" date="1759752000">- Add support for ECC attestation</changelog>
  <changelog author="Marek Safarik &lt;msafarik@redhat.com&gt; - 7.12.1-16" date="1760529600">- Added manpages for keylime services and the tenant
- Added support for ECC attestation
- Fixed man page RST formatting for rst2man compatibility</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-17" date="1770033600">- Change ownership of /usr/share/keylime/tpm_cert_store to root</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-1" date="1770984000">- Updating for Keylime release v7.14.1</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-2" date="1774958400">- Add patches to fix DB connection leaks</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-3" date="1775044800">- Remove unbounded functools.cache from latest_attestation</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-4" date="1776340800">- Fix verifier race condition on agent delete</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-5" date="1776427200">- Implement verifier graceful shutdown</changelog>
</package>
<package pkgid="c1fd6da74c26b4fdebcf8df352cdf53b5123fccbf8ea60ece8744e576f96c9b4" name="keylime-tenant" arch="x86_64">
  <version epoch="0" ver="7.14.1" rel="5.el10_2.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-14" date="1757937600">- Properly fix malformed TPM certificates workaround</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-15" date="1759752000">- Add support for ECC attestation</changelog>
  <changelog author="Marek Safarik &lt;msafarik@redhat.com&gt; - 7.12.1-16" date="1760529600">- Added manpages for keylime services and the tenant
- Added support for ECC attestation
- Fixed man page RST formatting for rst2man compatibility</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-17" date="1770033600">- Change ownership of /usr/share/keylime/tpm_cert_store to root</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-1" date="1770984000">- Updating for Keylime release v7.14.1</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-2" date="1774958400">- Add patches to fix DB connection leaks</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-3" date="1775044800">- Remove unbounded functools.cache from latest_attestation</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-4" date="1776340800">- Fix verifier race condition on agent delete</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-5" date="1776427200">- Implement verifier graceful shutdown</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-6" date="1780401600">- keylime: Fix hardcoded attestation challenge nonce (CVE-2026-6420)
  [RHEL-168795]</changelog>
</package>
<package pkgid="2185af213d14413e1b113aff58aa841af43956e019082e559885fcb3f37b02d7" name="keylime-tenant" arch="x86_64">
  <version epoch="0" ver="7.14.1" rel="5.el10_2"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-13" date="1756382400">- Avoid opening /dev/stdout when printing</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-14" date="1757937600">- Properly fix malformed TPM certificates workaround</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-15" date="1759752000">- Add support for ECC attestation</changelog>
  <changelog author="Marek Safarik &lt;msafarik@redhat.com&gt; - 7.12.1-16" date="1760529600">- Added manpages for keylime services and the tenant
- Added support for ECC attestation
- Fixed man page RST formatting for rst2man compatibility</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-17" date="1770033600">- Change ownership of /usr/share/keylime/tpm_cert_store to root</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-1" date="1770984000">- Updating for Keylime release v7.14.1</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-2" date="1774958400">- Add patches to fix DB connection leaks</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-3" date="1775044800">- Remove unbounded functools.cache from latest_attestation</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-4" date="1776340800">- Fix verifier race condition on agent delete</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-5" date="1776427200">- Implement verifier graceful shutdown</changelog>
</package>
<package pkgid="72282938edf1a997b088d37fd1a264039235c88ba0c205cd75f4c65d935344aa" name="keylime-tools" arch="x86_64">
  <version epoch="0" ver="7.14.1" rel="5.el10_2.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-14" date="1757937600">- Properly fix malformed TPM certificates workaround</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-15" date="1759752000">- Add support for ECC attestation</changelog>
  <changelog author="Marek Safarik &lt;msafarik@redhat.com&gt; - 7.12.1-16" date="1760529600">- Added manpages for keylime services and the tenant
- Added support for ECC attestation
- Fixed man page RST formatting for rst2man compatibility</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-17" date="1770033600">- Change ownership of /usr/share/keylime/tpm_cert_store to root</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-1" date="1770984000">- Updating for Keylime release v7.14.1</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-2" date="1774958400">- Add patches to fix DB connection leaks</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-3" date="1775044800">- Remove unbounded functools.cache from latest_attestation</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-4" date="1776340800">- Fix verifier race condition on agent delete</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-5" date="1776427200">- Implement verifier graceful shutdown</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-6" date="1780401600">- keylime: Fix hardcoded attestation challenge nonce (CVE-2026-6420)
  [RHEL-168795]</changelog>
</package>
<package pkgid="3c81649e045766cde6df9e44aa6bfaea6bed463458a19346da05587fe399071c" name="keylime-tools" arch="x86_64">
  <version epoch="0" ver="7.14.1" rel="5.el10_2"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-13" date="1756382400">- Avoid opening /dev/stdout when printing</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-14" date="1757937600">- Properly fix malformed TPM certificates workaround</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-15" date="1759752000">- Add support for ECC attestation</changelog>
  <changelog author="Marek Safarik &lt;msafarik@redhat.com&gt; - 7.12.1-16" date="1760529600">- Added manpages for keylime services and the tenant
- Added support for ECC attestation
- Fixed man page RST formatting for rst2man compatibility</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-17" date="1770033600">- Change ownership of /usr/share/keylime/tpm_cert_store to root</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-1" date="1770984000">- Updating for Keylime release v7.14.1</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-2" date="1774958400">- Add patches to fix DB connection leaks</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-3" date="1775044800">- Remove unbounded functools.cache from latest_attestation</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-4" date="1776340800">- Fix verifier race condition on agent delete</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-5" date="1776427200">- Implement verifier graceful shutdown</changelog>
</package>
<package pkgid="fd391929af33b6b9536bc3ebcacb05a5511e8d0d2256a6bb08c6008ad0ec1768" name="keylime-verifier" arch="x86_64">
  <version epoch="0" ver="7.14.1" rel="5.el10_2.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-14" date="1757937600">- Properly fix malformed TPM certificates workaround</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-15" date="1759752000">- Add support for ECC attestation</changelog>
  <changelog author="Marek Safarik &lt;msafarik@redhat.com&gt; - 7.12.1-16" date="1760529600">- Added manpages for keylime services and the tenant
- Added support for ECC attestation
- Fixed man page RST formatting for rst2man compatibility</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-17" date="1770033600">- Change ownership of /usr/share/keylime/tpm_cert_store to root</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-1" date="1770984000">- Updating for Keylime release v7.14.1</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-2" date="1774958400">- Add patches to fix DB connection leaks</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-3" date="1775044800">- Remove unbounded functools.cache from latest_attestation</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-4" date="1776340800">- Fix verifier race condition on agent delete</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-5" date="1776427200">- Implement verifier graceful shutdown</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-6" date="1780401600">- keylime: Fix hardcoded attestation challenge nonce (CVE-2026-6420)
  [RHEL-168795]</changelog>
</package>
<package pkgid="6dfbde1eaab746f9d9017538aa94a6b7ea658bcfe5844386b070306d99944248" name="keylime-verifier" arch="x86_64">
  <version epoch="0" ver="7.14.1" rel="5.el10_2"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-13" date="1756382400">- Avoid opening /dev/stdout when printing</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.12.1-14" date="1757937600">- Properly fix malformed TPM certificates workaround</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-15" date="1759752000">- Add support for ECC attestation</changelog>
  <changelog author="Marek Safarik &lt;msafarik@redhat.com&gt; - 7.12.1-16" date="1760529600">- Added manpages for keylime services and the tenant
- Added support for ECC attestation
- Fixed man page RST formatting for rst2man compatibility</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.12.1-17" date="1770033600">- Change ownership of /usr/share/keylime/tpm_cert_store to root</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-1" date="1770984000">- Updating for Keylime release v7.14.1</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-2" date="1774958400">- Add patches to fix DB connection leaks</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 7.14.1-3" date="1775044800">- Remove unbounded functools.cache from latest_attestation</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 7.14.1-4" date="1776340800">- Fix verifier race condition on agent delete</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 7.14.1-5" date="1776427200">- Implement verifier graceful shutdown</changelog>
</package>
<package pkgid="732a9077d692332242117d2d7fd601d2bfee036d8060563d0a01d92f8f5e6862" name="keyutils" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.6.1-8" date="1697457600">- Convert License tag to SPDX format</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.6.3-1" date="1702296000">- Update to upstream version 1.6.3
- Related: rhbz#2121553</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9bf80d1c93d9b11c2e937c896571641bf4f3646a7a91f589e4c502708f5b260e" name="keyutils-libs" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.6.1-8" date="1697457600">- Convert License tag to SPDX format</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.6.3-1" date="1702296000">- Update to upstream version 1.6.3
- Related: rhbz#2121553</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f2a3c35637547e2d0b98d5c92488488874ac57197778c7893d408599a2ab3544" name="keyutils-libs-devel" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.6.1-8" date="1697457600">- Convert License tag to SPDX format</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.6.3-1" date="1702296000">- Update to upstream version 1.6.3
- Related: rhbz#2121553</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.3-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d6c6c04731a0a010fd63b14a82a1625509356b6e12cbfea982fe498b02c3ef1f" name="kmod" arch="x86_64">
  <version epoch="0" ver="31" rel="13.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 31-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 31-7" date="1723464000">- weak-modules: use either zcat or xzcat based on symvers file extension
- Resolves: RHEL-39388</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 31-8" date="1723723200">- Fix issues discovered by static analysis
- Resolves: RHEL-44931</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 31-9" date="1727784000">- weak-modules: fix incorrect symvers file extension dispatch
- Resolves: RHEL-61133</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 31-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 31-11" date="1736856000">- Enable zstd compression support for initramfs in weak-modules
- Resolves: RHEL-74288</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 31-12" date="1755604800">- check weak-updates directory exists before using it
- Resolves: RHEL-109793</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 31-13" date="1770120000">- modprobe: don't attempt to remove an already removed module
- Resolves: RHEL-113203</changelog>
</package>
<package pkgid="62208aa6a87d00658a6c6ed658719b0fb6c9a7335f6cb2498871bd3d2b5db35f" name="kmod-devel" arch="x86_64">
  <version epoch="0" ver="31" rel="13.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 31-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 31-7" date="1723464000">- weak-modules: use either zcat or xzcat based on symvers file extension
- Resolves: RHEL-39388</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 31-8" date="1723723200">- Fix issues discovered by static analysis
- Resolves: RHEL-44931</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 31-9" date="1727784000">- weak-modules: fix incorrect symvers file extension dispatch
- Resolves: RHEL-61133</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 31-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 31-11" date="1736856000">- Enable zstd compression support for initramfs in weak-modules
- Resolves: RHEL-74288</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 31-12" date="1755604800">- check weak-updates directory exists before using it
- Resolves: RHEL-109793</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 31-13" date="1770120000">- modprobe: don't attempt to remove an already removed module
- Resolves: RHEL-113203</changelog>
</package>
<package pkgid="ac8c65fcc58313f67c5832b7dfdd059dcdc84e984f12e88508a29b89fc9bd311" name="kmod-libs" arch="x86_64">
  <version epoch="0" ver="31" rel="13.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 31-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 31-7" date="1723464000">- weak-modules: use either zcat or xzcat based on symvers file extension
- Resolves: RHEL-39388</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 31-8" date="1723723200">- Fix issues discovered by static analysis
- Resolves: RHEL-44931</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 31-9" date="1727784000">- weak-modules: fix incorrect symvers file extension dispatch
- Resolves: RHEL-61133</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 31-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 31-11" date="1736856000">- Enable zstd compression support for initramfs in weak-modules
- Resolves: RHEL-74288</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 31-12" date="1755604800">- check weak-updates directory exists before using it
- Resolves: RHEL-109793</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 31-13" date="1770120000">- modprobe: don't attempt to remove an already removed module
- Resolves: RHEL-113203</changelog>
</package>
<package pkgid="5a7e81105e155faa5cb7fa786fe5fe86be1110a75659156fc410538245615f94" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="18.el10"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-9" date="1744804800">- Add 0030-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0031-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0032-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82535 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82535</changelog>
  <changelog author="Filip Suba &lt;fsuba@redhat.com&gt; - 0.9.9-10" date="1744977600">- Migrate gating tests from STI to tmt
- Related: RHEL-82535</changelog>
  <changelog author="Filip Suba &lt;fsuba@redhat.com&gt; - 0.9.9-11" date="1752494400">- Add 0033-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103112 ("Update multipath builtin config to add new
    device defaults [rhel-10]")
- Resolves: RHEL-103112</changelog>
  <changelog author="Lin Li &lt;lilin@redhat.com&gt; - 0.9.9-12" date="1757764800">Add 0034-libmultipath-fix-crash-in-print_foreign_topology.patch
  * Fixes RHEL-107436 ("Running multipath -ll on system with "enable_foreign
    nvme" results in segfault")
Resolves: RHEL-107436</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-13" date="1759320000">- Add 0035-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0036-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0037-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0038-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0039-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0040-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0041-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0042-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0043-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0044-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0045-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0046-libmpathpersist-redesign-failed-release-workaround.patch
- Add 0047-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0048-libmpathpersist-Handle-changing-key-corner-case.patch
- Add 0049-libmpathpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0050-libmultipath-rename-prflag_value-enums.patch
- Add 0051-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0052-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0053-libmpathpersist-remove-update_map_pr-code-for-NULL-p.patch
- Add 0054-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0055-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0056-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0057-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0058-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0059-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0060-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0061-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0062-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0063-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0064-libmpathpersist-update-reservation-key-before-checki.patch
- Add 0065-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0066-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0067-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0068-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0069-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0070-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0071-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0072-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0073-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0074-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0075-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0076-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0077-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
    reservation handling [rhel-10]")
- Resolves: RHEL-118720</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-14" date="1762862400">- Add 0078-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0079-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
    reservation handling [rhel-10]")
- Resolves: RHEL-118720</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-15" date="1763553600">- Add 0080-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128338 ("Update the multipath.conf stanza for Infinidat
    storage")
- Resolves: RHEL-128338</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-16" date="1769083200">- Add 0081-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-136405 ("improve Busy checking for multipathd show status
    output")
- Add 0082-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133815 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-10]")
- Resolves: RHEL-133815
- Resolves: RHEL-136405</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-17" date="1769688000">- Add 0083-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0084-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141287 ("Add purge_disconnected support to multipathd")
- Resolves: RHEL-141287</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-18" date="1771502400">- Add 0085-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0086-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0087-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-129442 ("Improve multipathd's handling of updating
    persistent reservations on restored paths.")
- Resolves: RHEL-129442</changelog>
</package>
<package pkgid="c0e222656c6bbd4dc8d38b750735df7108602180cac907d9e1225a7e78f2295a" name="kpatch" arch="noarch">
  <version epoch="0" ver="0.9.7" rel="5.el10"/>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.9.7-3" date="1714737600">- Fix cs10 build error on missing `make` command
- Fix "warning: %patchN is deprecated"</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.7-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; 0.9.7-5" date="1744286400">- Rebase kpatch DNF plugin with upstream to 0.5 (RHEL-85686)</changelog>
</package>
<package pkgid="99cced40bd839edd0df7c749e33653fbd15f9a239d7051ba601e2a685d444405" name="kpatch-dnf" arch="noarch">
  <version epoch="0" ver="0.9.7_0.5" rel="5.el10"/>
  <changelog author="Joe Lawrence &lt;joe.lawrence@redhat.com&gt; 0.9.7-3" date="1714737600">- Fix cs10 build error on missing `make` command
- Fix "warning: %patchN is deprecated"</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.7-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; 0.9.7-5" date="1744286400">- Rebase kpatch DNF plugin with upstream to 0.5 (RHEL-85686)</changelog>
</package>
<package pkgid="503fed440df6ae877c69b55f6fbcd41878f384193b384febbeae65577c45d98d" name="krb5-devel" arch="x86_64">
  <version epoch="0" ver="1.21.3" rel="10.el10_2"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-1" date="1720785600">- New upstream version (1.21.3)
- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45387 RHEL-45378
- Fix memory leak in GSSAPI interface
  Resolves: RHEL-47284
- Fix memory leak in PMAP RPC interface
  Resolves: RHEL-47287
- Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
  Resolves: RHEL-47285
- Make TCP waiting time configurable
  Resolves: RHEL-47278</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-2" date="1720785601">- Do not include files with "~" termination in krb5-tests
  Resolves: RHEL-45995</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.21.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-4" date="1730289600">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55427
- Fix various issues detected by static analysis
  Resolves: RHEL-45165
- Remove RSA protocol for PKINIT
  Resolves: RHEL-56070</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-5" date="1730721600">- Make test dependencies optional if not part of CentOS/RHEL 10
  Resolves: RHEL-65724</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-6" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74373
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56058
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-71881</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-7" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76758</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-8" date="1745841600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88705
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88047
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-74295</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145356
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-145358
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145397</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171588 RHEL-171597</changelog>
</package>
<package pkgid="25fb80d1a14779b0143287d46c9c618e6fe80a684acb6e0ddc7f7fedcbfe69d6" name="krb5-libs" arch="x86_64">
  <version epoch="0" ver="1.21.3" rel="10.el10_2"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-1" date="1720785600">- New upstream version (1.21.3)
- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45387 RHEL-45378
- Fix memory leak in GSSAPI interface
  Resolves: RHEL-47284
- Fix memory leak in PMAP RPC interface
  Resolves: RHEL-47287
- Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
  Resolves: RHEL-47285
- Make TCP waiting time configurable
  Resolves: RHEL-47278</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-2" date="1720785601">- Do not include files with "~" termination in krb5-tests
  Resolves: RHEL-45995</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.21.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-4" date="1730289600">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55427
- Fix various issues detected by static analysis
  Resolves: RHEL-45165
- Remove RSA protocol for PKINIT
  Resolves: RHEL-56070</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-5" date="1730721600">- Make test dependencies optional if not part of CentOS/RHEL 10
  Resolves: RHEL-65724</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-6" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74373
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56058
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-71881</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-7" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76758</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-8" date="1745841600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88705
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88047
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-74295</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145356
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-145358
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145397</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171588 RHEL-171597</changelog>
</package>
<package pkgid="ece0c852f6ad9040ebb07219d9eabd4b375d86fe9de001df64a16fa67de25ea7" name="krb5-pkinit" arch="x86_64">
  <version epoch="0" ver="1.21.3" rel="10.el10_2"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-1" date="1720785600">- New upstream version (1.21.3)
- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45387 RHEL-45378
- Fix memory leak in GSSAPI interface
  Resolves: RHEL-47284
- Fix memory leak in PMAP RPC interface
  Resolves: RHEL-47287
- Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
  Resolves: RHEL-47285
- Make TCP waiting time configurable
  Resolves: RHEL-47278</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-2" date="1720785601">- Do not include files with "~" termination in krb5-tests
  Resolves: RHEL-45995</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.21.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-4" date="1730289600">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55427
- Fix various issues detected by static analysis
  Resolves: RHEL-45165
- Remove RSA protocol for PKINIT
  Resolves: RHEL-56070</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-5" date="1730721600">- Make test dependencies optional if not part of CentOS/RHEL 10
  Resolves: RHEL-65724</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-6" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74373
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56058
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-71881</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-7" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76758</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-8" date="1745841600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88705
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88047
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-74295</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145356
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-145358
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145397</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171588 RHEL-171597</changelog>
</package>
<package pkgid="916613b2964e075082528165f5685bdecfa1e771457e058adc3283c0e6065e3a" name="krb5-server" arch="x86_64">
  <version epoch="0" ver="1.21.3" rel="10.el10_2"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-1" date="1720785600">- New upstream version (1.21.3)
- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45387 RHEL-45378
- Fix memory leak in GSSAPI interface
  Resolves: RHEL-47284
- Fix memory leak in PMAP RPC interface
  Resolves: RHEL-47287
- Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
  Resolves: RHEL-47285
- Make TCP waiting time configurable
  Resolves: RHEL-47278</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-2" date="1720785601">- Do not include files with "~" termination in krb5-tests
  Resolves: RHEL-45995</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.21.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-4" date="1730289600">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55427
- Fix various issues detected by static analysis
  Resolves: RHEL-45165
- Remove RSA protocol for PKINIT
  Resolves: RHEL-56070</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-5" date="1730721600">- Make test dependencies optional if not part of CentOS/RHEL 10
  Resolves: RHEL-65724</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-6" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74373
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56058
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-71881</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-7" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76758</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-8" date="1745841600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88705
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88047
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-74295</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145356
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-145358
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145397</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171588 RHEL-171597</changelog>
</package>
<package pkgid="ea1a312e423cfac82c0d308aec9b9c1940134666d2e192e608054a1ecf107265" name="krb5-server-ldap" arch="x86_64">
  <version epoch="0" ver="1.21.3" rel="10.el10_2"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-1" date="1720785600">- New upstream version (1.21.3)
- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45387 RHEL-45378
- Fix memory leak in GSSAPI interface
  Resolves: RHEL-47284
- Fix memory leak in PMAP RPC interface
  Resolves: RHEL-47287
- Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
  Resolves: RHEL-47285
- Make TCP waiting time configurable
  Resolves: RHEL-47278</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-2" date="1720785601">- Do not include files with "~" termination in krb5-tests
  Resolves: RHEL-45995</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.21.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-4" date="1730289600">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55427
- Fix various issues detected by static analysis
  Resolves: RHEL-45165
- Remove RSA protocol for PKINIT
  Resolves: RHEL-56070</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-5" date="1730721600">- Make test dependencies optional if not part of CentOS/RHEL 10
  Resolves: RHEL-65724</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-6" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74373
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56058
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-71881</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-7" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76758</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-8" date="1745841600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88705
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88047
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-74295</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145356
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-145358
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145397</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171588 RHEL-171597</changelog>
</package>
<package pkgid="38382a7dbfc4bf24df1e7f35584c90ec8ae56f947ec1598a4a3566044882f789" name="krb5-tests" arch="x86_64">
  <version epoch="0" ver="1.21.3" rel="10.el10_2"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-1" date="1720785600">- New upstream version (1.21.3)
- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45387 RHEL-45378
- Fix memory leak in GSSAPI interface
  Resolves: RHEL-47284
- Fix memory leak in PMAP RPC interface
  Resolves: RHEL-47287
- Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
  Resolves: RHEL-47285
- Make TCP waiting time configurable
  Resolves: RHEL-47278</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-2" date="1720785601">- Do not include files with "~" termination in krb5-tests
  Resolves: RHEL-45995</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.21.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-4" date="1730289600">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55427
- Fix various issues detected by static analysis
  Resolves: RHEL-45165
- Remove RSA protocol for PKINIT
  Resolves: RHEL-56070</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-5" date="1730721600">- Make test dependencies optional if not part of CentOS/RHEL 10
  Resolves: RHEL-65724</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-6" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74373
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56058
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-71881</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-7" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76758</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-8" date="1745841600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88705
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88047
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-74295</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145356
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-145358
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145397</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171588 RHEL-171597</changelog>
</package>
<package pkgid="9f7885ba4b1b17d53800659f9cf70af12f495f2f1914d73c110ae5aa01297be9" name="krb5-workstation" arch="x86_64">
  <version epoch="0" ver="1.21.3" rel="10.el10_2"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-1" date="1720785600">- New upstream version (1.21.3)
- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45387 RHEL-45378
- Fix memory leak in GSSAPI interface
  Resolves: RHEL-47284
- Fix memory leak in PMAP RPC interface
  Resolves: RHEL-47287
- Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
  Resolves: RHEL-47285
- Make TCP waiting time configurable
  Resolves: RHEL-47278</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-2" date="1720785601">- Do not include files with "~" termination in krb5-tests
  Resolves: RHEL-45995</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.21.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-4" date="1730289600">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55427
- Fix various issues detected by static analysis
  Resolves: RHEL-45165
- Remove RSA protocol for PKINIT
  Resolves: RHEL-56070</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-5" date="1730721600">- Make test dependencies optional if not part of CentOS/RHEL 10
  Resolves: RHEL-65724</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-6" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74373
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56058
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-71881</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-7" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76758</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-8" date="1745841600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88705
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88047
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-74295</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145356
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-145358
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145397</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171588 RHEL-171597</changelog>
</package>
<package pkgid="2c62868d5094941e8afa928cfbf2d3b2c9297b683993626bcc36bfe5753ed84a" name="krb5-xrealmauthz" arch="x86_64">
  <version epoch="0" ver="1.21.3" rel="10.el10_2"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-1" date="1720785600">- New upstream version (1.21.3)
- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45387 RHEL-45378
- Fix memory leak in GSSAPI interface
  Resolves: RHEL-47284
- Fix memory leak in PMAP RPC interface
  Resolves: RHEL-47287
- Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
  Resolves: RHEL-47285
- Make TCP waiting time configurable
  Resolves: RHEL-47278</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-2" date="1720785601">- Do not include files with "~" termination in krb5-tests
  Resolves: RHEL-45995</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.21.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-4" date="1730289600">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55427
- Fix various issues detected by static analysis
  Resolves: RHEL-45165
- Remove RSA protocol for PKINIT
  Resolves: RHEL-56070</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-5" date="1730721600">- Make test dependencies optional if not part of CentOS/RHEL 10
  Resolves: RHEL-65724</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-6" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74373
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56058
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-71881</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-7" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76758</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-8" date="1745841600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88705
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88047
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-74295</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145356
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-145358
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145397</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171588 RHEL-171597</changelog>
</package>
<package pkgid="b2a45050c9f3d9c6be6f195a084d3e87b7b9625c8b29267fc23cf88833542a3b" name="ksc" arch="noarch">
  <version epoch="0" ver="1.12" rel="7.git869a25c.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - Packaging variables read or set by" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="&#x10C;estm&#xED;r Kalina &lt;ckalina@redhat.com&gt; - 1.7-8" date="1687176000">- Migrate license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - Packaging variables read or set by" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - Packaging variables read or set by" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="&#x10C;estm&#xED;r Kalina &lt;ckalina@redhat.com&gt; - 1.12-4" date="1716897600">- Resolves: JIRA: https://issues.redhat.com/browse/RHEL-35791
- Update to the latest ksc</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - Packaging variables read or set by" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - Packaging variables read or set by" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="&#x10C;estm&#xED;r Kalina &lt;ckalina@redhat.com&gt; - 1.12-7" date="1731931200">- Resolves: RHEL-65759</changelog>
</package>
<package pkgid="2b1e73298a2f2adf81e2410b2bb385ac1ee7af2d0877ee5fe9a9ee205a63b2ce" name="ksh" arch="x86_64">
  <version epoch="3" ver="1.0.10" rel="9.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3:1.0.8-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 3:1.0.10-1" date="1722859200">- new upstream release (RHEL-45981)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3:1.0.10-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 3:1.0.10-3" date="1736769600">- Fix crash on 'exec' after 'unset SHLVL'
  Resolves: RHEL-74970</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 3:1.0.10-4" date="1737374400">- Add forking workaround for block stdout redir
  Resolves: RHEL-74980</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 3:1.0.10-5" date="1743422400">- Fix 'stty -echo' in scripts
  Resolves: RHEL-85455</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 3:1.0.10-6" date="1744804800">- Fix long multibyte characters paste issue via ssh
  Resolves: RHEL-87564</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 3:1.0.10-7" date="1747656000">- Fix segfault upon SIGWINCH after 'stty -echo'
  Resolves: RHEL-89866</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 3:1.0.10-8" date="1754481600">- Fix arbitrary command execution/code injection bugs
  Resolves: RHEL-99064</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 3:1.0.10-9" date="1770206400">- Fix /dev/fd/1 memory fault and $0 for /dev/fd scripts
  Resolves: RHEL-146565</changelog>
</package>
<package pkgid="048081a469da030d2761c98c1d50385a32aa08eb40b370e74f989dc3d7c26622" name="ksmtuned" arch="x86_64">
  <version epoch="0" ver="0.1.0" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.0-11" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.0-12" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.0-13" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.0-14" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.0-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.0-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b5ae180783b1e0f9040ef2aea8c1636a1c8668460c8104630c0bf26a5a0c75bb" name="ktls-utils" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="3.el10"/>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; - 0.10-4" date="1718107200">- spec: update autorelease to continue the sequence from the base SRPM
  taken from Fedora ELN.</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; - 0.10-5" date="1718280000">- Add initial gating for RHEL 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.10-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; - 0.11-1" date="1721217600">- Update to 0.11 (RHEL-48604)
- Also fix some OpenScanHub warnings.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.11-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; - 0.11-3" date="1738670400">- tlshd: always link .nvme default keyring into the session (RHEL-76525)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; - 1.2.1-1" date="1755777600">- Update to 1.2.1 (RHEL-110404)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; - 1.2.1-2" date="1758110400">- Add support for ML-DSA certificates (RHEL-105441)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; - 1.2.1-3" date="1771502400">- tlshd: Send fatal alert to client when there are server config issues</changelog>
</package>
<package pkgid="a9afbe19db3d850b510dc8987ec7dc9a0d11d5e687eb1ce7125b3818a7ddd828" name="kyotocabinet" arch="x86_64">
  <version epoch="0" ver="1.2.80" rel="7.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.2.79-1" date="1669118400">- Update to 1.2.79</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.79-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.2.79-3" date="1681300800">- Port configure script to C99 (#2186199)</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.2.80-1" date="1681732800">- Update to 1.2.80
- Resolves: RHBZ#2186606</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.2.80-2" date="1684411200">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.80-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.80-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.80-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.80-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.80-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5566ae91e76af23acda278ea537e023d57a3aff5d195e02b6238efbe27eb5e27" name="kyotocabinet-apidocs" arch="noarch">
  <version epoch="0" ver="1.2.80" rel="7.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.2.79-1" date="1669118400">- Update to 1.2.79</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.79-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.2.79-3" date="1681300800">- Port configure script to C99 (#2186199)</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.2.80-1" date="1681732800">- Update to 1.2.80
- Resolves: RHBZ#2186606</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.2.80-2" date="1684411200">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.80-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.80-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.80-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.80-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.80-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dac8b0f8fc88733acdf63b74940c18e2f61453ef687a7851b349d24f2329f400" name="kyotocabinet-devel" arch="x86_64">
  <version epoch="0" ver="1.2.80" rel="7.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.2.79-1" date="1669118400">- Update to 1.2.79</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.79-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.2.79-3" date="1681300800">- Port configure script to C99 (#2186199)</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.2.80-1" date="1681732800">- Update to 1.2.80
- Resolves: RHBZ#2186606</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.2.80-2" date="1684411200">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.80-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.80-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.80-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.80-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.80-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="13176e30d2761687e6f5294d3633fe433f554b8d30df6d9dc41c5b239c8e9406" name="kyotocabinet-libs" arch="x86_64">
  <version epoch="0" ver="1.2.80" rel="7.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.2.79-1" date="1669118400">- Update to 1.2.79</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.79-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.2.79-3" date="1681300800">- Port configure script to C99 (#2186199)</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.2.80-1" date="1681732800">- Update to 1.2.80
- Resolves: RHBZ#2186606</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.2.80-2" date="1684411200">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.80-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.80-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.80-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.80-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.80-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7ea666e8ef94f5144eb386a4fddc3a09d34d2ed7f3531cdd034662358e296995" name="lame" arch="x86_64">
  <version epoch="0" ver="3.100" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.100-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.100-15" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.100-16" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.100-17" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.100-18" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.100-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cd23781132d83ae42f14af94982072ac0f26fc638ee3428e345681143ccbe24a" name="lame-devel" arch="x86_64">
  <version epoch="0" ver="3.100" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.100-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.100-15" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.100-16" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.100-17" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.100-18" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.100-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7f6bc0654abb6f25c29b01b8f9b7f6db9a935b01e6cd60cd32547b831f177785" name="lame-libs" arch="x86_64">
  <version epoch="0" ver="3.100" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.100-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.100-15" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.100-16" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.100-17" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.100-18" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.100-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c783fbcc5cae125517f391845a5b6164e5c2a10e295db5c2e9db42bae0322047" name="langpacks-af" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6cf5e347e99b9823b003d6589c8560bbce3c623f6df91cb17b6b83f2b70af0ed" name="langpacks-am" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8626594e37e7ee67a44e291ac3e2f9994a04b1814ab55be2c24629878267e680" name="langpacks-ar" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5b0337fc8ec131308cf2141b183d6179dc0c24778d0347b194acff1d4eec09e9" name="langpacks-as" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d4e11bdd989e8123e5bfa5a9acadac658dce2f172b0ae30d4c17625553c3fc14" name="langpacks-ast" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2ee28bfdeaffc575a9e8654833ceb0aec5157cad58aaed95c5573a33ff285a64" name="langpacks-be" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dd22671279d1c3c2464faa44f2ba55cbe06af1e68fc4baa46e251c69a6f95b6b" name="langpacks-bg" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ed54e558b00b8248317447f6d61a64e90cdf65cd369d94000a452e8eaaa95ba5" name="langpacks-bn" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3e721d339aee3f9f5ae23c74b691e2e7479427ceee1e5c5c12ae5a01aea7b6a8" name="langpacks-bo" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="97e28acaed0856a198a980e7f411721374b05d91cf8837d0e459e5702adffca4" name="langpacks-br" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="313a706a108a0c3c3212a8bbb1927a25d8a799969c32c8c401576999fb5e0d4b" name="langpacks-bs" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0338605e9df24752891ff15c608935e8093b3ad796da1e531e054cd7608bf819" name="langpacks-ca" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="36c2b45e693505a50322536936c0a854c80e68a508731da4a4acadb47c29b972" name="langpacks-chr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9d843498c7b9e0dabce8deb999642fce19210be11b8ecba5e0016cdab744ac0b" name="langpacks-core-af" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="167589172b5488debc6398548c4deca55956060ff7579212dad6de18239c4fd0" name="langpacks-core-am" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7e4c4f868466e731e401967532d7da602992c8af7482aa799e66f563e340ac23" name="langpacks-core-ar" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bddbc59363bbab21dac822d3afd06f04af17c751a23e834459aff0a6f9d85f1d" name="langpacks-core-as" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="562b49cf1f58071da41f513315bffb5dd5d23cca83899a0321d218ffa5b3bb70" name="langpacks-core-ast" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4587a229bad374fdd1bfd1f94d227bbe55b4da2223c43ebbf615b6bf4a165aba" name="langpacks-core-be" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="00e2c33b2c31023b24c8bff99e0e338dc112e070551be03937e1f95393a3f52d" name="langpacks-core-bg" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b9212a8a6bfe1d6d2f979fec3e06d1b6c79adc09770d50244748460dfb1a0afb" name="langpacks-core-bn" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0b00850ffc7ab2b565de74b98c343b5a521adea2f2b37d349d7f429a85dda165" name="langpacks-core-bo" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="19a7692e792c4af91e1222e94b3db023cb13657d6c25fef7fab732811c9a60fd" name="langpacks-core-br" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9585fa5fc3efba472b80d07129f9665d7c5dbfb5d482f4acc71f5fd56a3d62a9" name="langpacks-core-bs" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="033f6aef05b270d384f65927719f39c2c02692c446fffbb5b5d8b831318ec0e9" name="langpacks-core-ca" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="07837077eb5e79710c39ed39d74455a3587c36787e2251b3c4abe14d6cc6c485" name="langpacks-core-chr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3fb296595230fe7ac55c4cbbbf510f1c5b046a06d49c2bf185161c7c61fa8151" name="langpacks-core-cs" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4125d8778829cee6a57ef9e4bd28ba4620020c7df044c56ddbe74d62c19a36ae" name="langpacks-core-cy" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="616d12b2dbad937e27b3a5a78287071d895579b5a26f9ca2f560e81b1f7b31bb" name="langpacks-core-da" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f6cae388149bd18932a00464ad02f68a20ed99b022bf41385461753afed5bbd7" name="langpacks-core-de" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4306b742f090bbae619ac92b2168301fdbc89ee0905353f04d581bf366265c1c" name="langpacks-core-dv" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="747caeadb3b136121e4b8d506efbc5e3951b9ebc0ccfc098ca3818a09b7fd91e" name="langpacks-core-dz" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e09a95c30ffaa5afc07ea5528c6e38f744893652af2db0fa296dba9b7492a02c" name="langpacks-core-el" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3e49d6d33a1de0f92d198b34059c599edad6c69024a25a879625968568370080" name="langpacks-core-en" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9414a4d9fb2199c7183bfdf88d24cbe98093d62eaa6e834a8e18c4282edf0dda" name="langpacks-core-en_GB" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c3620dcf61bb068fce45e8419b919f64870c93e073a9b636e4d5467332e1bda3" name="langpacks-core-eo" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="50313ce57136300f5ec6f199500a11f7fce64b0b7edfcc97229c6a55825e57ff" name="langpacks-core-es" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="39f400acb038ae99ec15f5cc80fc3c776f30b8278add385d9db28fc457803fdb" name="langpacks-core-et" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="62da7aa621529e8e2df55d607e0ce0102e40358d5a578aebc41b239046335813" name="langpacks-core-eu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d4517500ea076a59539c66552da3c70441a7f11e667dadf46f9bcd24b2956c21" name="langpacks-core-fa" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7288bfa3988b6bec9bea6b7e6d3e59598ac9bbae2f1a8a46628a07ebf143c297" name="langpacks-core-fi" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4a243e101d50e5be059e81a70956ca90923cc959dc41d322d1903cf37ebefac0" name="langpacks-core-fr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ce95c4962ab0a04ebf65367721220a96c998823e3fcae7feb5a2b5e4f70ed1a4" name="langpacks-core-ga" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c0cc735c0dffa8d9cd058362a8c82f768b0bed37190180ce78093ff9f875f411" name="langpacks-core-gl" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d1af90cf20e2364ba60308bdc0dfb3cbd2734ec003f8fe0d88a053db805c3da0" name="langpacks-core-gu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="66050ca6ad37da964866aebabb2755d216648d6055589227e886d7902fe3b74c" name="langpacks-core-he" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="67f736a9ce3369afcb82e350ac7348b2636182a2b5c3ca60c16411476790f59b" name="langpacks-core-hi" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c3febc6cfc4919d1b1fa4eec566d7ce32873101bbd2859641307b5a799f9f56c" name="langpacks-core-hr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="090a58e26ffb4008503015a8d4f6838f2f12bf8ec2f966a31b6109cb2a5a02b4" name="langpacks-core-hu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c1f46a0b57a9b9f27376502d79922000eee7d93b26c5d8540012e496ce935856" name="langpacks-core-hy" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="232968fd8cbe76093d9f528ed3c861d3b6cc9ba4550f68a7963d7a873f05d0de" name="langpacks-core-ia" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c710cac1d074426dd9d869841a8983e9b96c17369f517cd816ac94fb1b1c7fea" name="langpacks-core-id" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a978c27833c13bff5d49e3dcd32570288b0fb9d37902d8960fe70c465c30b7db" name="langpacks-core-is" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9d2f33d534ae4bfb1ad529921765b65a08a0988e63f08ff9905d5a1811a5414e" name="langpacks-core-it" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ec53b1a12e160ff1d5c5a35be54f675d4726baa9037cfb0b8ff3e06d9f193dbf" name="langpacks-core-iu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="36119ef5804caaedfad494c72fc17511c73b7037c64702728b9a3f738c13a76b" name="langpacks-core-ja" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9e5e1ca29d9fec38a8790a9fab39b297d9131a79ebf43e2857a0c59185389128" name="langpacks-core-ka" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="423193d44386596e3b5783473944ca5437040707568bd2ce843ea88444a87714" name="langpacks-core-kk" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="84aa170caf3598a86ee039713636582c92fa2b7bb547fb38204fe3a402c2fa0a" name="langpacks-core-km" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="342aab9b38e77ee63060d8d41cf87a2e329379653d61a94f7fc998ccdf6ecab3" name="langpacks-core-kn" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7f4e6b8d34ab42292835fee18d8a633da7d01160d765bd406133f2775fa040e5" name="langpacks-core-ko" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="af443abafcce4414a8e99de940afc13d10c0dc01b27e0aeb5503b785e7335bb3" name="langpacks-core-ku" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f8603a261989f6bd927fde7d02a91d77ea133e9edcf37f702424827a2574a87c" name="langpacks-core-lo" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="83a6e4ffae710029ecb1afdd1477dd73773cf7ac5de80f18b61bdcd4176325e3" name="langpacks-core-lt" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e9634541d401bb8b3bf3b3650662533a871968d88e8884b96f13aa6a035eb60d" name="langpacks-core-lv" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bf618e6ae5d7f71d0b518c94c06d899213936a45f7b53e1957951eb67ea71bbc" name="langpacks-core-mai" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d71783c5a9e2df74a332c8eb58e1b83f982cecb400cd2a9e135c979eb16afa06" name="langpacks-core-mk" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f6b8104927eaa207522a75bacfb03a8b4a355ce8240f93d46eeda29493f0d8ad" name="langpacks-core-ml" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7b97afa266299982bf3469e51bd578fde40b436f745a62d4cc958dad9c450b2b" name="langpacks-core-mni" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bdbe464e9b51da49875ed1514ffbbfc4f0af66ea8296d07c9c1534d9d9760bdb" name="langpacks-core-mr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="914c28755859a714953d5eaf78476827f9384c806a6c2c80237ef4bf7007724b" name="langpacks-core-ms" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="86f0aafe27f63c13f8b761af30a801631c67ab6a44dd65ca4a59cebed2afbca4" name="langpacks-core-my" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="14c0583993acb0f8eb2e7d5479b5f6b6cec5c85e3ab90c234973ba542c363726" name="langpacks-core-nb" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0b8396d68a608ff027e14b9bf2d1c501d68790e6c41a48ef9fc635770fc3cbb1" name="langpacks-core-ne" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="61780ed557b6b17c78835ccd0239f9c7a2a6026835bfb047e63e7cdb6109752b" name="langpacks-core-nl" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b62c2d8814840bbd98ddad840a01d108dd139578cfb15aedbe8ebd33082e0d2d" name="langpacks-core-nn" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fc5a8fa0c2f6a8b700be38a63b29e6c4f3c0ee601e72687c9c43c77c07002a71" name="langpacks-core-nr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b3ad85b13c5bf4ea538033988d366bcf7c87c7c1784b805f79ad984e2b34bbe5" name="langpacks-core-nso" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="907a985528e23bfb019aa52de83a575335fd76ce352504edfa3105a51c593052" name="langpacks-core-or" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0a1c2ab3689f01b427b8634023ad099d4c8179b80ff547b7882521c4a67a9f5d" name="langpacks-core-pa" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="02c2dfc1ef18064f841ad07b1e25cc2dde994d35146bae3637cfaec82c9ba143" name="langpacks-core-pl" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="25e14937159d505fc718e7b498d2874996a5596d501cdd9548b34d37c5d3aada" name="langpacks-core-pt" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="91bc2cffa28e6c89e3e0024e4bbc8d3c3f0fb8cdd4671cc5f1be32b0ff43950c" name="langpacks-core-pt_BR" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="218d6bedb52eae75317199814c9f54fb1880309b3838a34bb2c74f74ef9cb86d" name="langpacks-core-ro" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="243b8dc53f7dd4f3c635fdce8b74018ac3acb01580a390d3473b59ca0469d90f" name="langpacks-core-ru" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1fd8e08153f63980652f18707f103b029f204518b9e0a1397fd02ac59c2e664a" name="langpacks-core-sat" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="522b25aee2a810aa569747a436ec7a1e672138546abd151cce228e305bedfa60" name="langpacks-core-si" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ce0c4065b4ecd9c9fd40e0cd30df2fcea0dbdc4c46d01865c29936b26654ea7c" name="langpacks-core-sk" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="032e85201f7b9339bdbab8c68dc283329e2dfb5b3f3efb5d6050f1e8edeab1fd" name="langpacks-core-sl" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fbdf19480c6c4376c298bc345a69b4e84b9e2bd6f7fc84db5e1c49d71f1089a5" name="langpacks-core-sq" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c0bd7825c25496a98693fb4d18269b19ca7fac8f626cb879fefbf76befe57a6e" name="langpacks-core-sr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9cd805abd9f993fd13089d47c87fc3d8ff8549dedce78ccc3b57482101507996" name="langpacks-core-ss" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="48aa7886e2f6a82de7bad0e27cc31a4ae7b708d96c2937b3b361b174d1aae428" name="langpacks-core-sv" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="35d6bd96e1a82c4f72a15ebd948cb1aae21b448c98b491540fea3ce09c1fe05f" name="langpacks-core-ta" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="57ec445b899e018c105818e219d06133e2096d6b16c8f7a367c2a43c7b55c7ed" name="langpacks-core-te" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b5054e204d71b281fff469cdba124a54d81d3247b8f3d733777a5d2b386ec274" name="langpacks-core-th" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="83df4eac0a6cb92e0d46c979d8792594bd14b627416b818936167b4f730c2156" name="langpacks-core-tn" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="decda8369612ee11a359b153393cfe631a097064e98388923363b6e82bc13989" name="langpacks-core-tr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="58f39b28b1c9d4e560b255bc403f64f4a34b7e36d9e67c331fde0a2b84d03ddd" name="langpacks-core-ts" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="04b95da07a522d32c311dd014b00145030c6b9008fb3e1d0035db27b4e1c3a56" name="langpacks-core-uk" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5e78023c2341315ea612bea893ba6c6c64fed71b1529a7a614172f2bf184c64b" name="langpacks-core-ur" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a949d4d6d0938f3f351262c573ed135f53ea4e1bee09ea2625ae957da2504ef0" name="langpacks-core-ve" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cb0e96c3550ef57a4db1465e30134cdef5d83380e27ebdcafde181b1f0be02f7" name="langpacks-core-vi" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="84235c182c1b42d76ec01cde260c6774da836372ecc6f67cc9719acb251ee35f" name="langpacks-core-xh" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="98b490a3a80b6defac8b04e55fcb67e0408ea1b3a7065c5b04192bebbcf312a0" name="langpacks-core-yi" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2bdafc3e6d7475c4b9e9e2eb2624d15252541ab481cdb8b6ace21ef282e2695b" name="langpacks-core-zh_CN" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bb5dde4c38a7c6d560647ca51411c066f440012b235186ced87e8890c041c2bf" name="langpacks-core-zh_HK" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8565452cb1079bc6ac20f31e11a09a06520c8df11b28db2298e086a2b1fe9347" name="langpacks-core-zh_TW" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9226095d6fc75a49744b130dd02062047a038e8da8821d026b91664b8806362a" name="langpacks-core-zu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c49981911347a681fe462517c81bc50261f3c10909a485a05004a8ffc4edfc2d" name="langpacks-cs" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="90cbb070dee5d66e5c3080ac5fc1fad9a268ac31e871d3f86ce26e5d432cfe26" name="langpacks-cy" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="330ceb6b9b275a2d3baea15e51558407e0a386f6b22f5f53b302e19f0c2f9221" name="langpacks-da" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3354e7f9ef672bfe88d29117626ea85159f22fb9d57aacb5d4937e9bd6e35922" name="langpacks-de" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c4355af79964b2aad66aa6c4a3006bfecd879babb060a3dd07c4ab9cdbef16e4" name="langpacks-dv" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="16f2755b232bdd19ec5640ac739d00260c3a7309f0999a68ae484ecf8aa5a3b9" name="langpacks-dz" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3b8bb9213b2f23c79291fd54fbda65e33822526b87e93bf3ec5d2a5e8bba1207" name="langpacks-el" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="649d95ed719273f08870fb1cd571d27453ad7d60502ea169af7516c22d409421" name="langpacks-en" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="29dfe2ad243b995ddb5300481296e1304a89ef1b2f74cb2d8386a54fedfc956f" name="langpacks-en_GB" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2ba4cfe3f67c8ae89acd0db781771ba06cce45fca221cfc52124a37272e35dfc" name="langpacks-eo" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="20aa733b25811abad3a33a4646d933b88493a9988add83f665ca1bdc1dd3d10a" name="langpacks-es" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fdf27d358ab5eb5c87a57bb86da92b8a7e833e7fd7a183375bae5d49a0655b1e" name="langpacks-et" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0044067a6e8cff2efb3690947bc0c259c1a44424b68c4005aa5a30312a71ceac" name="langpacks-eu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="602a4373ccacf0e3b0deced87d0b1ad3daaee12ce206f4162e0c55d88501cfe9" name="langpacks-fa" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f5d4ef791dcf1ca26fd583e1c7ebb5bddb6a9eb2384d5f551be7d8cd62b7700b" name="langpacks-fi" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d3d733b5bc0cf7cd280e91cdbf2ec23087184e58a0178a5680dc173ccbc14312" name="langpacks-fonts-af" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1c5f9f6168cadb122518da6f8c0db82d12c77d1e9c5d2982d3501ad2aa5780ae" name="langpacks-fonts-am" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8c6050489e881796d6d00c112bd8e6415428a2ef69cffef38763d11aeb18cb2a" name="langpacks-fonts-ar" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d3fb30530db73016d003abe01834b76f83103eaa2e0fd9281f7cf67ee70df3f7" name="langpacks-fonts-as" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ea2056a594dd93371b6041f48010b856e99c02318527c037455b974dc147356e" name="langpacks-fonts-ast" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="caddcd31bac3e3c019afa705b49d7873bba0dea1c8b2de744365bf4e7825b0f3" name="langpacks-fonts-be" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="43c40da2ae8cbb1dae50d6d30b2a567795e87911bdd31458d13c6ccf449466f5" name="langpacks-fonts-bg" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9850d47f0f2b37fb70c879d71a48595965483601726b8b33f2bf096c7c1127b7" name="langpacks-fonts-bn" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9456a8fd8414a7c57302fdc92fddfe041acf9e2ae312bf59219f6b5321a2bc6b" name="langpacks-fonts-bo" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5703f6b27d30cb6fa54848c7bd30ee74168a5f3808d9ce02dff202fcd53b3e98" name="langpacks-fonts-br" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="02fea4548beeebc52d28b7b785a142c44a87e675d26b775f9b1a7d6c4faf2c44" name="langpacks-fonts-bs" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d6759fbf4aef3172c1193e10af79c9052b3fad93f1d9cf7f250737bd27acb858" name="langpacks-fonts-ca" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="836e4d1ba75461902ad1b7a1a925076dcbf0e4c3769e3cb6061838d637966ff9" name="langpacks-fonts-chr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="de9f6635c2fc53565d9bccbdc3854e8c59878691946e38bef9acaf5f8aa798b5" name="langpacks-fonts-cs" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="945ee84d47082ad0ed4890ee9cc749b15893a5c6dea5081fcb9ef600643f6334" name="langpacks-fonts-cy" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d2230ed031f8d34d6dd19498bdce1891c5d61b909061d60098a2456ea8926e37" name="langpacks-fonts-da" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a542b5d182ce59f4c7c1f55cccab8203e86a1d3d9c402914e3dd4fac46df73f4" name="langpacks-fonts-de" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="798ecd8538417fbb8956aefb5c18799e85c3745002a598803a3e1562c9fed1b2" name="langpacks-fonts-dv" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d4be41df095ca63399e62719e3ca41d07f1a686e490ffab363201e346f62d5b1" name="langpacks-fonts-dz" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fab1ee4bb099e9878e4eeae6ee411add053f7cef35d51b39ff1c7f00bc4fcb50" name="langpacks-fonts-el" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9d7ec21a009e2cfab2b5bb0342f890d07691feb2435f2b19f2b28c4cac57b6a8" name="langpacks-fonts-en" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="80a03853451ca63e1c830d06f395ec5d04bfcf4a461981c1f125055bc12512c1" name="langpacks-fonts-eo" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2830c18bd216d4aa54e0b498c8410a3372aecc710cd2f76584ffd12092328f1c" name="langpacks-fonts-es" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7425789a6ed33ab537dbbc0deb0429f23f1753f14def5febf0c33426b620e102" name="langpacks-fonts-et" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5550335a84685e9d3888ebf1e2732d514d9947646ff09ebde98a1150b2da5fbc" name="langpacks-fonts-eu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="294a6bb6d122496805994b4dc8796add714ef1062c90b2f42e0d4653b41e8214" name="langpacks-fonts-fa" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4ae7ccda9ab1528cf63750eb676ed91d9b8ac490bb2041a8362f827ed275d339" name="langpacks-fonts-fi" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b5711417f1af9f8367c05df37ceb7b550bc318072bc0040affda1f9956a5cc2c" name="langpacks-fonts-fr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8cad9ca90447863de681ff84b97e9eacfe0966b031c25db72264fca7f46f320e" name="langpacks-fonts-ga" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d57bda72c303cb4963f956202caffd23a29de4a2e71701c70e99a5f5ed776396" name="langpacks-fonts-gl" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="747b949f5d880094de33db8249d8b1d0071019ffd9cd7b81c72fad6593700156" name="langpacks-fonts-gu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d41cd62b308ef1c9b7da9ad90a17ba9af626677804a8d4c487f05fbb5564ad43" name="langpacks-fonts-he" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bbfa73e8bed321a9dba64dd7e5c9ed99fa57ad9c790fe740699c273101bb2cc9" name="langpacks-fonts-hi" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1432f34efca0791904efe97e638437bec03505357a11dd3263abaf0c9ba24d61" name="langpacks-fonts-hr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2df21b0d11324ab9aaafdba6cb311fe1fce2013c2dbf651924308cde4cb0c9a1" name="langpacks-fonts-hu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fda69653929966496393a689d0358f05cb5c89417322de19b24c6abd7a8c136b" name="langpacks-fonts-hy" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="38083f7ffdbf52f1929867c9ece65e3479300dbf80da25b59e6965c93a7d0849" name="langpacks-fonts-ia" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5e8bddac0eaa4404c88ce1c7292fa88d3dff3339a3d845771c5f15a388798338" name="langpacks-fonts-id" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d43ce599f624edd5e4ab52c04903f8e612af976f9e5a4ac142c07c7fba436c27" name="langpacks-fonts-is" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d0537beb2f36a13a9b07c5f421ba1401b5ea6780ec6110102eb64ad6a3d23f81" name="langpacks-fonts-it" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7ec850f29a9484aa2fe756f26222b006a23a70bbbc14a090a6a7dcea816f7f5e" name="langpacks-fonts-iu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b7c9c62b20aeda5c1612168473b96d295420442bf54a091e4f934d9daae88881" name="langpacks-fonts-ja" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="86b5e0f0a09f513ad80f4aad5c19266d204a429cfc2aa411cca22c3fbed98d88" name="langpacks-fonts-ka" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f054ef8c3543e94f76615a1c2c1ad0a140c23e68d3e542bae9c0996fa77560c9" name="langpacks-fonts-kk" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5c20cd6b5c80b696f6b4d8e5870521307f97dd0b513bc8236de98bc59b4e2a89" name="langpacks-fonts-km" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="90838179ee456ee8e6f5efe0935d9fc9dcc1800dbbd9f40e353882e9a3c9827c" name="langpacks-fonts-kn" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="00beb72cb286e725ab3e921125530375b2ae43e35a504c9952e0430695f5600c" name="langpacks-fonts-ko" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b93bae6ff764ee79b13364124d59c28aecd0e7ab60764ba0fefe00d982f04048" name="langpacks-fonts-ku" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7b73d5a8dfc1ae362b724c1715e1fdff8ecfd796f1a796e8040009fca1b05c14" name="langpacks-fonts-lo" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="80c3f54446466745c6e47564a31ff55bc8afcb029d44cd82214c08bc529a5309" name="langpacks-fonts-lt" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7700a8cd74d854b917c9a1ab8d01c367e5746c32b5c003180b7955597d3ee850" name="langpacks-fonts-lv" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6e7551e46f9465020e31642929ab77c334130c7327427626b861f53ef6221e73" name="langpacks-fonts-mai" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="091ed234b2c66a39c0b0f8c604fc5e818335749aa5e50d7e4e2213d64a90a2e4" name="langpacks-fonts-mk" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="47076dd3b36f6de02c36226331385a2c506e455e019963ce225af95c49a8e49f" name="langpacks-fonts-ml" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2004b95b929484739d2e1595920d856c482125384339fbb4765fa19b1d1d12fa" name="langpacks-fonts-mni" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5cc22e7ad58d36df005b0bbd032b5be197081ecfcc6147366846ead9802e6688" name="langpacks-fonts-mr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="012c5fbac5dcf10b910c8e88c725bc939042a7c56fc9d6e52f9c509438a1df98" name="langpacks-fonts-ms" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4051f7737288da0a7d6902ffa2d48043f4c6a454608bd44061c36b7313e8d0a1" name="langpacks-fonts-my" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9b2c45773e6f8e6a69253697cf31cd5e39ffd824eafdb38f081ea2726ef255b3" name="langpacks-fonts-nb" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bc288e6a441b2a36d18d842e5e25872ffdd883751327ac7f770815555e436bce" name="langpacks-fonts-ne" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b8d0183c3daca779877fec90a8f41490f7424c2f1496bf4ffae1ae335de87b8f" name="langpacks-fonts-nl" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1f03132477844cf1855d2e692c08492acfe6d134209393d60029294978e9a877" name="langpacks-fonts-nn" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e0435fe6c9ddaab6d3eca0c0612b92b64140d813eff4d9fdfe1600b08f8e18b1" name="langpacks-fonts-nr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="53a89efa87f18b1d661a351d98f312a1a196d17570cf81a2032507f5f8cba198" name="langpacks-fonts-nso" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fa8c4461fa0b55e218c92a4cc9595f860e900e36551e94081f1c755314f9e878" name="langpacks-fonts-or" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="77b306914b3b81e0ab0899dbc0c3dca59f7f6c9405e1451cd0d90405078b29f3" name="langpacks-fonts-pa" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d11371f64708fbbec869526722e3a15fde4c0978288c9038086f37f38d63756b" name="langpacks-fonts-pl" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5c709c1abb1416a79ebf58a81ce26dcfb9ff5308305c8e8a743a85b3b021e782" name="langpacks-fonts-pt" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="226261ef6d4a320c30e776ee453154e9fdc8d7fbc49c17b1644c244616175a6c" name="langpacks-fonts-ro" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="21c5e64f757b040f2056108a9e236e23c4558132a68521965705c455763a54b8" name="langpacks-fonts-ru" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d67a573bf1ab39deb9e33c7f7b93bb45929e0491e77ff36006cc5ecf68c71ced" name="langpacks-fonts-sat" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="45a136e8680a518e1bb110bfe397ee0f0ff3b87f6d19e648fe76cb23311a2336" name="langpacks-fonts-si" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="900d3dd66fab8f0a366b0ab6d90278de16625d17504a3d9b0e8e46c255e6de76" name="langpacks-fonts-sk" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5ecb134489197414263d663ec47e90b3ccf86bc3d13e6c6f95d685bc4bbe506f" name="langpacks-fonts-sl" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e91de352b70cabfe9439fea026189a37be7921847e6b868e383ad3f3bc301671" name="langpacks-fonts-sq" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8eb2e5e05dc8f6ede2f77b9c528df869e29fa65dc70daaaffca78103bf7c51ab" name="langpacks-fonts-sr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3f456b1006cef845d70851fe30f3b175f68b360440f78114495e3abcdfc42070" name="langpacks-fonts-ss" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fd64b2904528d2a10009a2737dfab9bd14c798762f319931a745f5ff5bb88626" name="langpacks-fonts-sv" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6698f4ae07b7c014eb103077e7ed38eef6a7a405520f1ab9fa74b5ea2f446cec" name="langpacks-fonts-ta" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7b32c6463789d37579e3dca65906e7a5973be0c39f8fd272a9d05ff62df3c01d" name="langpacks-fonts-te" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7f4d8911cbcbfcb1da969e015237da215b2c2bc66fdcabe003d1c5784f657dbe" name="langpacks-fonts-th" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3725111768290a5bcc80bee9dfd54f6b2e4483ac2664c2a03104ff982571e488" name="langpacks-fonts-tn" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2a3e3fc9db67262bb950157c8eca52b88420af145fbd0317d36b16fb7b56f425" name="langpacks-fonts-tr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="060e8488de42ff27ba31bb26cfea29c411ebe597fa87cfe591e903fd85812e68" name="langpacks-fonts-ts" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="92569ae2ced54ff1213f159d83f5e716ecefb80d2f970d389deecfd952a5d179" name="langpacks-fonts-uk" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b04ee19ea34ec3b343adf51678cd48d8c9aa9981794d9341dff202c207ea8a26" name="langpacks-fonts-ur" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bd3a36e2ed1cff01aeb8c9273ebd021f6e5d64839d4d23652015ac30251cd444" name="langpacks-fonts-ve" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="df7b4f5f9c139fbca3c773f1232bbaaa8592b096181eca36bbf58b8c1ed69f35" name="langpacks-fonts-vi" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2b8464b3ea9eb39abac76502a569c8cc159221988fac7c79c524d57f4cc0f9ff" name="langpacks-fonts-xh" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6b57e7c698483d3432b673ecc3578c7568284c5e5fd115df8f0d05e27457540c" name="langpacks-fonts-yi" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="64d780918ad8607b3b0403dc8defdc99b39e68303f5112378765e2cacf5a7609" name="langpacks-fonts-zh_CN" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1eb4d324a6a3615024d51624af91738970c787d3f6e05d19d5e90b964f59d580" name="langpacks-fonts-zh_HK" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ccd0687837f561daa24e4036bc5195090b1997c4f0cf615b2d6a91ca34428f45" name="langpacks-fonts-zh_TW" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e59b1e0ed590236340a343308a012f4065febe92d84c946b1cecd9997831b9fb" name="langpacks-fonts-zu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="21357015457b069bf12386af2eab1a8431520d928d77ea0fc9dfd0fce74956ef" name="langpacks-fr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f038f8b3489123b22e34d7fb195522f74e00d2fc3aeae46376a525892a5ea49c" name="langpacks-ga" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8f47bd7b236e466ab8cb95bb54126ee72bb64732c2ca0c552e70df73335bd1bc" name="langpacks-gl" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="189758f7bc8260c83e33f0cebbf51078e02c8764d1f1d2adf1a1ce9b75f0b483" name="langpacks-gu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2115ec20ddd9127a8fbfb4f3a5fe00f86f0a83918a277f44eaca517c292ff8cd" name="langpacks-he" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d36550cdb211d3d7f3ef0bddb2aa6e4ce4ab8d17ab5ff61d623bc9ee7c5839f4" name="langpacks-hi" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="aa73332275c556e523c6ff620b49a08a9daf3d90edbad17be6a0ac2cda53f26e" name="langpacks-hr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f8d18a9c866af150f2d771608e00144ef5ec3fdd87caa1836f261bdffb049d65" name="langpacks-hu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="eaa6801adbe549370bed57ab07399055b9a9f067d48394207c45901f65c61dcb" name="langpacks-hy" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="01364334f212c502ddc87fe3814c46cf12bffcb9c4d548fad4a60d1c1cdbdc57" name="langpacks-ia" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9c353100b6609336511f7dd6a5a2d4ca61a2a299b10d19294ef2e5791713b596" name="langpacks-id" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e552c5ad4c4377c908ad2cdccc15cc359525c47394253698dab6a659afad399f" name="langpacks-is" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a6d59f9e1d97372a8a36370375d750c364e8e242a05e59580b042106399f4f9c" name="langpacks-it" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="de2552947e3280a2b184d235f50acaf6e3f7b745ed2ade93298418daf357db09" name="langpacks-iu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c3bbbe09d486c820532e32e8c16210ccc5e84a163918f96322646dd85398b5b6" name="langpacks-ja" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="08be91f20f25a3a7ac2931d0d4dd8e3d463ed7992bdc6a62e87925ce5729724a" name="langpacks-ka" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6364fe2de28c15c8a137092679e0b8d604d5d8ba1fec2801995a8221f343e80b" name="langpacks-kk" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a122a063e994b3a50e1f0fbfb3fdddd41d48406fd5390cab9da9bb53518782b3" name="langpacks-km" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9be246e0a6df8ddf0007c9a9a984a434f9ef6926f342f2cdb24418ad4f7c14a7" name="langpacks-kn" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d0c1d23bb2dc4169611f13bb84ca48e36453964fb034c182d0907db9642f3bf2" name="langpacks-ko" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="72aa71cd9c072684c00d82c346ebcfd6ac9a03e22abd9efc63db0bd59d74677a" name="langpacks-ku" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f253b322e9b4ae5c0c31852076e1591d02ce1a2594f8167ea6046b4adbcc8cc0" name="langpacks-lo" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7f3215b0364f9aeb9e9436db3891565dad407c6a7c1153e40157db14097feaf8" name="langpacks-lt" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d484d69595e2cbfcbf9c3f497f7856c23c71077e820eaa2948623f6b632ca388" name="langpacks-lv" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="16202d129e630831fca8bee3d9238b8507ceca3d6bc10ce1db6092fd4876d6c3" name="langpacks-mai" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2f8561d992e5fcb1b6a2d23cb041f4550a9c806dd90d5b671682bf55e5a3d88a" name="langpacks-mk" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1e4435d60763946c4355033396c0669dd3e4d0e4c2c9660909b44717843adb68" name="langpacks-ml" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e3ab96892422047913426f3bce440641d7b3d50e798998da174164f0ff6a8344" name="langpacks-mni" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ca62bb33de3689885e4e5d332dbc9e5018f79167e121905718353b5684bddd9e" name="langpacks-mr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5d9e838ede31a0618e8cca700506b79c0a7225e6dbccdc5b8fc67847542f30ac" name="langpacks-ms" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6b0bda156677a05239a28befc85c00ace08df3fc737e1ec9d71be46b36ad838e" name="langpacks-my" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="57fbb430bde9fd2c900b71d6a532cc8da46fc88433c9ab7a16a6a51bfc5dc6cb" name="langpacks-nb" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="25ec511a81a46f941f24b2741ec3fda16735610a10215cf5927177aac7c94d54" name="langpacks-ne" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="619030d7d04bbe82c2e1ba5176185ba914c2444ae140e03f87a0dc7cea3309fd" name="langpacks-nl" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="647f5e06a224552d5419c437179eeeb5d8daf3197adf8cc5c5b6fce6b9598872" name="langpacks-nn" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="56fe71d061dd23c6e117102b93da7b241b905163d976402b150805afbd782c90" name="langpacks-nr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="13e032d49a89766a22d51a14a3a81f1f8e6a652e1d7cec1e55e1eb3b83fe4fc8" name="langpacks-nso" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="90724e53f67302f6e7672c80bb068b819ed53ad95fa156d51db536c1f41ac67b" name="langpacks-or" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5691b6a10753604bdb7c488acae460fca3b6e727dace4a49031cc2b365529418" name="langpacks-pa" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6fcbe605ba50deef7e9296691f467ba5a13788f842e76e6195faf837afb138cd" name="langpacks-pl" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d4ab53f4ec8a04609943c6d82839d32e9a428f1a9035dfdeb61e8cdccfacd1f7" name="langpacks-pt" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5049a0806e15c022f9fc1886b8f07f916c7ae311dbc0e00449d1740b6b0e6d4c" name="langpacks-pt_BR" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="26a017b68a617179597af2f96404126c64488fdbd6a2f3080502ebf895b31422" name="langpacks-ro" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2c5092057573d07af5b3ec9d7c0ece4fdd49ab99c809b418931e852019eb5510" name="langpacks-ru" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="835f63263711be267ce36f9f4b726ab766716b1488f50c66b1afcd4fcaadd661" name="langpacks-sat" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9f1dc7b4b032ecf9fb0b474ed876aa1384bbe69884551b33c35c3b6eac999f97" name="langpacks-si" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="36a0fc82b7d3eca9ac3fbe67a889a30a5137d0e8a556faa8632304274d564a1b" name="langpacks-sk" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c54002a52f5bc9cf835501e38c674b560269013af3368c166ba7e13289fbe321" name="langpacks-sl" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="07f92cbc62176b2ccefcc572b213174ee5caa0dab8dd534c4a62dec707e3a406" name="langpacks-sq" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4c4c0fa85b5c3e48e9e3c38f7a71ffc62c0c3df50487c90ef9b0c3a1c5fdd74a" name="langpacks-sr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4394e281399d17dc846aa7f4d4b3448cbe8129067375fde66f162c9ad356f99e" name="langpacks-ss" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="04df6b95531a48bf184003e582093976db16a203e6f1a5c7dc9de89dce00c026" name="langpacks-sv" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="05ec578418cdf498b6da103f832d674c2d0fe40d2991591eb977ab743352bc6d" name="langpacks-ta" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0f4d6a8a3f8d384c2689fc5fd3862f35fa24f877ebb799441fa213ba0ffef792" name="langpacks-te" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="20a70713e99b6398cef5b45c7896c763771732d01d42ed284094dea05696b905" name="langpacks-th" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="23953017f55e595062fab708e3e133cad84bdc94cf2b5c0292108fa16e337e44" name="langpacks-tn" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="410b473e5ed9361d74fd03a06b336ac1c85e0c840b7a85d770e0dbc2f38b5558" name="langpacks-tr" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="afe497f1c5b916b9afd82966b0eb4a9af511a80145bdfdf6dd56158783769f27" name="langpacks-ts" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3b9f0284af52ef745076e5128cac80cbe9d4228d2c9d7e0aa44e0c9d674e38f0" name="langpacks-uk" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9df3c6df31b1252f741776e3dd0c083f3c3b4affdde40df900baf67c70247afc" name="langpacks-ur" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7adaf12187a983489be90e1d4bf70e38701a481c9d817b01c933ad39981ccb16" name="langpacks-ve" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bf724a9ff096c566215cc66d74113a1c2e4f03ca7c22b4067d12a3616ca575d3" name="langpacks-vi" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c8278269c31f55f5969758677fdb868c1e218ef2fc2815e225d0dfffef7a052d" name="langpacks-xh" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0e858d9d73fea7c79207575fdd0d958f2531709c5cbfd49566544747ebb4ed77" name="langpacks-yi" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="152abe689e8617374bce9451c4e5de1d28c0b9cfc4e86e207649f87af2ad2992" name="langpacks-zh_CN" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="53251bf82f62c6925d3f2806008f52dbb8d5b12465fc298299a69d990e8bbed2" name="langpacks-zh_HK" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f1756119ac8691b2113d75cf53fb82be7d6736a28b74d7e965605d6be5990591" name="langpacks-zh_TW" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d584657e22b0eca8c52f5a013422856ad9f83f8c5344f0bd81d34bd48cdb4bf2" name="langpacks-zu" arch="noarch">
  <version epoch="0" ver="4.1" rel="3.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.0-8" date="1691755200">- Update for the tlwg-fonts package</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-9" date="1692792000">- Drop google-noto-naskh-arabic-vf-fonts from langpacks-fonts-pa.
  Resolves: rhbz#2225410</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.0-12" date="1706875200">- Added langpacks for sat and mni languages (#2259991 and #2259995)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.0-13" date="1714046400">- Add some conditional for RHEL.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 4.1-1" date="1720180800">- make IME installation condition on service(graphical-login)
  instead of xorg-x11-server-Xorg (RHEL-36747)
- drop sil-mingzat-fonts recommends from fonts-en
- use Hebrew fonts for Yiddish (#2284093)</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 4.1-2" date="1723550400">- Update package names for renaming
  google-noto-sans-symbols2-fonts -&gt; google-noto-sans-symbols-2-fonts
  google-noto-sans-meeteimayek-vf-fonts -&gt; google-noto-sans-meetei-mayek-vf-fonts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="de1c88d8598296029364062ec13ac2e8340809382199b1e0199e0b0755c7a2e1" name="langtable" arch="noarch">
  <version epoch="0" ver="0.0.65" rel="4.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 0.0.62-2" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.62-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.0.63-1" date="1693224000">- Update to 0.0.63
- Add more translations from CLDR
- Get translation changes from CLDR
- Japanese: prefer anthy over kkc
  (Thanks to adam Williamson: https://github.com/mike-fabian/langtable/pull/17)
- Use skipTerritory also in list_keyboards(), list_consolefonts(), and list_timezones()
  (Resolves: https://github.com/mike-fabian/langtable/issues/18)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.0.64-1" date="1695124800">- Update to 0.0.64
- Add new public functions list_all_{languages,locales,keyboards,territories,timezones,scripts,input_methods,console_fonts}
  (See also the discussion at: https://gitlab.gnome.org/GNOME/gnome-desktop/-/merge_requests/159)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.64-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.64-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.0.65-1" date="1707393600">- Update to 0.0.65
- Add wuu, tok, glk, gbm, ssy
- Remove aa_ER.UTF-8@saaho
- Add kv_RU.UTF-8, chr_RU.UTF-8
- Add EU, EZ
- Improve README and Makefile (Resolves: https://github.com/mike-
  fabian/langtable/issues/19)
- Add more translations from CLDR
- Get translation changes from CLDR</changelog>
  <changelog author="Pooja Yadav &lt;poyadav@redhat.com&gt; - 0.0.65-2" date="1714478400">- adding gating.yaml configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.0.65-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.0.65-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="db5835bb3f12a4d0aa44e6470d9233631f642566ac278f29b965a25d965a8652" name="lapack" arch="x86_64">
  <version epoch="0" ver="3.12.0" rel="7.el10"/>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.11.0-3" date="1684497600">- Adapt license tag to SPDX</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.11.0-4" date="1685620800">- apply upstream fix to https://github.com/Reference-LAPACK/lapack/issues/763</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-1" date="1704369600">- update to 3.12.0</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-2" date="1704974400">- rename isnan.3 to lapack-isnan.3 to avoid conflict with man-pages package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.12.0-7" date="1732708800">- Add explicit requires to the devel subpackages
- Resolves: RHEL-60890</changelog>
</package>
<package pkgid="a10b73e4db080a4982e43a494f774830b0fed80ceb5ca26ac8f8629d8f722acf" name="lapack-devel" arch="x86_64">
  <version epoch="0" ver="3.12.0" rel="7.el10"/>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.11.0-3" date="1684497600">- Adapt license tag to SPDX</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.11.0-4" date="1685620800">- apply upstream fix to https://github.com/Reference-LAPACK/lapack/issues/763</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-1" date="1704369600">- update to 3.12.0</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-2" date="1704974400">- rename isnan.3 to lapack-isnan.3 to avoid conflict with man-pages package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.12.0-7" date="1732708800">- Add explicit requires to the devel subpackages
- Resolves: RHEL-60890</changelog>
</package>
<package pkgid="b52e404e650821e898fb55b9b45c1c3a8280ea9937bd5083d31fe647cdfc4cfd" name="lapack-static" arch="x86_64">
  <version epoch="0" ver="3.12.0" rel="7.el10"/>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.11.0-3" date="1684497600">- Adapt license tag to SPDX</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.11.0-4" date="1685620800">- apply upstream fix to https://github.com/Reference-LAPACK/lapack/issues/763</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-1" date="1704369600">- update to 3.12.0</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-2" date="1704974400">- rename isnan.3 to lapack-isnan.3 to avoid conflict with man-pages package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.12.0-7" date="1732708800">- Add explicit requires to the devel subpackages
- Resolves: RHEL-60890</changelog>
</package>
<package pkgid="86059923267fa2429862b1428ebd1f2dc46cb2ff8bd9b4fed0aad3e5a120f4cb" name="lapack64" arch="x86_64">
  <version epoch="0" ver="3.12.0" rel="7.el10"/>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.11.0-3" date="1684497600">- Adapt license tag to SPDX</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.11.0-4" date="1685620800">- apply upstream fix to https://github.com/Reference-LAPACK/lapack/issues/763</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-1" date="1704369600">- update to 3.12.0</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-2" date="1704974400">- rename isnan.3 to lapack-isnan.3 to avoid conflict with man-pages package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.12.0-7" date="1732708800">- Add explicit requires to the devel subpackages
- Resolves: RHEL-60890</changelog>
</package>
<package pkgid="a5e5e7c2b3e30f05033c4687b324e99c189f6578371a405cd32d945b10ac31a8" name="lapack64_" arch="x86_64">
  <version epoch="0" ver="3.12.0" rel="7.el10"/>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 3.11.0-3" date="1684497600">- Adapt license tag to SPDX</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.11.0-4" date="1685620800">- apply upstream fix to https://github.com/Reference-LAPACK/lapack/issues/763</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-1" date="1704369600">- update to 3.12.0</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.12.0-2" date="1704974400">- rename isnan.3 to lapack-isnan.3 to avoid conflict with man-pages package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.12.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 3.12.0-7" date="1732708800">- Add explicit requires to the devel subpackages
- Resolves: RHEL-60890</changelog>
</package>
<package pkgid="0521ee4154897fcd441527b9c107b954f68cf4ed639a6e5258ac4bb45f992c3e" name="latex2html" arch="noarch">
  <version epoch="0" ver="2023.2" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2020.2-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Ben Cotton &lt;bcotton@fedoraproject.org&gt; - 2020.2-8" date="1675080000">- Update License field to match SPDX formatting</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2023.2-1" date="1689681600">- update to 2023.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2023.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2023.2-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2023.2-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2023.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2023.2-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2023.2-7" date="1731412800">- Remove .orig file
  Related: RHEL-64018</changelog>
</package>
<package pkgid="461568983126406f9bbb11fceec3dbf6a16c0f98cf5b3109b1b9fa0695e834f2" name="latexmk" arch="noarch">
  <version epoch="0" ver="4.83" rel="3.el10"/>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 4.80-1" date="1680609600">- Version 4.80</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.80-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 4.81-1" date="1699358400">- Version 4.81
- New project URL</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 4.82-1" date="1703592000">- Version 4.82</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 4.82a-1" date="1704888000">- Version 4.82a</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.82a-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.82a-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 4.83-1" date="1706702400">- Version 4.83</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.83-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.83-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4a6a52b5386fb47dcf5346283ee7e9517050df69bbb74c1748b9e34ae1e65c70" name="lato-fonts" arch="noarch">
  <version epoch="0" ver="2.015" rel="23.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.015-15" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT fedoraproject DOT org&gt; - 2.015-16" date="1687780800">- Convert to new fonts packaging guidelines
- Migrate to SPDX license expression
- Drop very very old obsoletes for google-lato-fonts
- Add gating CI tests in Fedora</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.015-17" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.015-18" date="1690545600">- Convert License tag to SPDX.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.015-19" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.015-20" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.015-21" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 2.015-22" date="1720785600">- Fix a typo in fontconfig config.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.015-23" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ea6213c2538005dcd2268811f1c6caaed60b4b0f0cf456e84aa3497ad0e68cec" name="lcms2" arch="x86_64">
  <version epoch="0" ver="2.16" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.14-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.15-1" date="1677758400">- Update to 2.15 and switch buildsystem to meson</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.15-3" date="1705924800">- Migrate to SPDX license</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.16-1" date="1705924801">- New upstream version</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.16-2" date="1705924802">- Actually upload new sources</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.16-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.16-4" date="1713528000">- gating enabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.16-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.16-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="7b95bcbccd431e03938f6d978725dd165fd97702efbd785e789891ee67c4f83c" name="lcms2-devel" arch="x86_64">
  <version epoch="0" ver="2.16" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.14-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.15-1" date="1677758400">- Update to 2.15 and switch buildsystem to meson</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.15-3" date="1705924800">- Migrate to SPDX license</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.16-1" date="1705924801">- New upstream version</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.16-2" date="1705924802">- Actually upload new sources</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.16-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.16-4" date="1713528000">- gating enabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.16-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.16-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="177f21ad8374732fd0596640b0cc5bf528f576d3650a07178e8f32ca489b3b1a" name="lcms2-utils" arch="x86_64">
  <version epoch="0" ver="2.16" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.14-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.15-1" date="1677758400">- Update to 2.15 and switch buildsystem to meson</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.15-3" date="1705924800">- Migrate to SPDX license</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.16-1" date="1705924801">- New upstream version</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.16-2" date="1705924802">- Actually upload new sources</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.16-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.16-4" date="1713528000">- gating enabled</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.16-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.16-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="b29d60d946fec7d275720fc70184bad4e6c4ed395b1a4c44f504ad41b99030dd" name="ldb-tools" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="107.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-100" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114545 - Update to version 4.23.4
- resolves: RHEL-132338 - Fix Time Machine backup
- resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-101" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-132975</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
</package>
<package pkgid="433f4a1e6f2100795ab99826f6b24c80db9769019069375f408d8767c47b029f" name="ldb-tools" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="109.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-108" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-109" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="8d4517934d563befe4f1de2e19cf0fe489edd589c93a0eab660dadf73c9c7b03" name="ldns" arch="x86_64">
  <version epoch="0" ver="1.8.3" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.3-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.8.3-10" date="1704369600">- Update address of b.root-servers.net and some others (#2253462)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.3-11" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.3-12" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.8.3-13" date="1706270400">- SWIG 4.2 and i686 compatibility</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.8.3-15" date="1721390400">- Remove unneeded openssl/engine.h causing build failures
- Explicitly disable openssl engine (RHEL-33736)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-16" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.8.3-18" date="1730203201">- Fix for SWIG 4.3.0</changelog>
</package>
<package pkgid="0c5e02c56d094fd6ed178f65709f3f820a9e25f1f7541660342be7e964dea842" name="ldns" arch="x86_64">
  <version epoch="0" ver="1.8.3" rel="18.el10_2.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.8.3-15" date="1721390400">- Remove unneeded openssl/engine.h causing build failures
- Explicitly disable openssl engine (RHEL-33736)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-16" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.8.3-18" date="1730203201">- Fix for SWIG 4.3.0</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.8.3-18.1" date="1784289600">- Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
  query-response matching (RHEL-210690)</changelog>
</package>
<package pkgid="84bd66d4a763a3d9384648bf985bf0d6b2929af3ef13006b6df51b8ec0376122" name="ldns-devel" arch="x86_64">
  <version epoch="0" ver="1.8.3" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.3-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.8.3-10" date="1704369600">- Update address of b.root-servers.net and some others (#2253462)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.3-11" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.3-12" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.8.3-13" date="1706270400">- SWIG 4.2 and i686 compatibility</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.8.3-15" date="1721390400">- Remove unneeded openssl/engine.h causing build failures
- Explicitly disable openssl engine (RHEL-33736)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-16" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.8.3-18" date="1730203201">- Fix for SWIG 4.3.0</changelog>
</package>
<package pkgid="1b865c7ee5c6a877bb554301e592a8421863da33f57cd23c5ceec682f73b413b" name="ldns-devel" arch="x86_64">
  <version epoch="0" ver="1.8.3" rel="18.el10_2.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.8.3-15" date="1721390400">- Remove unneeded openssl/engine.h causing build failures
- Explicitly disable openssl engine (RHEL-33736)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-16" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.8.3-18" date="1730203201">- Fix for SWIG 4.3.0</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.8.3-18.1" date="1784289600">- Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
  query-response matching (RHEL-210690)</changelog>
</package>
<package pkgid="92e810e55a394108442e9294350446fcada6f1e149b1a36546819b585b17e880" name="ldns-doc" arch="noarch">
  <version epoch="0" ver="1.8.3" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.3-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.8.3-10" date="1704369600">- Update address of b.root-servers.net and some others (#2253462)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.3-11" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.3-12" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.8.3-13" date="1706270400">- SWIG 4.2 and i686 compatibility</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.8.3-15" date="1721390400">- Remove unneeded openssl/engine.h causing build failures
- Explicitly disable openssl engine (RHEL-33736)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-16" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.8.3-18" date="1730203201">- Fix for SWIG 4.3.0</changelog>
</package>
<package pkgid="86d1675ed6249e9421ba7befaef0f5e63e898f0a8519763d20cff4dd2a7da485" name="ldns-doc" arch="noarch">
  <version epoch="0" ver="1.8.3" rel="18.el10_2.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.8.3-15" date="1721390400">- Remove unneeded openssl/engine.h causing build failures
- Explicitly disable openssl engine (RHEL-33736)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-16" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.8.3-18" date="1730203201">- Fix for SWIG 4.3.0</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.8.3-18.1" date="1784289600">- Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
  query-response matching (RHEL-210690)</changelog>
</package>
<package pkgid="a5caf1f4d8f67d93f145fead46c597f30b95abaeb0f48066bc3f18f9049a4541" name="ldns-utils" arch="x86_64">
  <version epoch="0" ver="1.8.3" rel="18.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.3-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.8.3-10" date="1704369600">- Update address of b.root-servers.net and some others (#2253462)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.3-11" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.3-12" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.8.3-13" date="1706270400">- SWIG 4.2 and i686 compatibility</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.8.3-15" date="1721390400">- Remove unneeded openssl/engine.h causing build failures
- Explicitly disable openssl engine (RHEL-33736)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-16" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.8.3-18" date="1730203201">- Fix for SWIG 4.3.0</changelog>
</package>
<package pkgid="8ebc46c07c1c4157c008b7a0ffe2cf26eb794dbb8f530b80716a2e1c82a1782b" name="ldns-utils" arch="x86_64">
  <version epoch="0" ver="1.8.3" rel="18.el10_2.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.8.3-15" date="1721390400">- Remove unneeded openssl/engine.h causing build failures
- Explicitly disable openssl engine (RHEL-33736)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-16" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.8.3-18" date="1730203201">- Fix for SWIG 4.3.0</changelog>
  <changelog author="Fedor Vorobev &lt;fvorobev@redhat.com&gt; - 1.8.3-18.1" date="1784289600">- Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
  query-response matching (RHEL-210690)</changelog>
</package>
<package pkgid="8d114286312a51cd86f68180cc8a462fee0665d3ec9fb8ed5431b864c6d6401b" name="ledmon" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan@danny.cz&gt; - 0.97-5" date="1707480000">- rebuilt for sg3_utils 1.48</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.97-6" date="1707912000">- fix incorrect License field syntax</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.0.0-1" date="1711540800">- update to 1.0.0
- package shared ledmon library by Tony Asleson</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-1" date="1731412800">- update to 1.1.0</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-2" date="1749470400">- Fix string2ibpi function (RHEL-90182)</changelog>
</package>
<package pkgid="0e2f643a005e4a048af2943f20d09e553abfcc634bfb0162444df29d2aac7c69" name="ledmon-devel" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan@danny.cz&gt; - 0.97-5" date="1707480000">- rebuilt for sg3_utils 1.48</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.97-6" date="1707912000">- fix incorrect License field syntax</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.0.0-1" date="1711540800">- update to 1.0.0
- package shared ledmon library by Tony Asleson</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-1" date="1731412800">- update to 1.1.0</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-2" date="1749470400">- Fix string2ibpi function (RHEL-90182)</changelog>
</package>
<package pkgid="4c58bca9d449d2789b9ed6fbdce3a9295b38a3e3ef3d71e0bb615cfd36fe6db6" name="ledmon-libs" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan@danny.cz&gt; - 0.97-5" date="1707480000">- rebuilt for sg3_utils 1.48</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.97-6" date="1707912000">- fix incorrect License field syntax</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.0.0-1" date="1711540800">- update to 1.0.0
- package shared ledmon library by Tony Asleson</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-1" date="1731412800">- update to 1.1.0</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 1.1.0-2" date="1749470400">- Fix string2ibpi function (RHEL-90182)</changelog>
</package>
<package pkgid="cd70eb70d5831f17ddd764a16579893ceb6809840f929f1ec4abfd8aa48074e3" name="legacy-printer-app" arch="x86_64">
  <version epoch="0" ver="1.0b2" rel="7.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0b2-5" date="1733313600">- Initial commit on c10s
  Resolves: RHEL-25298</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0b2-6" date="1738065600">- Fix Openscanhub issues (Resolves: RHEL-71659)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0b2-7" date="1738670400">- Resolves: RHEL-71659 Fix additional memory leak - not detected by OSH</changelog>
</package>
<package pkgid="56e1d311b6da7f72f58e19f1fdf0bd75ec9c6240b4bf425a08e3d252002aa722" name="lemon" arch="x86_64">
  <version epoch="0" ver="3.46.1" rel="5.el10_1"/>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.44.1-1" date="1700740800">- Updated to version 3.44.1 (https://sqlite.org/releaselog/3_44_1.html)</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.44.2-1" date="1701950400">- Updated to version 3.44.2 (https://sqlite.org/releaselog/3_44_2.html)</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.45.0-1" date="1705406400">- Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
- List versioned soname in files, preventing unnoticed soname bumps
- Disable func4 tests for i686 arch due to failing float&lt;-&gt;int conversions</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.45.0-2" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.45.1-1" date="1706702400">- Updated to version 3.45.1 (https://sqlite.org/releaselog/3_45_1.html)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.45.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.46.1-1" date="1724155200">- Update to 3.46.1
- https://www.sqlite.org/releaselog/3_46_1.html</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.46.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.46.1-3" date="1738584000">- Enabled sqlite-session feature
- Resolves: RHEL-77326</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.46.1-5" date="1752667200">- Fix CVE-2025-6965
- Resolves: RHEL-103826</changelog>
</package>
<package pkgid="47ea353983076a27b21c6628b6c464e4180a425b55f0c13175f2857351235ed8" name="lemon" arch="x86_64">
  <version epoch="0" ver="3.46.1" rel="6.el10_2"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.46.1-1" date="1724155200">- Update to 3.46.1
- https://www.sqlite.org/releaselog/3_46_1.html</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.46.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.46.1-3" date="1738584000">- Enabled sqlite-session feature
- Resolves: RHEL-77326</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.46.1-4" date="1744718400">- Fix for CVE-2025-3277
- Resolves: RHEL-87295</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.46.1-5" date="1752667200">- Fix CVE-2025-6965
- Resolves: RHEL-103827</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.46.1-6" date="1785326400">- Fixes CVE-2026-11822
- Fixes CVE-2026-11824
- Resolves: RHEL-218247
- Resolves: RHEL-218282</changelog>
</package>
<package pkgid="00e7fc48d98cea99186cafafd5c23e85b758c0cf1c1f995b20d00efef268e540" name="leptonica" arch="x86_64">
  <version epoch="0" ver="1.84.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.83.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.83.1-1" date="1674907200">- Update to 1.83.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.83.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.84.0-1" date="1703419200">- Update to 1.84.0</changelog>
  <changelog author="Michael J Gruber &lt;mjg@fedoraproject.org&gt; - 1.84.0-2" date="1703678400">- Fix pkgconfig file regression (rhbz#2255937)</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.84.1-1" date="1704456000">- Update to 1.84.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.84.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.84.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.84.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.84.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6faa6e8ee3cf97db417d3be0f0d0874c3260db5e93e4d8d411a87fb909aad734" name="leptonica-devel" arch="x86_64">
  <version epoch="0" ver="1.84.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.83.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.83.1-1" date="1674907200">- Update to 1.83.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.83.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.84.0-1" date="1703419200">- Update to 1.84.0</changelog>
  <changelog author="Michael J Gruber &lt;mjg@fedoraproject.org&gt; - 1.84.0-2" date="1703678400">- Fix pkgconfig file regression (rhbz#2255937)</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.84.1-1" date="1704456000">- Update to 1.84.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.84.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.84.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.84.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.84.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0c51bbef7e3185a099070f5f0c4e307e2a06e8127f5911674e3e8ea4bb343e6e" name="leptonica-tools" arch="x86_64">
  <version epoch="0" ver="1.84.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.83.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.83.1-1" date="1674907200">- Update to 1.83.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.83.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.84.0-1" date="1703419200">- Update to 1.84.0</changelog>
  <changelog author="Michael J Gruber &lt;mjg@fedoraproject.org&gt; - 1.84.0-2" date="1703678400">- Fix pkgconfig file regression (rhbz#2255937)</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.84.1-1" date="1704456000">- Update to 1.84.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.84.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.84.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.84.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.84.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d3dca1949e02646bc6bccd1f4a4a9e022360341d4243b7705e2a9dd1425fa825" name="less" arch="x86_64">
  <version epoch="0" ver="661" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 643-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 643-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 643-4" date="1707220800">- migrated to SPDX license</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 643-5" date="1713873600">- Fix CVE-2024-32487
- Add gating.yaml
- Resolves: RHEL-32740</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 643-6" date="1717502400">- Fix License field
- Related: RHEL-32740</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 643-7" date="1718193600">- Bump release
- Related: RHEL-32740</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 643-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 661-1" date="1721995200">- fix static analysis findigs (RHEL-40257)
- updated to 661</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 661-2" date="1723291200">- fix post-v590 regression in file-types check</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 661-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c2b744cbbebf41976ff9b966fa197637c7259c50c0c0bc1dbed2f257793acf2c" name="lftp" arch="x86_64">
  <version epoch="0" ver="4.9.2" rel="20.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.2-12" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.2-13" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.9.2-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.9.2-15" date="1721736000">- Removing lftp-scripts</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.9.2-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 4.9.2-17" date="1746532800">- Ensure proper closing of TLS connection
- Resolves: RHEL-91005</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 4.9.2-18" date="1750939200">- Improve fix for RHEL-91005
- Resolves: RHEL-91005</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 4.9.2-19" date="1751457600">- Do not wait for server close-notify on TLS close
- Resolves: RHEL-100407</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.9.2-20" date="1759406400">- Adding a timeout for TLS close
- Resolves: RHEL-113472 - "cannot seek on data source" in TLS lftp sessions</changelog>
</package>
<package pkgid="b5cbf2869444eebc362c2550cd1f20a8996c769a24b416bfc4605af99afdff48" name="libICE" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.10-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.10-11" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.0.10-12" date="1694001600">- SPDX migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.1-1" date="1696507200">- libICE 1.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="abd0a655c6ed8583e3778db457ae330cedb79f93662fedf314c22cf8213a2bbd" name="libICE-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.10-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.10-11" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.0.10-12" date="1694001600">- SPDX migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.1-1" date="1696507200">- libICE 1.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d08159ce506b22fa3cd18cdb7791009c5027e486d51228d6d39fa436ba3152ba" name="libSM" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.3-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.3-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.2.3-14" date="1694001600">- SPDX migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.2.4-1" date="1696507200">- libSM 1.2.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.4-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.4-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.4-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="144f66bdfb84d34a2b48e461c877235b756fe1c5e5c9e4a967fddf952153cc5c" name="libSM-devel" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.3-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.3-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.2.3-14" date="1694001600">- SPDX migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.2.4-1" date="1696507200">- libSM 1.2.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.4-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.4-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.4-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="17290c1adad836111e9e4c845a219893339ec132f24773e3e6a2325ae0a0db41" name="libX11" arch="x86_64">
  <version epoch="0" ver="1.8.10" rel="1.el10"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.8.6-3" date="1694088000">- SPDX Migration</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.8.7-1" date="1696420800">- libX11 1.8.7
  - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
    PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
   a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.7-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.7-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.8.7-4" date="1718884800">- Fix XTS test XCopyColormapAndFree/5 hangs
  Resolves: https://issues.redhat.com/browse/RHEL-40132
- Fix RHEL SAST Automation errors
  Resolves: https://issues.redhat.com/browse/RHEL-34918</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.8.7-5" date="1718884801">- Add gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.7-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.8.7-7" date="1720180800">- Fix deadlock in XRebindKeysym()
  Resolves: https://issues.redhat.com/browse/RHEL-45855</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.7-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt;  - 1.8.10-1" date="1733400000">- Rebase to 1.8.10
  Resolves: https://issues.redhat.com/browse/RHEL-70185</changelog>
</package>
<package pkgid="6c614b190332011e58bcb12651314edaeec1a85faef9529971232f6959ec9afe" name="libX11-common" arch="noarch">
  <version epoch="0" ver="1.8.10" rel="1.el10"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.8.6-3" date="1694088000">- SPDX Migration</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.8.7-1" date="1696420800">- libX11 1.8.7
  - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
    PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
   a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.7-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.7-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.8.7-4" date="1718884800">- Fix XTS test XCopyColormapAndFree/5 hangs
  Resolves: https://issues.redhat.com/browse/RHEL-40132
- Fix RHEL SAST Automation errors
  Resolves: https://issues.redhat.com/browse/RHEL-34918</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.8.7-5" date="1718884801">- Add gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.7-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.8.7-7" date="1720180800">- Fix deadlock in XRebindKeysym()
  Resolves: https://issues.redhat.com/browse/RHEL-45855</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.7-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt;  - 1.8.10-1" date="1733400000">- Rebase to 1.8.10
  Resolves: https://issues.redhat.com/browse/RHEL-70185</changelog>
</package>
<package pkgid="c9bc9868215cc819efaec796c6db6b945ab3f70e1abab63878adf076b35ff756" name="libX11-devel" arch="x86_64">
  <version epoch="0" ver="1.8.10" rel="1.el10"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.8.6-3" date="1694088000">- SPDX Migration</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.8.7-1" date="1696420800">- libX11 1.8.7
  - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
    PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
   a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.7-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.7-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.8.7-4" date="1718884800">- Fix XTS test XCopyColormapAndFree/5 hangs
  Resolves: https://issues.redhat.com/browse/RHEL-40132
- Fix RHEL SAST Automation errors
  Resolves: https://issues.redhat.com/browse/RHEL-34918</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.8.7-5" date="1718884801">- Add gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.7-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.8.7-7" date="1720180800">- Fix deadlock in XRebindKeysym()
  Resolves: https://issues.redhat.com/browse/RHEL-45855</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.7-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt;  - 1.8.10-1" date="1733400000">- Rebase to 1.8.10
  Resolves: https://issues.redhat.com/browse/RHEL-70185</changelog>
</package>
<package pkgid="9997a5fa911f09111f5c5c2ca89175e849a9bcbd18c7f131686995ae3a81cd84" name="libX11-xcb" arch="x86_64">
  <version epoch="0" ver="1.8.10" rel="1.el10"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.8.6-3" date="1694088000">- SPDX Migration</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.8.7-1" date="1696420800">- libX11 1.8.7
  - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
    PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
   a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.7-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.7-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.8.7-4" date="1718884800">- Fix XTS test XCopyColormapAndFree/5 hangs
  Resolves: https://issues.redhat.com/browse/RHEL-40132
- Fix RHEL SAST Automation errors
  Resolves: https://issues.redhat.com/browse/RHEL-34918</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.8.7-5" date="1718884801">- Add gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.7-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.8.7-7" date="1720180800">- Fix deadlock in XRebindKeysym()
  Resolves: https://issues.redhat.com/browse/RHEL-45855</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.7-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt;  - 1.8.10-1" date="1733400000">- Rebase to 1.8.10
  Resolves: https://issues.redhat.com/browse/RHEL-70185</changelog>
</package>
<package pkgid="d48cafb4362555d65e3b5f89541fb46dab7b8d32780a6905e60f0e3107ac1e5f" name="libXau" arch="x86_64">
  <version epoch="0" ver="1.0.11" rel="8.el10"/>
  <changelog author="Dr. Tilmann Bubeck &lt;bubeck@fedoraproject.org&gt; - 1.0.11-1" date="1670673600">- update to 1.0.11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.11-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.11-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.0.11-4" date="1694001600">- SPDX Migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.11-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.11-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.11-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.11-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="37c746d393364b3cbfefd52d8fea3a52ca29ce703403ecc7e5de76f0bace6675" name="libXau-devel" arch="x86_64">
  <version epoch="0" ver="1.0.11" rel="8.el10"/>
  <changelog author="Dr. Tilmann Bubeck &lt;bubeck@fedoraproject.org&gt; - 1.0.11-1" date="1670673600">- update to 1.0.11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.11-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.11-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.0.11-4" date="1694001600">- SPDX Migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.11-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.11-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.11-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.11-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e26c06bfae97dfca8dee6e2526f4ae87b4e7e523496978010cc8ef22e56210f8" name="libXaw" arch="x86_64">
  <version epoch="0" ver="1.0.15" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.14-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.14-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.0.14-6" date="1694001600">- SPDX migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.0.15-1" date="1696507200">- libXaw 1.0.15</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.15-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.15-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.15-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.15-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="43f7780a19fbefc6d1b5614db5b1d3f363e6eb7510173ce3716b1c57d758aa12" name="libXaw-devel" arch="x86_64">
  <version epoch="0" ver="1.0.15" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.14-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.14-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.0.14-6" date="1694001600">- SPDX migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.0.15-1" date="1696507200">- libXaw 1.0.15</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.15-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.15-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.15-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.15-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f88d01d96023e17535e75a2d816d640df42b8842c38a9e4539ad8434a16d02d9" name="libXcomposite" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.5-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.5-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 0.4.5-11" date="1694001600">- SPDX migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 0.4.6-1" date="1696507200">- libXcomposite 0.4.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.6-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.6-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.6-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.6-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6dda2cab8894044acb023b5abfb65cb6a7a5498af5916fdd55f078dcb6f22be8" name="libXcomposite-devel" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.5-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.5-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 0.4.5-11" date="1694001600">- SPDX migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 0.4.6-1" date="1696507200">- libXcomposite 0.4.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.6-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.6-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.6-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.6-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3c0533550ca6caaa6827c5141a1f16aaf9e6fca2b9869c25f2c2383904e4d41a" name="libXcursor" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.2.1-5" date="1694001600">- SPDX Migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="25eaa5bc4af903b554e4eceb80796602a465fd82a3c7145be32e245db4d3ac74" name="libXcursor-devel" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.2.1-5" date="1694001600">- SPDX Migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="63d495dd9b4af1290a2ab2a0cd1624936c849bf5aac58faef549eb95b00cc60a" name="libXdamage" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.1.5-11" date="1694001600">- SPDX Migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.6-1" date="1696507200">- libXdamage 1.1.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.6-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.6-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.6-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.6-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a3db1eeb1960def1eb7076b2ff0e8197fd2c105787ae54086b0ca5be3d37eca6" name="libXdamage-devel" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.1.5-11" date="1694001600">- SPDX Migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.6-1" date="1696507200">- libXdamage 1.1.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.6-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.6-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.6-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.6-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cde6acc7ccfc76aaab4117563d19d6a2322fda8819a63b511569635cdd90b8ce" name="libXdmcp" arch="x86_64">
  <version epoch="0" ver="1.1.4" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-11" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.1.3-12" date="1694001600">- SPDX Migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.4-1" date="1696507200">- libXdmcp 1.1.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.4-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4751e5e06b3a5484b29aba5a16c399d40a48a5dc72fdd74202688b7990206794" name="libXdmcp-devel" arch="x86_64">
  <version epoch="0" ver="1.1.4" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-11" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.1.3-12" date="1694001600">- SPDX Migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.4-1" date="1696507200">- libXdmcp 1.1.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.4-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="507ffe1911853759f79e267121a36ebebe76d9a0c407eae8f01bb90686acd126" name="libXext" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="3.el10"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.3.5-1" date="1667563200">- libXext 1.3.5-1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.3.5-4" date="1696248000">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.3.6-1" date="1707134400">- libXext 1.3.6-1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.6-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.6-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="753cccff895b470cb86f6663ff3ba83c2bb969df75173a5c5740bc25ea483d31" name="libXext-devel" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="3.el10"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.3.5-1" date="1667563200">- libXext 1.3.5-1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.3.5-4" date="1696248000">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.3.6-1" date="1707134400">- libXext 1.3.6-1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.6-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.6-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e7834f749946ba00544b7de19713b275b0804cd7883760deec7f28a6de1e7fd8" name="libXfixes" arch="x86_64">
  <version epoch="0" ver="6.0.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.0-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.0-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 6.0.0-7" date="1694001600">- SPDX migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 6.0.1-1" date="1696507200">- libXfixes 6.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.0.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.0.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="70e7c5c07dd04dda361d7f8419c6d22141d0eae259f7d772f6f8cd7ac0a9444f" name="libXfixes-devel" arch="x86_64">
  <version epoch="0" ver="6.0.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.0-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.0-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 6.0.0-7" date="1694001600">- SPDX migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 6.0.1-1" date="1696507200">- libXfixes 6.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.0.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.0.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="353da5ce698c20b9e37eeb293c6e91713fcb27b865bc11001da10f2de094bd20" name="libXfont2" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-15" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.0.3-16" date="1694088000">- SPDX Migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.0.6-1" date="1696507200">- libXfont2 2.0.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0b7684343b88b339a064b827d79af9952d5b2242abb3ee92db7831a3459dc8a0" name="libXfont2" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="5.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 2.0.6-5.1" date="1783512000">- CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
  Resolves: https://redhat.atlassian.net/browse/RHEL-191882
  Resolves: https://redhat.atlassian.net/browse/RHEL-191930
  Resolves: https://redhat.atlassian.net/browse/RHEL-191949</changelog>
</package>
<package pkgid="bbe29e22b7287a813d4d0147fdc96ab345de36ee2484853226c4a48949b271d1" name="libXfont2" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="5.el10_2.3"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 2.0.6-5.1" date="1783512000">- CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
  Resolves: https://redhat.atlassian.net/browse/RHEL-191882
  Resolves: https://redhat.atlassian.net/browse/RHEL-191930
  Resolves: https://redhat.atlassian.net/browse/RHEL-191949</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.0.6-5.2" date="1786017600">- CVE fix for: CVE-2026-44950
  Resolves: https://redhat.atlassian.net/browse/RHEL-222024</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.0.6-5.3" date="1786017601">- CVE fix for: CVE-2026-59679
  Resolves: https://redhat.atlassian.net/browse/RHEL-221949</changelog>
</package>
<package pkgid="f7f946f7a9e8795888458c9c31f03d455e4baa96d2786f7e9d679ee426a8a19d" name="libXfont2-devel" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-15" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.0.3-16" date="1694088000">- SPDX Migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.0.6-1" date="1696507200">- libXfont2 2.0.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6a4bf152bc4a0a1d4b62c5fb450ae94b9bc5dcfc7a85a87a91a587cf037b9be8" name="libXfont2-devel" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="5.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 2.0.6-5.1" date="1783512000">- CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
  Resolves: https://redhat.atlassian.net/browse/RHEL-191882
  Resolves: https://redhat.atlassian.net/browse/RHEL-191930
  Resolves: https://redhat.atlassian.net/browse/RHEL-191949</changelog>
</package>
<package pkgid="1377d820e04f513dd0392f1d68fc95903d81bfbba012ea72260b8779a840d328" name="libXfont2-devel" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="5.el10_2.3"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 2.0.6-5.1" date="1783512000">- CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
  Resolves: https://redhat.atlassian.net/browse/RHEL-191882
  Resolves: https://redhat.atlassian.net/browse/RHEL-191930
  Resolves: https://redhat.atlassian.net/browse/RHEL-191949</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.0.6-5.2" date="1786017600">- CVE fix for: CVE-2026-44950
  Resolves: https://redhat.atlassian.net/browse/RHEL-222024</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.0.6-5.3" date="1786017601">- CVE fix for: CVE-2026-59679
  Resolves: https://redhat.atlassian.net/browse/RHEL-221949</changelog>
</package>
<package pkgid="644c55ba061b55b5a15705c6d8aedca1eb7af8d213fb82a11a8e4f7336faadcd" name="libXft" arch="x86_64">
  <version epoch="0" ver="2.3.8" rel="8.el10"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 2.3.6-1" date="1667563200">- libXft 2.3.6-1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.6-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 2.3.8-1" date="1682337600">- libXft 2.3.8-1</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.3.8-2" date="1683028800">- Fix font loading
Resolves: rhbz#2154735</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.8-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 2.3.8-4" date="1694001600">- SPDX Migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.8-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.8-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.8-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.8-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a04550e3557a2d450a118979e1024099f77f135eb6e286c7e3d2f4bc8ab91ace" name="libXft-devel" arch="x86_64">
  <version epoch="0" ver="2.3.8" rel="8.el10"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 2.3.6-1" date="1667563200">- libXft 2.3.6-1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.6-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 2.3.8-1" date="1682337600">- libXft 2.3.8-1</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.3.8-2" date="1683028800">- Fix font loading
Resolves: rhbz#2154735</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.8-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 2.3.8-4" date="1694001600">- SPDX Migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.8-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.8-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.8-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.8-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7ddb789a0d6dcab43d23576597e95f298c325efb51754e755081d7530e3b60bb" name="libXi" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.8.1-1" date="1683201600">- libXi 1.8.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.8.1-3" date="1694001600">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.1-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.1-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.1-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="573e2fda51475dff43e66051cc8e9f7378b018ef64daa4e7802a82cfd9175785" name="libXi-devel" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.8.1-1" date="1683201600">- libXi 1.8.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.8.1-3" date="1694001600">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.1-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.1-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.1-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1598ccb86562eb8d82215a55834e683a2cc07ab8b4d043b71191f16cb6529b85" name="libXinerama" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="8.el10"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.1.5-1" date="1667563200">- libXinerama 1.1.5-1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.1.5-4" date="1694001600">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.5-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.5-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0eaf28e639c8ba476270cf5e5b927b4a05074dc5c49e90793e1196062f027b0a" name="libXinerama-devel" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="8.el10"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.1.5-1" date="1667563200">- libXinerama 1.1.5-1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.1.5-4" date="1694001600">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.5-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.5-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b5d9a4cde3ea6a92fd85e812b2fc22982b43e2225bdcf51b97c5ca4c42600dd8" name="libXmu" arch="x86_64">
  <version epoch="0" ver="1.1.4" rel="8.el10"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.1.4-1" date="1667563200">- libXmu 1.1.4-1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.1.4-4" date="1694001600">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.4-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.4-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8e0a59f76abd69c172eec13312c96b7246e9cb19e09426a6d3162a16df4816c5" name="libXmu-devel" arch="x86_64">
  <version epoch="0" ver="1.1.4" rel="8.el10"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.1.4-1" date="1667563200">- libXmu 1.1.4-1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.1.4-4" date="1694001600">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.4-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.4-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="45767a96e21d4e5f52997a2873dd05b3815b17678861bc305071bf258dec60e4" name="libXpm" arch="x86_64">
  <version epoch="0" ver="3.5.17" rel="5.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.15-1" date="1674043200">- libXpm 3.5.15, fixes CVE-2022-46285, CVE-2022-44617, CVE-2022-4883</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.15-2" date="1674043201">- Add missing BuildRequires</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.15-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.15-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 3.5.15-5" date="1694001600">- SPDX migration</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.17-1" date="1696507200">- libXpm 3.5.17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.17-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.17-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5.17-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5.17-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6a5445eba79fc5b1c13810f1084df8e79e2d986a87d29cc4dbac048679c1e9ea" name="libXpm-devel" arch="x86_64">
  <version epoch="0" ver="3.5.17" rel="5.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.15-1" date="1674043200">- libXpm 3.5.15, fixes CVE-2022-46285, CVE-2022-44617, CVE-2022-4883</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.15-2" date="1674043201">- Add missing BuildRequires</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.15-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.15-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 3.5.15-5" date="1694001600">- SPDX migration</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.17-1" date="1696507200">- libXpm 3.5.17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.17-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.17-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5.17-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.5.17-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a56cad66a66da49c8ee0a018e50cf7aa3393d571ed26adccacca612ccf4baf58" name="libXrandr" arch="x86_64">
  <version epoch="0" ver="1.5.4" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-11" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.5.2-12" date="1694001600">- SPDX migration</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.5.4-1" date="1696507200">- libXrandr 1.5.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.4-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.4-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.4-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="badaa5b7cea8672e69dc37347f58ab17befb3d07666e7e6bea3f997e4993bdda" name="libXrandr-devel" arch="x86_64">
  <version epoch="0" ver="1.5.4" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-11" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.5.2-12" date="1694001600">- SPDX migration</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.5.4-1" date="1696507200">- libXrandr 1.5.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.4-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.4-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.4-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="db9dcd9a509c5286a6c50f415a4dcaeb5e1fe6e864cdb939ff9c5ad9d8a903e6" name="libXrender" arch="x86_64">
  <version epoch="0" ver="0.9.11" rel="8.el10"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 0.9.11-1" date="1667563200">- libXrender 0.9.11-1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 0.9.11-4" date="1694001600">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.11-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.11-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d2f76f802ee015de85aaddb0b12b458a4d257eca30ba0ef33c0bf1911cb326c5" name="libXrender-devel" arch="x86_64">
  <version epoch="0" ver="0.9.11" rel="8.el10"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 0.9.11-1" date="1667563200">- libXrender 0.9.11-1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 0.9.11-4" date="1694001600">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.11-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.11-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0039cd88e69d3aa45232d5b8ba3999ca985996f819ea328c622b12553dbc591f" name="libXres" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.2.1-6" date="1694001600">- SPDX Migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.2.2-1" date="1696507200">- libXres 1.2.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="42a222d0efc24ca7d132738210370ccab05d7912ec65405f524d083c57808c40" name="libXres-devel" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.2.1-6" date="1694001600">- SPDX Migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.2.2-1" date="1696507200">- libXres 1.2.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7597a448ae8c970d37b60c3b8b75aa72360e8810c404035af58cc3cdd8e47634" name="libXt" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.2.1-6" date="1694001600">- SPDX migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.3.0-1" date="1696507200">- libXt 1.3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5657dea082a0d0718867bc45a32df2dbafbdb82715dc585c3f1eaf48e070fdc2" name="libXt-devel" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.2.1-6" date="1694001600">- SPDX migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.3.0-1" date="1696507200">- libXt 1.3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fd7404143b2fddb734a53ae61eafbefbc0dfa3b564a031ad282428a6b356cefe" name="libXtst" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="8.el10"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.2.4-1" date="1667563200">- libXtst 1.2.4-1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.4-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.2.4-4" date="1696248000">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.4-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.4-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.4-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.4-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="63b957eba89ad6ee0ebc70fe3191e2bba38bfecb4c161e35b234652a413de97d" name="libXtst-devel" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="8.el10"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.2.4-1" date="1667563200">- libXtst 1.2.4-1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.4-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.2.4-4" date="1696248000">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.4-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.4-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.4-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.4-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="09f087b749f8c5b99bf97b143b20971009760508fcf41f9bc50ce8f8208bfc2e" name="libXv" arch="x86_64">
  <version epoch="0" ver="1.0.12" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.11-18" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.11-19" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.0.11-20" date="1694001600">- SPDX migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.0.12-1" date="1696507200">- libXv 1.0.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.12-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.12-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.12-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.12-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0780676431d7c3d32350b8407f88e8f7918f20f38f30b235b00bf5c53375e960" name="libXv-devel" arch="x86_64">
  <version epoch="0" ver="1.0.12" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.11-18" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.11-19" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.0.11-20" date="1694001600">- SPDX migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.0.12-1" date="1696507200">- libXv 1.0.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.12-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.12-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.12-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.12-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e3a7cdd734d7d69a4e1a42d89d5c1d3a83545bc9a2423b9bb19a8d5b6d77717f" name="libXxf86vm" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="8.el10"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.1.5-1" date="1667563200">- libXxf86vm 1.1.5-1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.1.5-4" date="1694001600">- SPDX Migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.5-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.5-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="56c146085b306ceadf8716f0bd256becbe48e82597b9e779dbe8a862fe0c6739" name="libXxf86vm-devel" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="8.el10"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.1.5-1" date="1667563200">- libXxf86vm 1.1.5-1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.1.5-4" date="1694001600">- SPDX Migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.5-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.5-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0277de11bd431e2e336eeef2c242c2b0c1e91e9dc542c9e4103f94040a412f7c" name="liba52" arch="x86_64">
  <version epoch="0" ver="0.7.4" rel="50.el10"/>
  <changelog author="Peter Fordham &lt;peter.fordham@gmail.com&gt; - 0.7.4-44" date="1669809600">- Port configure script to C99</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.4-45" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.4-46" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.4-47" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.4-48" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.4-49" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.4-50" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="29c4faebaf4b7dd8e20f8335f1bd53973316d77897bbfc4266b3c791a9319422" name="liba52-devel" arch="x86_64">
  <version epoch="0" ver="0.7.4" rel="50.el10"/>
  <changelog author="Peter Fordham &lt;peter.fordham@gmail.com&gt; - 0.7.4-44" date="1669809600">- Port configure script to C99</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.4-45" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.4-46" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.4-47" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.4-48" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.4-49" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.4-50" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="773c487b6816eee480bc21f046326a3466894d514044095e806526cf46f8778e" name="libabigail" arch="x86_64">
  <version epoch="0" ver="2.9" rel="1.el10"/>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.5-1" date="1713873600">- Update to upstream 2.5 tarball
- Drop patches (as they are now upstream):
  0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
  0002-suppression-Add-has_strict_flexible_array_data_membe.patch
- Enable abidb
- Add BuildRequires: python3-devel
- Add libabigail.so.4 and libabigail.so.4.0.0 to the RPM</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.6-1" date="1734091200">- Update to upstream 2.6 tarball
- Update to changing SONAME (libabigail.so.5.0.0)
- Add BuildRequires xxhash-devel</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.7.1" date="1744632000">- Update to upstream 2.7 tarball
- Update to changing SONAME (libabigail.so.6.0.0)</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.7-2" date="1746532800">- Use xxhash functions inlined since xxhash is buildroot-only in RHEL 10.1</changelog>
  <changelog author="Michal Kolar &lt;mkolar@redhat.com&gt; - 2.7-3" date="1746532801">- Fix CI relevant issues</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.8-1" date="1752062400">- Update to upstream 2.8 tarball
- Remove 0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch
  that is applied upstream.
- Update to changing SONAME (libabigail.so.7.0.0)
- Add xxhash-devel as BuildRequires and inlined-xxhash to avoid
  depending on it at runtime</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.8-2" date="1752062401">- Rebuild for c10s
- Resolves: RHEL-102574</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9-1" date="1763035200">- Rebase to upstream 2.9 tarball
- Update to changing SONAME (libabigail.so.8.0.0)
- Simplify %check section to run both test targets in single invocation
- Resolves: RHEL-121667</changelog>
</package>
<package pkgid="b69b0d20c56f7c6500622585ab343be1de0cce4ad9685ac8b38e909f49a19d1a" name="libabigail-devel" arch="x86_64">
  <version epoch="0" ver="2.9" rel="1.el10"/>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.5-1" date="1713873600">- Update to upstream 2.5 tarball
- Drop patches (as they are now upstream):
  0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
  0002-suppression-Add-has_strict_flexible_array_data_membe.patch
- Enable abidb
- Add BuildRequires: python3-devel
- Add libabigail.so.4 and libabigail.so.4.0.0 to the RPM</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.6-1" date="1734091200">- Update to upstream 2.6 tarball
- Update to changing SONAME (libabigail.so.5.0.0)
- Add BuildRequires xxhash-devel</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.7.1" date="1744632000">- Update to upstream 2.7 tarball
- Update to changing SONAME (libabigail.so.6.0.0)</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.7-2" date="1746532800">- Use xxhash functions inlined since xxhash is buildroot-only in RHEL 10.1</changelog>
  <changelog author="Michal Kolar &lt;mkolar@redhat.com&gt; - 2.7-3" date="1746532801">- Fix CI relevant issues</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.8-1" date="1752062400">- Update to upstream 2.8 tarball
- Remove 0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch
  that is applied upstream.
- Update to changing SONAME (libabigail.so.7.0.0)
- Add xxhash-devel as BuildRequires and inlined-xxhash to avoid
  depending on it at runtime</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.8-2" date="1752062401">- Rebuild for c10s
- Resolves: RHEL-102574</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9-1" date="1763035200">- Rebase to upstream 2.9 tarball
- Update to changing SONAME (libabigail.so.8.0.0)
- Simplify %check section to run both test targets in single invocation
- Resolves: RHEL-121667</changelog>
</package>
<package pkgid="d515b37788ff9ed5c359962810801bd856b99de2925965d22e92edb5cc1e39a3" name="libabigail-doc" arch="x86_64">
  <version epoch="0" ver="2.9" rel="1.el10"/>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.5-1" date="1713873600">- Update to upstream 2.5 tarball
- Drop patches (as they are now upstream):
  0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
  0002-suppression-Add-has_strict_flexible_array_data_membe.patch
- Enable abidb
- Add BuildRequires: python3-devel
- Add libabigail.so.4 and libabigail.so.4.0.0 to the RPM</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.6-1" date="1734091200">- Update to upstream 2.6 tarball
- Update to changing SONAME (libabigail.so.5.0.0)
- Add BuildRequires xxhash-devel</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.7.1" date="1744632000">- Update to upstream 2.7 tarball
- Update to changing SONAME (libabigail.so.6.0.0)</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.7-2" date="1746532800">- Use xxhash functions inlined since xxhash is buildroot-only in RHEL 10.1</changelog>
  <changelog author="Michal Kolar &lt;mkolar@redhat.com&gt; - 2.7-3" date="1746532801">- Fix CI relevant issues</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.8-1" date="1752062400">- Update to upstream 2.8 tarball
- Remove 0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch
  that is applied upstream.
- Update to changing SONAME (libabigail.so.7.0.0)
- Add xxhash-devel as BuildRequires and inlined-xxhash to avoid
  depending on it at runtime</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.8-2" date="1752062401">- Rebuild for c10s
- Resolves: RHEL-102574</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9-1" date="1763035200">- Rebase to upstream 2.9 tarball
- Update to changing SONAME (libabigail.so.8.0.0)
- Simplify %check section to run both test targets in single invocation
- Resolves: RHEL-121667</changelog>
</package>
<package pkgid="7bd4dbead63862b79af070a6fae97860030a81803471d79494ca75f68f521634" name="libacl" arch="x86_64">
  <version epoch="0" ver="2.3.2" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Temuri Doghonadze &lt;temuri.doghonadze@gmail.com&gt; - 2.3.1-9" date="1694433600">- Backport Georgian locale from git
- Note, it will not be needed after release of new version of acl</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.1-10" date="1696593600">- preserve failed setfacl return code (RHEL-3909)
- make the license tag more precise</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.1-11" date="1701432000">- make acl compatible with -D_FORTIFY_SOURCE=3 (rhbz#2249839)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-12" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-13" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.2-1" date="1706097600">- rebase to latest version (rhbz#2260000)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.2-3" date="1721390400">- fix regressions caused by the get{gr,pw}nam_r patch (RHEL-40603)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b6e84953c487fe1ec1794691cc85b6ea85c2333fb19a3410dc85be6397093b0f" name="libacl" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="1.el10_2"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.2-3" date="1721390400">- fix regressions caused by the get{gr,pw}nam_r patch (RHEL-40603)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.4.0-1" date="1782388800">- rebase to 2.4.0 to fix the following CVEs:
  - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186106)
  - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186207)</changelog>
</package>
<package pkgid="9f433591273c029b96275c5b42530f0d32d2b9b2d0f713b92bf0574501395b33" name="libacl-devel" arch="x86_64">
  <version epoch="0" ver="2.3.2" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Temuri Doghonadze &lt;temuri.doghonadze@gmail.com&gt; - 2.3.1-9" date="1694433600">- Backport Georgian locale from git
- Note, it will not be needed after release of new version of acl</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.1-10" date="1696593600">- preserve failed setfacl return code (RHEL-3909)
- make the license tag more precise</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.1-11" date="1701432000">- make acl compatible with -D_FORTIFY_SOURCE=3 (rhbz#2249839)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-12" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-13" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.2-1" date="1706097600">- rebase to latest version (rhbz#2260000)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.2-3" date="1721390400">- fix regressions caused by the get{gr,pw}nam_r patch (RHEL-40603)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="03ec4306613f46f94922daf28ae1a4c11ab96f58c8d884b32f9f267654f01dba" name="libacl-devel" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="1.el10_2"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.3.2-3" date="1721390400">- fix regressions caused by the get{gr,pw}nam_r patch (RHEL-40603)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.4.0-1" date="1782388800">- rebase to 2.4.0 to fix the following CVEs:
  - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186106)
  - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186207)</changelog>
</package>
<package pkgid="c2b0e5827d0458475fda7d9dd83518248c16ba379af43318f9079da47eb9047b" name="libadwaita" arch="x86_64">
  <version epoch="0" ver="1.6.10" rel="1.el10"/>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.5.1-3" date="1718193600">- Fix various openscan issues</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.6~alpha-1" date="1721131200">- Update to 1.6~alpha</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6~rc-1" date="1725451200">- Bump to libadwaita-1.6-rc</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.0-1" date="1727438400">- Update to 1.6.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.1-1" date="1730721600">- Update to libadwaita 1.6.1</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.6-1" date="1745928000">- Update to 1.6.6 with manual patching</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.8-1" date="1752062400">- 1.6.8: bump patches up to 1.6.8</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.10-1" date="1762948800">- Backport patches up to 1.6.10</changelog>
</package>
<package pkgid="e94cd9621b56ec22257b96683f197bed00ea06e5a8511721fff53ac5b646a1b1" name="libadwaita-demo" arch="noarch">
  <version epoch="0" ver="1.6.10" rel="1.el10"/>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.5.1-3" date="1718193600">- Fix various openscan issues</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.6~alpha-1" date="1721131200">- Update to 1.6~alpha</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6~rc-1" date="1725451200">- Bump to libadwaita-1.6-rc</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.0-1" date="1727438400">- Update to 1.6.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.1-1" date="1730721600">- Update to libadwaita 1.6.1</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.6-1" date="1745928000">- Update to 1.6.6 with manual patching</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.8-1" date="1752062400">- 1.6.8: bump patches up to 1.6.8</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.10-1" date="1762948800">- Backport patches up to 1.6.10</changelog>
</package>
<package pkgid="14bb451e7e42837cf52d0edb7dae745e0bb057a0f8b784f92f9984f8a44fc891" name="libadwaita-devel" arch="x86_64">
  <version epoch="0" ver="1.6.10" rel="1.el10"/>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.5.1-3" date="1718193600">- Fix various openscan issues</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.6~alpha-1" date="1721131200">- Update to 1.6~alpha</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6~rc-1" date="1725451200">- Bump to libadwaita-1.6-rc</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.0-1" date="1727438400">- Update to 1.6.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.1-1" date="1730721600">- Update to libadwaita 1.6.1</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.6-1" date="1745928000">- Update to 1.6.6 with manual patching</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.8-1" date="1752062400">- 1.6.8: bump patches up to 1.6.8</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.10-1" date="1762948800">- Backport patches up to 1.6.10</changelog>
</package>
<package pkgid="9f3852984802a84f0fcf33a7a7d5c254d7784a487ad296e191049189266fb5ef" name="libadwaita-doc" arch="noarch">
  <version epoch="0" ver="1.6.10" rel="1.el10"/>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.5.1-3" date="1718193600">- Fix various openscan issues</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.6~alpha-1" date="1721131200">- Update to 1.6~alpha</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6~rc-1" date="1725451200">- Bump to libadwaita-1.6-rc</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.0-1" date="1727438400">- Update to 1.6.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.1-1" date="1730721600">- Update to libadwaita 1.6.1</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.6-1" date="1745928000">- Update to 1.6.6 with manual patching</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.8-1" date="1752062400">- 1.6.8: bump patches up to 1.6.8</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.6.10-1" date="1762948800">- Backport patches up to 1.6.10</changelog>
</package>
<package pkgid="9d6afa18f923b6020b1dde5333184002f15a1c63fe3ad4e13792aca69d6bf477" name="libaio" arch="x86_64">
  <version epoch="0" ver="0.3.111" rel="22.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-15" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 0.3.111-17" date="1697198400">- migrated to SPDX license (Jeff Moyer)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-18" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-19" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.111-20" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.111-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 0.3.111-22" date="1733918400">- Bump release to trigger new test run.
- Resolves: RHEL-70741</changelog>
</package>
<package pkgid="d1f69f6cbecb2b5ae66d04da31f42113302ef94c8bb52f191c5464bf2f64f3f9" name="libaio-devel" arch="x86_64">
  <version epoch="0" ver="0.3.111" rel="22.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-15" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 0.3.111-17" date="1697198400">- migrated to SPDX license (Jeff Moyer)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-18" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.111-19" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.111-20" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.111-21" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 0.3.111-22" date="1733918400">- Bump release to trigger new test run.
- Resolves: RHEL-70741</changelog>
</package>
<package pkgid="c20af319aa8f5cf45ea2a04a1f945dea05eb50f7226b7601efcc8c7fc6313cee" name="libao" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="29.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-25" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-26" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-27" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.0-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.0-29" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3ef678c8ba53c067f33566327fe4ecd20831aed4b4f573e92c687ba8b8d6cf1b" name="libao-devel" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="29.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-25" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-26" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-27" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.0-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.0-29" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="575e28b39551423b0d5dcb9b97a179b0290bf1c7b848582c19bf3a121bc583eb" name="libappstream-glib" arch="x86_64">
  <version epoch="0" ver="0.8.3" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.8.2-3" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.8.2-4" date="1684497600">- Rebuild against rpm-4.19
  (https://fedoraproject.org/wiki/Changes/RPM-4.19)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.8.2-8" date="1717416000">- Add gating.yaml via API</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.8.3-1" date="1717588800">- Rebase to the latest upstream releases</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.3-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="f86ebb6a11104de49f8df13d99822e327c96f9beff782f556d8f43d996e21f87" name="libappstream-glib-builder" arch="x86_64">
  <version epoch="0" ver="0.8.3" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.8.2-3" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.8.2-4" date="1684497600">- Rebuild against rpm-4.19
  (https://fedoraproject.org/wiki/Changes/RPM-4.19)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.8.2-8" date="1717416000">- Add gating.yaml via API</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.8.3-1" date="1717588800">- Rebase to the latest upstream releases</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.3-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="11cb465e12c28f97eb1966f1879decdff978f773eba04d2b2ce58b5b59805282" name="libappstream-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.8.3" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.8.2-3" date="1677067200">- migrated to SPDX license</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.8.2-4" date="1684497600">- Rebuild against rpm-4.19
  (https://fedoraproject.org/wiki/Changes/RPM-4.19)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.8.2-8" date="1717416000">- Add gating.yaml via API</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.8.3-1" date="1717588800">- Rebase to the latest upstream releases</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.3-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="95e46cd83b3a270af45b45eac97b63d0410b2e6f438f77967eec8716e03338f3" name="libarchive" arch="x86_64">
  <version epoch="0" ver="3.7.7" rel="10.el10_2"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-1" date="1731931200">- Rebase to version 3.7.7
- Fixing SAST issues, accepted by upstream
- Resolves: RHEL-39391 RHEL-67895</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3.7.7-2" date="1741089600">- Fix for CVE-2024-57970
- Resolves: RHEL-79877</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-3" date="1749211200">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-4" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-5" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-6" date="1774353600">- Release bump</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-7" date="1774440000">- Release bump for typo in dist</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-8" date="1775649600">- Resolves: CVE-2026-4424</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-9" date="1782820800">- Resolves: CVE-2026-14164</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-10" date="1784116800">- Related: CVE-2026-14164</changelog>
</package>
<package pkgid="4d3c989fd7ddcc6bf3a27c6d96cf35fe90cda47962df7d6e5e8a009994f38dc5" name="libarchive" arch="x86_64">
  <version epoch="0" ver="3.7.7" rel="8.el10_1"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.2-7" date="1728907200">- Fix CVE-2024-48957
- Resolves: RHEL-62015</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.7.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-1" date="1731931200">- Rebase to version 3.7.7
- Fixing SAST issues, accepted by upstream
- Resolves: RHEL-39391 RHEL-67895</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3.7.7-2" date="1741089600">- Fix for CVE-2024-57970
- Resolves: RHEL-79877</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-3" date="1749211200">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-4" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-5" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-6" date="1774353600">- Release bump</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-7" date="1774440000">- Release bump for typo in dist</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-8" date="1775649600">- Resolves: CVE-2026-4424</changelog>
</package>
<package pkgid="86e81e82ba84b0f9653abdea66977e1d105888a88ccaa73ca0eac634cf717ffb" name="libarchive-devel" arch="x86_64">
  <version epoch="0" ver="3.7.7" rel="10.el10_2"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-1" date="1731931200">- Rebase to version 3.7.7
- Fixing SAST issues, accepted by upstream
- Resolves: RHEL-39391 RHEL-67895</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3.7.7-2" date="1741089600">- Fix for CVE-2024-57970
- Resolves: RHEL-79877</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-3" date="1749211200">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-4" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-5" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-6" date="1774353600">- Release bump</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-7" date="1774440000">- Release bump for typo in dist</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-8" date="1775649600">- Resolves: CVE-2026-4424</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-9" date="1782820800">- Resolves: CVE-2026-14164</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-10" date="1784116800">- Related: CVE-2026-14164</changelog>
</package>
<package pkgid="b22a5fb15c7253d15fe172d4520864a4272eebf296254e4876c065796e10b560" name="libarchive-devel" arch="x86_64">
  <version epoch="0" ver="3.7.7" rel="8.el10_1"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.2-7" date="1728907200">- Fix CVE-2024-48957
- Resolves: RHEL-62015</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.7.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-1" date="1731931200">- Rebase to version 3.7.7
- Fixing SAST issues, accepted by upstream
- Resolves: RHEL-39391 RHEL-67895</changelog>
  <changelog author="Nikola Davidova &lt;ndavidov@redhat.com&gt; - 3.7.7-2" date="1741089600">- Fix for CVE-2024-57970
- Resolves: RHEL-79877</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-3" date="1749211200">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-4" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-5" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-6" date="1774353600">- Release bump</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.7.7-7" date="1774440000">- Release bump for typo in dist</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.7.7-8" date="1775649600">- Resolves: CVE-2026-4424</changelog>
</package>
<package pkgid="59f475f8adda4923f0871fda451a021aaf0e9ffd33b928b97ff3960d0b23d535" name="libasan" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="323a5b69bb38d0e5a086a660cfd8ad66e68720b88184935e8f9c88be5fce202b" name="libasan-static" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="42eb11651b6a9fcf098da7da17df393a6e4eca02cf4339b3d05789d07fe877aa" name="libassuan" arch="x86_64">
  <version epoch="0" ver="2.5.6" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.5-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.5.6-1" date="1687176000">- New upstream release (#2215873)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.6-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.6-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.6-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.6-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.6-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="03b1b2fd6d0e1b50260f3ee3969c5a563c27356acab5b83891062cb7f368c1a7" name="libassuan-devel" arch="x86_64">
  <version epoch="0" ver="2.5.6" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.5-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.5.6-1" date="1687176000">- New upstream release (#2215873)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.6-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.6-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.6-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.6-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.6-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6c22725528a50e96e3232ae2e987213eea1d9ccb70da1f7ada589854639aa48e" name="libasyncns" arch="x86_64">
  <version epoch="0" ver="0.8" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-25" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-26" date="1690977600">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-27" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-28" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-29" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="76992a8c862dda84f751afab172012022503a24b7c75e8c215a2737cf46b382c" name="libasyncns-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-25" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.8-26" date="1690977600">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-27" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8-28" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-29" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dcab8efd11727ad3ef764883f6376c265d1be03068076f5adb6605ab455d5747" name="libatasmart" arch="x86_64">
  <version epoch="0" ver="0.19" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.19-25" date="1681387200">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-27" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-28" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.19-29" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.19-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="66506eaaa8c4157d1f8495d1d03151b4da4bef32a124d9f38e8d3427615e7ee1" name="libatasmart-devel" arch="x86_64">
  <version epoch="0" ver="0.19" rel="30.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-24" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.19-25" date="1681387200">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-27" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-28" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.19-29" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.19-30" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="18420c4714f5561fe5cc52c7f11056d9e41ecdfd0232252ed3cb6d0738b72ef7" name="libatomic" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="db2d8a54f1bb7fce987bec7f2c7ead3c82c1b1a7edb1e7a9411bc2f32e27ab9b" name="libatomic-static" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="b8a9334f004e9e84856a92487c9f94c822241b0c2370022178ab3d7f43e2e640" name="libatomic_ops" arch="x86_64">
  <version epoch="0" ver="7.8.2" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.6.14-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 7.8.0-1" date="1680091200">- Update to 7.8.0 (#2182540)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.8.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Monitoring &lt;release-monitoring@fedoraproject.org&gt; - 7.8.2-1" date="1702814400">- Update to 7.8.2 (rhbz#2254881)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.8.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.8.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.8.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.8.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0669d38a4d5881ce2723d55eeff07925f44b9739e97d75698a5ff3ab97d4ed5d" name="libatomic_ops-devel" arch="x86_64">
  <version epoch="0" ver="7.8.2" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.6.14-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 7.8.0-1" date="1680091200">- Update to 7.8.0 (#2182540)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.8.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Monitoring &lt;release-monitoring@fedoraproject.org&gt; - 7.8.2-1" date="1702814400">- Update to 7.8.2 (rhbz#2254881)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.8.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.8.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.8.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.8.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ecd37f5e971da0b72982c087692c11d709ef3e5016194aeb61bdd5c1fa26c154" name="libatomic_ops-static" arch="x86_64">
  <version epoch="0" ver="7.8.2" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.6.14-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 7.8.0-1" date="1680091200">- Update to 7.8.0 (#2182540)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.8.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Monitoring &lt;release-monitoring@fedoraproject.org&gt; - 7.8.2-1" date="1702814400">- Update to 7.8.2 (rhbz#2254881)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.8.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.8.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.8.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.8.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="169703f87faa04bc4b43b0ba26e31fdc4f6a72d4d09aaae500e70026c09c8d87" name="libattr" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.1-6" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.5.1-7" date="1678795200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.1-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Temuri Doghonadze &lt;temuri.doghonadze@gmail.com&gt; - 2.5.1-9" date="1694174400">- Backporting Georgian language for RHEL10 until next release of attr</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.5.2-1" date="1705320000">- rebase to latest version (rhbz#2258293)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.2-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.2-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bb59444d580d5ea8f72b7bb158a932b001e688eade9ca1352556877885185fa0" name="libattr" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.6.0-1" date="1782388800">- rebase to 2.6.0 to fix the following CVEs:
  - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr (RHEL-186128)</changelog>
</package>
<package pkgid="2b251c243a4f8d96b8c7ba71a9f23870d2c556aa437534e2b0e359b2a7eb6320" name="libattr-devel" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.1-6" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.5.1-7" date="1678795200">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.1-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Temuri Doghonadze &lt;temuri.doghonadze@gmail.com&gt; - 2.5.1-9" date="1694174400">- Backporting Georgian language for RHEL10 until next release of attr</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.5.2-1" date="1705320000">- rebase to latest version (rhbz#2258293)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.2-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.2-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f2ece11b0da8a19bc4024800ba4331546c02a010b1b0da68b3b83f7f9547cf2e" name="libattr-devel" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 2.6.0-1" date="1782388800">- rebase to 2.6.0 to fix the following CVEs:
  - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr (RHEL-186128)</changelog>
</package>
<package pkgid="b64948f55be1063eafcba245a6ea155ecba27d82a55e5a93fe6e3ab2b289dd6f" name="libbabeltrace" arch="x86_64">
  <version epoch="0" ver="1.5.11" rel="9.el10"/>
  <changelog author="Michael Jeanson &lt;mjeanson@efficios.com&gt; - 1.5.11-1" date="1667390400">- New upstream release
- Drop patches merged upstream
- Add builddep on python3-setuptools for Python 3.12+</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.11-2" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@efficios.com&gt; - 1.5.11-3" date="1683547200">- migrated to SPDX license</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt;" date="1685448000">- Update license expression.</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.5.11-4" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.11-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.11-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.11-7" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.11-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.11-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a55047e71965e1a460772d73e9d0b303b42d5ac93c4152a4085ca73767e9d5e7" name="libbabeltrace-devel" arch="x86_64">
  <version epoch="0" ver="1.5.11" rel="9.el10"/>
  <changelog author="Michael Jeanson &lt;mjeanson@efficios.com&gt; - 1.5.11-1" date="1667390400">- New upstream release
- Drop patches merged upstream
- Add builddep on python3-setuptools for Python 3.12+</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.11-2" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@efficios.com&gt; - 1.5.11-3" date="1683547200">- migrated to SPDX license</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt;" date="1685448000">- Update license expression.</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.5.11-4" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.11-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.11-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.11-7" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.11-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.11-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0facbec35144f79be1fdcf3c40673f34470b4f5bb0eb743415d914b23b00e0cf" name="libbasicobjects" arch="x86_64">
  <version epoch="0" ver="0.1.1" rel="58.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-53" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-54" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-55" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-56" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-57" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-58" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8f986e11316c57e9e78fc2f54b52743db14f7273b4e045b9d5a7a807b99691d8" name="libbasicobjects-devel" arch="x86_64">
  <version epoch="0" ver="0.1.1" rel="58.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-53" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-54" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-55" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-56" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-57" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-58" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c42e0debb4130dea3f77dd4b32853c2a773aa426cfca5523cab4fb3875ce5e0a" name="libblkid" arch="x86_64">
  <version epoch="0" ver="2.40.2" rel="18.el10"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-9" date="1736856000">- more(1): make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-10" date="1739448000">- blkid: allow up to 64k erofs block sizes</changelog>
  <changelog author="Frank Liang &lt;xiliang@redhat.com&gt; - 2.40.2-11" date="1745064000">- agetty: fix stdin conversion to tty name</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-12" date="1753790400">- coresched: backport new tool to RHEL-10</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-13" date="1753876800">- lscpu: update table with ARM IDs</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-14" date="1759147200">- lscpu: Add NVIDIA Olympus arm64 core
- libfdisk: improve collision reporting
- libfdisk: (dos) ignore incomplete EBR for non-wholedisk
- wall: always use utmp as fallback</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-15" date="1761220800">- mount: improve --all documentation
- libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
- libblkid: use snprintf() instead of sprintf()</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-16" date="1763553600">- libfdisk: fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-17" date="1765800000">- Fix heap buffer overread in setpwnam() [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-18" date="1768478400">- use sysuser setting for uuidd</changelog>
</package>
<package pkgid="8d7932b6106cbb7b10f1bcbb9f45baa5feaa922c4b1cf22e5a65cb54bdae8c60" name="libblkid-devel" arch="x86_64">
  <version epoch="0" ver="2.40.2" rel="18.el10"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-9" date="1736856000">- more(1): make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-10" date="1739448000">- blkid: allow up to 64k erofs block sizes</changelog>
  <changelog author="Frank Liang &lt;xiliang@redhat.com&gt; - 2.40.2-11" date="1745064000">- agetty: fix stdin conversion to tty name</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-12" date="1753790400">- coresched: backport new tool to RHEL-10</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-13" date="1753876800">- lscpu: update table with ARM IDs</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-14" date="1759147200">- lscpu: Add NVIDIA Olympus arm64 core
- libfdisk: improve collision reporting
- libfdisk: (dos) ignore incomplete EBR for non-wholedisk
- wall: always use utmp as fallback</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-15" date="1761220800">- mount: improve --all documentation
- libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
- libblkid: use snprintf() instead of sprintf()</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-16" date="1763553600">- libfdisk: fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-17" date="1765800000">- Fix heap buffer overread in setpwnam() [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-18" date="1768478400">- use sysuser setting for uuidd</changelog>
</package>
<package pkgid="c6c0c6cec6d9c168e4c274cb81a6710b6a26ab361808af27cfece5546c4a66d0" name="libblkio" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.2-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.3.0-1" date="1689854401">- Update to 1.3.0</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.0-2" date="1692014400">- Remove const-cstr dependency (RHBZ#2214208)</changelog>
  <changelog author="Alberto Faria &lt;afaria@redhat.com&gt; - 1.3.0-3" date="1696248000">- Update overall license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.3.0-6" date="1706875200">- Update Rust macro usage</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Stefan Hajnoczi &lt;stefanha@redhat.com&gt; - 1.5.0-1" date="1723118400">- Update to 1.5.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c7db87fe445cb27d19ef8b0a8a1e034dc94bdff0a771093e1cbaaa6b97382fe0" name="libblkio-devel" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.2-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.3.0-1" date="1689854401">- Update to 1.3.0</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.0-2" date="1692014400">- Remove const-cstr dependency (RHBZ#2214208)</changelog>
  <changelog author="Alberto Faria &lt;afaria@redhat.com&gt; - 1.3.0-3" date="1696248000">- Update overall license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.3.0-6" date="1706875200">- Update Rust macro usage</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Stefan Hajnoczi &lt;stefanha@redhat.com&gt; - 1.5.0-1" date="1723118400">- Update to 1.5.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1bf70ba6fb6e7c421ee8837a8cb9df421dade60d93bcafbb8460c9e68198b0e3" name="libblockdev" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="043d9aa67bf4418518e4c852450515c8258b346dfd9eef67949181ba791b0529" name="libblockdev-crypto" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="b98a09fb59766e7c09cbb9f12f19653e63f39f140e3df01cb0d5350d6f7a830f" name="libblockdev-crypto-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="d947254dfd5f408e24de689c34f918633c0d3d947acf8e03578fd5fd8a267875" name="libblockdev-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="992c405c5d0458bb1f390589a8f558aaca3361621924d5e475774b0e7b24cfdf" name="libblockdev-dm" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="d4e2fec492181db56b93c9999aaec367fb7db1b9bfd08f5402a6384b0d1c4d2e" name="libblockdev-dm-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="074aa172945a5a71bbe8f3fde9a4d26d094c0acda19b33d3c2a359ac62e84b44" name="libblockdev-fs" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="656c3db95c4d6b451baf08afcaec1c21a2ea959df58ccd2bd7abba1af8418ff9" name="libblockdev-fs-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="1ff1c0c4bf1d824bdfe53123956c8e4912c64e447fa14dc87e9839c53889d54e" name="libblockdev-loop" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="6c17302677ebea5a013a63b523350682c471190470195a8f561185526117f1b3" name="libblockdev-loop-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="05ca317b2dcedd5609bdb7c26e117c11b9159730ea3638fcfc7b51d98ead1d21" name="libblockdev-lvm" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="8edf7e2ec9a8cd97133ef3ee5987e707dc58fb196c7d47aab256f2a055544380" name="libblockdev-lvm-dbus" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="9d162e84ed3b65527ecb0bbac3b3a6967174eedba9b651c0628d60a273818a9b" name="libblockdev-lvm-dbus-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="113048d4c2c34d14ba56e3cd2ec40450321cdcbd7ec1216eb99a35e267683a68" name="libblockdev-lvm-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="b53ae38788532ddf8298a2d66d7fab31d23e77ca85f2139a6dc8cc11d6f36b2f" name="libblockdev-mdraid" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="1e2f155e4e9eb1f052857d31350f5da7b8633b26e5e1f9d6dcf9651334738085" name="libblockdev-mdraid-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="7e412d8f4eea8e0216d970258e70f5041ad12059e26fd203e0c510519a272855" name="libblockdev-mpath" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="f14795c4f8cc9d89547d85e952c2ac2b74327aafa7a4e4355922e2c005503226" name="libblockdev-mpath-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="6b7173205bd59a9ae306c558c90346ec60662c5a1e9e3c3c432c1eaf28ac6465" name="libblockdev-nvdimm" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="246fe9488a935a74c8bdf7683837767fd239fd9228532d2a4fc36dcc171843fe" name="libblockdev-nvdimm-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="0b3ef8a3e4b73fc69055e22fa5a9270325c5e2445240792bf29123b12e5897a5" name="libblockdev-nvme" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="b50de75b497187f0b477cf7d8aa3a0718371a5bd2b1afce6003eaf1e43e0263d" name="libblockdev-nvme-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="2b8ac38c2e12dbf7812c82dd1fb82783f29e95f2870fb9789f298703640e7fa3" name="libblockdev-part" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="fb0541bc875763a76033142e2add41d63b0a9bf80246494f1c39093371abd982" name="libblockdev-part-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="e9dbd4d23061e4d4cce2a3dd28b8de2fd6510e65c64154be7d616c5dfb972efa" name="libblockdev-plugins-all" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="ef690cd9ab6869d0b91aa0e43acbc0ad0a8083d16c172e2fe9dd32096dff0999" name="libblockdev-smart" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="4df945056e4349fd9fd7885a9bb440dbceb295f8676c7da64f03ec34b6691163" name="libblockdev-smart-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="b416a3e5a1baa89dc2169936037ee1e3b5291afe47b67c1dac1dcfed6cbe2dec" name="libblockdev-smartmontools" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="3a2c103ca8b27cf0cc590c093225d5a3bd8cf522a2bf53cc4c6b58c505554197" name="libblockdev-smartmontools-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="f679e0dd88a296e56410c3004134ef15f97f99768b8612e12b8fa80f8d655c57" name="libblockdev-swap" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="89859406f8963067f9e6e83484c91fe90e08dfc9f87fa06d27c083ddab15a9b8" name="libblockdev-swap-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="014b20c9294eccf0b9dcd5a085cd4a3f7be0554be6382aef3540527f8c3283ab" name="libblockdev-tools" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="ef2ba26a0e81b5e78c35b4aa25e992d04e6ece3db5bb725863ba3146bbc9c83f" name="libblockdev-utils" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="88d20b35c474defb0761b1ff3c638808fc27be14eedaf46118d12d7c7ab18c25" name="libblockdev-utils-devel" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="2.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-6" date="1721390400">- Fix passing size for pvresize over DBus
  Resolves: RHEL-45872
- Upstream kernel VDO support
  Resolves: RHEL-31953</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-7" date="1721822400">- Backport libblockdev-smart plugin
  Resolves: RHEL-49675</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.1.0-8" date="1727265600">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-60061</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-1" date="1730289600">- Update to 3.2.0
  Resolves: RHEL-60272
  Resolves: RHEL-50820</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-2" date="1731499200">- nvme: Avoid element-type g-i annotations
  Resolves: RHEL-66117</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-3" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82885</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.2.0-5" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96031</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-1" date="1758801600">- Update to 3.4.0
  Resolves: RHEL-114971</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 3.4.0-2" date="1761825600">- lvm-dbus: Show better error for invalid LVM IDs
  Resolves: RHEL-123039</changelog>
</package>
<package pkgid="00b313d643cd096cb880e2fe19e9385e3122edca6a604fe2b2cecbf2cf8af662" name="libbpf" arch="x86_64">
  <version epoch="2" ver="1.7.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.2.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.4.0-1" date="1715083200">- Rebuild from latest RHEL 10.0 Beta source tree
- Resolves: RHEL-30627</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.4.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-1" date="1721304000">- Rebase to upstream kernel 6.10
- keep FD_CLOEXEC flag when dup()'ing FD
- Resolves: RHEL-37631</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-2" date="1727265600">- Rebase to released RHEL 10 Beta kernel
- Resolves: RHEL-36077</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.5.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-4" date="1733832000">- Rebuild after kernel rebase to 6.12
- Resolves: RHEL-63890</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.6.0-1" date="1747742400">- Update to kernel rebase 6.13
- Resolves: RHEL-91129</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.6.0-2" date="1751630400">- Update to kernel rebase 6.14
- Resolves: RHEL-78917</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.7.0-1" date="1764331200">- Update to kernel rebase 6.17
- Resolves: RHEL-78997</changelog>
</package>
<package pkgid="0262b6d473568088c69879d9ef76183ec9cd2f0b168cd3a436dca91eae0f6c96" name="libbpf-devel" arch="x86_64">
  <version epoch="2" ver="1.7.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.2.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.4.0-1" date="1715083200">- Rebuild from latest RHEL 10.0 Beta source tree
- Resolves: RHEL-30627</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.4.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-1" date="1721304000">- Rebase to upstream kernel 6.10
- keep FD_CLOEXEC flag when dup()'ing FD
- Resolves: RHEL-37631</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-2" date="1727265600">- Rebase to released RHEL 10 Beta kernel
- Resolves: RHEL-36077</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.5.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-4" date="1733832000">- Rebuild after kernel rebase to 6.12
- Resolves: RHEL-63890</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.6.0-1" date="1747742400">- Update to kernel rebase 6.13
- Resolves: RHEL-91129</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.6.0-2" date="1751630400">- Update to kernel rebase 6.14
- Resolves: RHEL-78917</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.7.0-1" date="1764331200">- Update to kernel rebase 6.17
- Resolves: RHEL-78997</changelog>
</package>
<package pkgid="3a114ca04f40c1e9f4df4ae6a875f0fb7e8d6a9d5a3426b48af9fee2676b0f52" name="libbpf-static" arch="x86_64">
  <version epoch="2" ver="1.7.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.2.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.4.0-1" date="1715083200">- Rebuild from latest RHEL 10.0 Beta source tree
- Resolves: RHEL-30627</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.4.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-1" date="1721304000">- Rebase to upstream kernel 6.10
- keep FD_CLOEXEC flag when dup()'ing FD
- Resolves: RHEL-37631</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-2" date="1727265600">- Rebase to released RHEL 10 Beta kernel
- Resolves: RHEL-36077</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.5.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.5.0-4" date="1733832000">- Rebuild after kernel rebase to 6.12
- Resolves: RHEL-63890</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.6.0-1" date="1747742400">- Update to kernel rebase 6.13
- Resolves: RHEL-91129</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.6.0-2" date="1751630400">- Update to kernel rebase 6.14
- Resolves: RHEL-78917</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 2:1.7.0-1" date="1764331200">- Update to kernel rebase 6.17
- Resolves: RHEL-78997</changelog>
</package>
<package pkgid="7bbe35e002d685883c50f8c0998537d232bc2d61b22bffea6269aee0b229381b" name="libbpf-tools" arch="x86_64">
  <version epoch="0" ver="0.35.0" rel="3.el10"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-3" date="1728043200">- Remove python3-pyelftools dependency (RHEL-60064)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-4" date="1730203200">- Fix LLVM 19 build (RHEL-64925)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-5" date="1730808000">- Explicitely disable blazesym support (RHEL-65850)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.30.0-6" date="1730894400">- Fix gating tests of libbpf gating.</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.32.0-1" date="1736856000">- Rebase to the latest version (RHEL-63886)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.34.0-1" date="1747656000">- Rebase to the latest version (RHEL-78921)
- Rebuild with LLVM 20 (RHEL-81772)
- Silence warning of trace tools (RHEL-68952)
- Fix bpf-runqlen (RHEL-91190)
- Fix sslsniff and sofdsnoop (RHEL-58348)
- Fix slabratetop (RHEL-58810)
- Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947)
- Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001)
- Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529)
- Fix multiples ppc64 tools (RHEL-58147)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.34.0-2" date="1753704000">- Fix bio* tools tracepoints (RHEL-99677)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.35.0-1" date="1761566400">- Rebase to version 0.35.0 (RHEL-79002)
- Fix bpf-ksnoop (RHEL-93852)
- Fix bpf-javagc (RHEL-75531)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.35.0-2" date="1761739200">- Rebuild in a side-tag</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 0.35.0-3" date="1767787200">- Rebuild with LLVM 21 (RHEL-108333)</changelog>
</package>
<package pkgid="f757218c089f4a404b67893247d6242b64c18120761b5d393605806687eff9c1" name="libbrotli" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="7.el10_1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1.1.0-5" date="1726056000">- Check BitMask(n) n value for kBrotliBitMask[n] bounds</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.1.0-7" date="1766059200">- Resolves: RHEL-133984
  CVE-2025-6176 Brotli decompression bomb DoS in scrapy</changelog>
</package>
<package pkgid="34df392d08092760346eb9c274aaf068c55fabfd7f31c2f21a85bc7eece37f39" name="libburn" arch="x86_64">
  <version epoch="0" ver="1.5.6" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.4-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.5.6-1" date="1687262400">- Upgrade to 1.5.6 (#2216132)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e5e1ee28adaa350e1a61728ef727be1415bbd740273349d28249b7ee70fb187d" name="libburn-devel" arch="x86_64">
  <version epoch="0" ver="1.5.6" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.4-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.5.6-1" date="1687262400">- Upgrade to 1.5.6 (#2216132)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="72d89c5b1e4f400356bb864a1b1e177d0090865bc741723610ef976b85e758c3" name="libburn-doc" arch="noarch">
  <version epoch="0" ver="1.5.6" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.4-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.5.6-1" date="1687262400">- Upgrade to 1.5.6 (#2216132)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7a96d6191942ddd06d5fcb65bbe6bc8f577d6af53df26500aa8145e944d4d15c" name="libbytesize" arch="x86_64">
  <version epoch="0" ver="2.10" rel="5.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.8-21" date="1679659200">- New version - 2.8 (Vojtech Trefny)
- ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
- Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
- Remove unused test dependencies variables from Makefile (Vojtech Trefny)
- docs: Remove information about Python 2 support (Vojtech Trefny)
- Various docstring fixes (Vojtech Trefny)
- Replace C++ style comments with C style (Vojtech Trefny)
- Make use of error optional (Vojtech Trefny)
- spec: Fix source archive URL (Vojtech Trefny)
- ci: Add Packit automation for downstream builds (Vojtech Trefny)
- spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
- ci: Use Packit for daily builds in Copr (Vojtech Trefny)
- ci: Remove GitHub action for RPM builds (Vojtech Trefny)
- ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
- configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
- ci: Update chroots for RPM builds (Vojtech Trefny)
- Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
- Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
- misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
- Translated using Weblate (Georgian) (Temuri Doghonadze)
- spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
- Added translation using Weblate (Georgian) (Temuri Doghonadze)
- Update translation files (Weblate)
- Translated using Weblate (Korean) (김인수)
- ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
- ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
- ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
- ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
- Add a GitHub action for running csmock static analysis (Vojtech Trefny)
- README: Remove the Travis CI badge (Vojtech Trefny)
- Sync spec with downstream (Vojtech Trefny)</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.8-22" date="1686744000">- Rebuilt for Python 3.12</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.9-21" date="1688558400">- New version - 2.9 (Vojtech Trefny)
- build: Exit before AC_OUTPUT on error (Tomas Bzatek)
- tests: fix locale tests on musl (triallax)
- Update translation files (Weblate)
- Translated using Weblate (Korean) (김인수)
- ci: Manually prepare spec file for Packit (Vojtech Trefny)</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.9-22" date="1688558401">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.10-1" date="1697630400">- New version - 2.10 (Vojtech Trefny)
- Rename 'master' branch to 'main' (Vojtech Trefny)
- remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
- ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
- Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
- dist: Fix release number in spec (Vojtech Trefny)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0961a38e7ad91b28e4c679f38ede8945503c4283b7f18657c9863775f40702f9" name="libbytesize-devel" arch="x86_64">
  <version epoch="0" ver="2.10" rel="5.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.8-21" date="1679659200">- New version - 2.8 (Vojtech Trefny)
- ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
- Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
- Remove unused test dependencies variables from Makefile (Vojtech Trefny)
- docs: Remove information about Python 2 support (Vojtech Trefny)
- Various docstring fixes (Vojtech Trefny)
- Replace C++ style comments with C style (Vojtech Trefny)
- Make use of error optional (Vojtech Trefny)
- spec: Fix source archive URL (Vojtech Trefny)
- ci: Add Packit automation for downstream builds (Vojtech Trefny)
- spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
- ci: Use Packit for daily builds in Copr (Vojtech Trefny)
- ci: Remove GitHub action for RPM builds (Vojtech Trefny)
- ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
- configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
- ci: Update chroots for RPM builds (Vojtech Trefny)
- Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
- Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
- misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
- Translated using Weblate (Georgian) (Temuri Doghonadze)
- spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
- Added translation using Weblate (Georgian) (Temuri Doghonadze)
- Update translation files (Weblate)
- Translated using Weblate (Korean) (김인수)
- ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
- ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
- ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
- ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
- Add a GitHub action for running csmock static analysis (Vojtech Trefny)
- README: Remove the Travis CI badge (Vojtech Trefny)
- Sync spec with downstream (Vojtech Trefny)</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.8-22" date="1686744000">- Rebuilt for Python 3.12</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.9-21" date="1688558400">- New version - 2.9 (Vojtech Trefny)
- build: Exit before AC_OUTPUT on error (Tomas Bzatek)
- tests: fix locale tests on musl (triallax)
- Update translation files (Weblate)
- Translated using Weblate (Korean) (김인수)
- ci: Manually prepare spec file for Packit (Vojtech Trefny)</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.9-22" date="1688558401">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.10-1" date="1697630400">- New version - 2.10 (Vojtech Trefny)
- Rename 'master' branch to 'main' (Vojtech Trefny)
- remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
- ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
- Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
- dist: Fix release number in spec (Vojtech Trefny)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7ae8e667031b198ebd8a2fc33f2709c5bc367a74ecbcce73e0e0084c90f5b7e6" name="libbytesize-tools" arch="x86_64">
  <version epoch="0" ver="2.10" rel="5.el10"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.8-21" date="1679659200">- New version - 2.8 (Vojtech Trefny)
- ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
- Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
- Remove unused test dependencies variables from Makefile (Vojtech Trefny)
- docs: Remove information about Python 2 support (Vojtech Trefny)
- Various docstring fixes (Vojtech Trefny)
- Replace C++ style comments with C style (Vojtech Trefny)
- Make use of error optional (Vojtech Trefny)
- spec: Fix source archive URL (Vojtech Trefny)
- ci: Add Packit automation for downstream builds (Vojtech Trefny)
- spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
- ci: Use Packit for daily builds in Copr (Vojtech Trefny)
- ci: Remove GitHub action for RPM builds (Vojtech Trefny)
- ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
- configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
- ci: Update chroots for RPM builds (Vojtech Trefny)
- Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
- Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
- misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
- Translated using Weblate (Georgian) (Temuri Doghonadze)
- spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
- Added translation using Weblate (Georgian) (Temuri Doghonadze)
- Update translation files (Weblate)
- Translated using Weblate (Korean) (김인수)
- ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
- ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
- ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
- ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
- Add a GitHub action for running csmock static analysis (Vojtech Trefny)
- README: Remove the Travis CI badge (Vojtech Trefny)
- Sync spec with downstream (Vojtech Trefny)</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.8-22" date="1686744000">- Rebuilt for Python 3.12</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.9-21" date="1688558400">- New version - 2.9 (Vojtech Trefny)
- build: Exit before AC_OUTPUT on error (Tomas Bzatek)
- tests: fix locale tests on musl (triallax)
- Update translation files (Weblate)
- Translated using Weblate (Korean) (김인수)
- ci: Manually prepare spec file for Packit (Vojtech Trefny)</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.9-22" date="1688558401">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.10-1" date="1697630400">- New version - 2.10 (Vojtech Trefny)
- Rename 'master' branch to 'main' (Vojtech Trefny)
- remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
- ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
- Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
- dist: Fix release number in spec (Vojtech Trefny)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="60b2d31a1a03776969df7468206713479bf21ba804c823d1096989ae25b91122" name="libcamera" arch="x86_64">
  <version epoch="0" ver="0.6.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.1-1" date="1722254400">- Update to 0.3.1</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.1-2" date="1722513600">- Enable simple pipeline everywhere</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.3.1-3" date="1726401600">- Add patches to fix pipewire keeping UVC cameras open all the time causing
  significant laptop battery drain:
  https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.3.1-4" date="1726833600">- Add Recommends: libcamera-ipa to the main package</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.2-1" date="1727265600">- Update to 0.3.2</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-2" date="1736596800">- Disable lc-compliance
- Removed the gtest dependency from the libcamera-tools package
- Resolves: RHEL-73503</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-3" date="1741003200">- Drop the lttng-ust dependency
- Disable tracing</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-4" date="1757332800">- Add a weak dependency to intel-vsc-firmware</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.6.0-1" date="1764763200">- Update to the latest upstream version (RHEL-132576)</changelog>
</package>
<package pkgid="cb893660b0eb08a97de60cbb48d49d5cfa387eef66894b36f75f52ebda1c6564" name="libcamera-devel" arch="x86_64">
  <version epoch="0" ver="0.6.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.1-1" date="1722254400">- Update to 0.3.1</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.1-2" date="1722513600">- Enable simple pipeline everywhere</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.3.1-3" date="1726401600">- Add patches to fix pipewire keeping UVC cameras open all the time causing
  significant laptop battery drain:
  https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.3.1-4" date="1726833600">- Add Recommends: libcamera-ipa to the main package</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.2-1" date="1727265600">- Update to 0.3.2</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-2" date="1736596800">- Disable lc-compliance
- Removed the gtest dependency from the libcamera-tools package
- Resolves: RHEL-73503</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-3" date="1741003200">- Drop the lttng-ust dependency
- Disable tracing</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-4" date="1757332800">- Add a weak dependency to intel-vsc-firmware</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.6.0-1" date="1764763200">- Update to the latest upstream version (RHEL-132576)</changelog>
</package>
<package pkgid="cceeb7a3f1ea3e59b75d07a45c3d3ad1361000f69133d6423ffc0489405c3e02" name="libcamera-gstreamer" arch="x86_64">
  <version epoch="0" ver="0.6.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.1-1" date="1722254400">- Update to 0.3.1</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.1-2" date="1722513600">- Enable simple pipeline everywhere</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.3.1-3" date="1726401600">- Add patches to fix pipewire keeping UVC cameras open all the time causing
  significant laptop battery drain:
  https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.3.1-4" date="1726833600">- Add Recommends: libcamera-ipa to the main package</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.2-1" date="1727265600">- Update to 0.3.2</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-2" date="1736596800">- Disable lc-compliance
- Removed the gtest dependency from the libcamera-tools package
- Resolves: RHEL-73503</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-3" date="1741003200">- Drop the lttng-ust dependency
- Disable tracing</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-4" date="1757332800">- Add a weak dependency to intel-vsc-firmware</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.6.0-1" date="1764763200">- Update to the latest upstream version (RHEL-132576)</changelog>
</package>
<package pkgid="5193f986aadccb76e5c8d9526c9925ecebf98b3133b3274755310afbc4e890cb" name="libcamera-ipa" arch="x86_64">
  <version epoch="0" ver="0.6.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.1-1" date="1722254400">- Update to 0.3.1</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.1-2" date="1722513600">- Enable simple pipeline everywhere</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.3.1-3" date="1726401600">- Add patches to fix pipewire keeping UVC cameras open all the time causing
  significant laptop battery drain:
  https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.3.1-4" date="1726833600">- Add Recommends: libcamera-ipa to the main package</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.2-1" date="1727265600">- Update to 0.3.2</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-2" date="1736596800">- Disable lc-compliance
- Removed the gtest dependency from the libcamera-tools package
- Resolves: RHEL-73503</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-3" date="1741003200">- Drop the lttng-ust dependency
- Disable tracing</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-4" date="1757332800">- Add a weak dependency to intel-vsc-firmware</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.6.0-1" date="1764763200">- Update to the latest upstream version (RHEL-132576)</changelog>
</package>
<package pkgid="66f0e08e9cdec4d75b1d5f6aab1677f23553f74165c2c0653cbde0ce865870bb" name="libcamera-qcam" arch="x86_64">
  <version epoch="0" ver="0.6.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.1-1" date="1722254400">- Update to 0.3.1</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.1-2" date="1722513600">- Enable simple pipeline everywhere</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.3.1-3" date="1726401600">- Add patches to fix pipewire keeping UVC cameras open all the time causing
  significant laptop battery drain:
  https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.3.1-4" date="1726833600">- Add Recommends: libcamera-ipa to the main package</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.2-1" date="1727265600">- Update to 0.3.2</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-2" date="1736596800">- Disable lc-compliance
- Removed the gtest dependency from the libcamera-tools package
- Resolves: RHEL-73503</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-3" date="1741003200">- Drop the lttng-ust dependency
- Disable tracing</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-4" date="1757332800">- Add a weak dependency to intel-vsc-firmware</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.6.0-1" date="1764763200">- Update to the latest upstream version (RHEL-132576)</changelog>
</package>
<package pkgid="cd3c157fb054bda9391b961fadd1cebad68860d613da6bd4a0d50e481600715d" name="libcamera-tools" arch="x86_64">
  <version epoch="0" ver="0.6.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.1-1" date="1722254400">- Update to 0.3.1</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.1-2" date="1722513600">- Enable simple pipeline everywhere</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.3.1-3" date="1726401600">- Add patches to fix pipewire keeping UVC cameras open all the time causing
  significant laptop battery drain:
  https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.3.1-4" date="1726833600">- Add Recommends: libcamera-ipa to the main package</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.2-1" date="1727265600">- Update to 0.3.2</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-2" date="1736596800">- Disable lc-compliance
- Removed the gtest dependency from the libcamera-tools package
- Resolves: RHEL-73503</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-3" date="1741003200">- Drop the lttng-ust dependency
- Disable tracing</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-4" date="1757332800">- Add a weak dependency to intel-vsc-firmware</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.6.0-1" date="1764763200">- Update to the latest upstream version (RHEL-132576)</changelog>
</package>
<package pkgid="73f2c3fdef33a7e082d87a5805937ab82f3ed2f68b32fda6d3a44b6ae73c001e" name="libcamera-v4l2" arch="x86_64">
  <version epoch="0" ver="0.6.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.1-1" date="1722254400">- Update to 0.3.1</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.1-2" date="1722513600">- Enable simple pipeline everywhere</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.3.1-3" date="1726401600">- Add patches to fix pipewire keeping UVC cameras open all the time causing
  significant laptop battery drain:
  https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.3.1-4" date="1726833600">- Add Recommends: libcamera-ipa to the main package</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.3.2-1" date="1727265600">- Update to 0.3.2</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-2" date="1736596800">- Disable lc-compliance
- Removed the gtest dependency from the libcamera-tools package
- Resolves: RHEL-73503</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-3" date="1741003200">- Drop the lttng-ust dependency
- Disable tracing</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.3.2-4" date="1757332800">- Add a weak dependency to intel-vsc-firmware</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.6.0-1" date="1764763200">- Update to the latest upstream version (RHEL-132576)</changelog>
</package>
<package pkgid="e569fb4e849ded22632e63b998e32eba390b8c6bcc32bc46cd7a00a0aace354a" name="libcanberra" arch="x86_64">
  <version epoch="0" ver="0.30" rel="37.el10"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.30-30" date="1673352000">- Don't build GTK 2 bits on ELN/RHEL 10 as GTK 2 won't be there</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-31" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-32" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Niels De Graef &lt;ndegraef@redhat.com&gt; - 0.30-33" date="1697198400">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-34" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-35" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.30-36" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.30-37" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c433ef0b702615411805688ab55baa24a8f623d53273f9f9041de099d8c08fee" name="libcanberra-devel" arch="x86_64">
  <version epoch="0" ver="0.30" rel="37.el10"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.30-30" date="1673352000">- Don't build GTK 2 bits on ELN/RHEL 10 as GTK 2 won't be there</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-31" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-32" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Niels De Graef &lt;ndegraef@redhat.com&gt; - 0.30-33" date="1697198400">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-34" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-35" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.30-36" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.30-37" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e6ff955c0bbf5d87f3880d70ae1929afa4d8384e0ba3183696a7fb780515d91e" name="libcanberra-gtk3" arch="x86_64">
  <version epoch="0" ver="0.30" rel="37.el10"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.30-30" date="1673352000">- Don't build GTK 2 bits on ELN/RHEL 10 as GTK 2 won't be there</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-31" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-32" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Niels De Graef &lt;ndegraef@redhat.com&gt; - 0.30-33" date="1697198400">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-34" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-35" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.30-36" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.30-37" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="950756f967c17dd2f6b2f656bf34244eb709ae6bb5d17d00f13575db74c126df" name="libcap" arch="x86_64">
  <version epoch="0" ver="2.69" rel="7.el10_1.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.69-4" date="1717070400">- Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez &lt;carlosrodrifernandez@gmail.com&gt;)
- Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez &lt;carlosrodrifernandez@gmail.com&gt;)
- Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez &lt;carlosrodrifernandez@gmail.com&gt;)
- Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek &lt;zbyszek@in.waw.pl&gt;)
- Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.69-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.69-6" date="1723550400">- Remove unwanted subpackage captree</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.69-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.69-7.1" date="1776772800">- Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878)
  Resolves: RHEL-169301</changelog>
</package>
<package pkgid="112a760e7d30ee70dbb76e4500b1d3c061db471b26a8358746c687c3f5d0a941" name="libcap-devel" arch="x86_64">
  <version epoch="0" ver="2.69" rel="7.el10_1.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.69-4" date="1717070400">- Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez &lt;carlosrodrifernandez@gmail.com&gt;)
- Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez &lt;carlosrodrifernandez@gmail.com&gt;)
- Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez &lt;carlosrodrifernandez@gmail.com&gt;)
- Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek &lt;zbyszek@in.waw.pl&gt;)
- Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.69-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.69-6" date="1723550400">- Remove unwanted subpackage captree</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.69-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.69-7.1" date="1776772800">- Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878)
  Resolves: RHEL-169301</changelog>
</package>
<package pkgid="4fce88bd251c58ceb04f0f007be361eb2ce3650749646f34143f8273aecf0e50" name="libcap-ng" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.3-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 0.8.3-6" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; 0.8.3-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.3-8" date="1693828800">- Add function annotations to warn on unused results
- SPDX Migration</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.4-1" date="1703073600">- New upstream bugfix release
- Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.4-2" date="1704369600">- Remove python bindings global exception handler</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.4-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.4-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.4-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f571fe0cd5167a8675e0bfb53bd41750c2d6f56d5aed4199d4b33ea21f438ea3" name="libcap-ng-devel" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.3-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 0.8.3-6" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; 0.8.3-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.3-8" date="1693828800">- Add function annotations to warn on unused results
- SPDX Migration</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.4-1" date="1703073600">- New upstream bugfix release
- Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.4-2" date="1704369600">- Remove python bindings global exception handler</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.4-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.4-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.4-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7f0ffad93ce43efe4c8692e96e7e18e8cc60755e526ab2678cc9ce2844c94747" name="libcap-ng-python3" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.3-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 0.8.3-6" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; 0.8.3-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.3-8" date="1693828800">- Add function annotations to warn on unused results
- SPDX Migration</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.4-1" date="1703073600">- New upstream bugfix release
- Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.4-2" date="1704369600">- Remove python bindings global exception handler</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.4-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.4-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.4-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="43f097042585208a996ab1d052125d21a708934e1817cb116f02ab9117991a44" name="libcap-ng-utils" arch="x86_64">
  <version epoch="0" ver="0.8.4" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.3-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 0.8.3-6" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; 0.8.3-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.3-8" date="1693828800">- Add function annotations to warn on unused results
- SPDX Migration</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.4-1" date="1703073600">- New upstream bugfix release
- Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 0.8.4-2" date="1704369600">- Remove python bindings global exception handler</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.4-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.4-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.4-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a8100d8975fdace97585b9a520972920aae374b2ad09b10675918b6344796223" name="libcap-static" arch="x86_64">
  <version epoch="0" ver="2.69" rel="7.el10_1.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.69-4" date="1717070400">- Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez &lt;carlosrodrifernandez@gmail.com&gt;)
- Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez &lt;carlosrodrifernandez@gmail.com&gt;)
- Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez &lt;carlosrodrifernandez@gmail.com&gt;)
- Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek &lt;zbyszek@in.waw.pl&gt;)
- Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.69-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.69-6" date="1723550400">- Remove unwanted subpackage captree</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.69-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.69-7.1" date="1776772800">- Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878)
  Resolves: RHEL-169301</changelog>
</package>
<package pkgid="b7591cf2e167e09090b27dcdb25c528f78cae7734c49b66812505fe4ea75f443" name="libcbor" arch="x86_64">
  <version epoch="0" ver="0.11.0" rel="3.el10"/>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 0.7.0-8" date="1669636800">- Update license to SPDX format
- spec file tidy/modernization
  - use modern cmake build and install
  - properly own include directories in the devel package
  - de-glob some files to follow packaging guidelines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 0.10.2-1" date="1678190400">- Update to version 0.10.2 ( resolves: rhbz#1880885 )
- Revise specs per packaging guidelines for globs of soname</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 0.10.2-3" date="1698667200">- Move devel/api manpage to devel package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.2-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.2-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 0.11.0-1" date="1707048000">- Update version to 0.11.0 ( resolves: rhbz#2262592 )
- add running of unit tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.11.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.11.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8e6a0664f399201b8ba7e27c9c6a284ef2b0325d43f898e74c828a299c28b93a" name="libcbor-devel" arch="x86_64">
  <version epoch="0" ver="0.11.0" rel="3.el10"/>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 0.7.0-8" date="1669636800">- Update license to SPDX format
- spec file tidy/modernization
  - use modern cmake build and install
  - properly own include directories in the devel package
  - de-glob some files to follow packaging guidelines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 0.10.2-1" date="1678190400">- Update to version 0.10.2 ( resolves: rhbz#1880885 )
- Revise specs per packaging guidelines for globs of soname</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 0.10.2-3" date="1698667200">- Move devel/api manpage to devel package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.2-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.2-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 0.11.0-1" date="1707048000">- Update version to 0.11.0 ( resolves: rhbz#2262592 )
- add running of unit tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.11.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.11.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="561612fbea7ddcfdca050db7c734c84251067dd083deb4f44f96b6c9498c906c" name="libcdio" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="15.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-11" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-12" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.0-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.1.0-14" date="1723550400">- migrated to SPDX license, originally from Fedora by &lt;msuchy&gt;</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.0-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="06492a3b39284d221d43d95b4e38d69ccfd13a013a7231bc2c2adc915a0c1439" name="libcdio-devel" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="15.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-11" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-12" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.0-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.1.0-14" date="1723550400">- migrated to SPDX license, originally from Fedora by &lt;msuchy&gt;</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.0-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ccf2263ca1f7e4cafd8a423fb74b932d07f76610ccba8cbed3ee5b58e54f026b" name="libcdio-paranoia" arch="x86_64">
  <version epoch="0" ver="10.2+2.0.1" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2+2.0.1-7" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2+2.0.1-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2+2.0.1-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2+2.0.1-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2+2.0.1-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.2+2.0.1-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="81703ccf036eb7fc16ef75fe6cd6fdb0b3c3f391a5ca012d54c410dc2dd91cc7" name="libcdio-paranoia-devel" arch="x86_64">
  <version epoch="0" ver="10.2+2.0.1" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2+2.0.1-7" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2+2.0.1-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2+2.0.1-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2+2.0.1-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.2+2.0.1-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.2+2.0.1-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="9dc9f7c1582688769a2ca6fbc415d858cccfefa858c1ff2a47c1e4400b98c6ec" name="libcephfs-devel" arch="x86_64">
  <version epoch="2" ver="18.2.1" rel="4.el10"/>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2:18.1.2-0.3" date="1689076800">- Rebuilt for ICU 73.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- with python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.5" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- revert python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.1" date="1690372800">- ceph-18.1.3 RC4</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.2" date="1690977600">- ceph-18.1.3 RC4, rebuild with libarrow-13.0.0</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.0-1" date="1691150400">- ceph-18.2.0 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-1" date="1700049600">- ceph-18.2.1 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-2" date="1702987200">- ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
  https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-3" date="1706097600">- gcc-14</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2:18.2.1-4" date="1709726400">- Add support for riscv64</changelog>
</package>
<package pkgid="b723dd2b68b94b5452f2fd92f4dfd0db07f77cfe6074a819484ab58296599680" name="libcephfs2" arch="x86_64">
  <version epoch="2" ver="18.2.1" rel="4.el10"/>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2:18.1.2-0.3" date="1689076800">- Rebuilt for ICU 73.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- with python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.5" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- revert python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.1" date="1690372800">- ceph-18.1.3 RC4</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.2" date="1690977600">- ceph-18.1.3 RC4, rebuild with libarrow-13.0.0</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.0-1" date="1691150400">- ceph-18.2.0 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-1" date="1700049600">- ceph-18.2.1 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-2" date="1702987200">- ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
  https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-3" date="1706097600">- gcc-14</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2:18.2.1-4" date="1709726400">- Add support for riscv64</changelog>
</package>
<package pkgid="50e8d57452dca06854a16c1497c64e47a48e96bf34bb6a52e9a5215a2aca4574" name="libcephsqlite" arch="x86_64">
  <version epoch="2" ver="18.2.1" rel="4.el10"/>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2:18.1.2-0.3" date="1689076800">- Rebuilt for ICU 73.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- with python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.5" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- revert python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.1" date="1690372800">- ceph-18.1.3 RC4</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.2" date="1690977600">- ceph-18.1.3 RC4, rebuild with libarrow-13.0.0</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.0-1" date="1691150400">- ceph-18.2.0 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-1" date="1700049600">- ceph-18.2.1 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-2" date="1702987200">- ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
  https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-3" date="1706097600">- gcc-14</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2:18.2.1-4" date="1709726400">- Add support for riscv64</changelog>
</package>
<package pkgid="040dd6975704282ef97dd832fc254e35a8ab678208fd59464a0234fff9221836" name="libcephsqlite-devel" arch="x86_64">
  <version epoch="2" ver="18.2.1" rel="4.el10"/>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2:18.1.2-0.3" date="1689076800">- Rebuilt for ICU 73.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- with python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.5" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- revert python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.1" date="1690372800">- ceph-18.1.3 RC4</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.2" date="1690977600">- ceph-18.1.3 RC4, rebuild with libarrow-13.0.0</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.0-1" date="1691150400">- ceph-18.2.0 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-1" date="1700049600">- ceph-18.2.1 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-2" date="1702987200">- ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
  https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-3" date="1706097600">- gcc-14</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2:18.2.1-4" date="1709726400">- Add support for riscv64</changelog>
</package>
<package pkgid="979cc3bbc2dd3470adb2874c190acb48d199679b84beb2ea99194ba11fc30a96" name="libcmocka" arch="x86_64">
  <version epoch="0" ver="1.1.7" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-13" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.7-1" date="1677585600">- Update to version 1.1.7
  * Update ignore list for source tarball generation
  * Added new assert macros to compare 2 double given an epsilon
  * Added meson build system
  * Added header with version to TAP13 output
  * Fixed issues with MSVC
  * Fixed TAP output for skipped tests
  * Fixed issue with fail_msg
  * CMake generated configs for find_package(cmocka)
  * Documentation improvements</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.7-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.7-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.7-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.7-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.7-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="104eaca23bb821b1d81ebc10b86cf9be62d341b5e222c23f59008acc9e504d33" name="libcmocka-devel" arch="x86_64">
  <version epoch="0" ver="1.1.7" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-13" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.7-1" date="1677585600">- Update to version 1.1.7
  * Update ignore list for source tarball generation
  * Added new assert macros to compare 2 double given an epsilon
  * Added meson build system
  * Added header with version to TAP13 output
  * Fixed issues with MSVC
  * Fixed TAP output for skipped tests
  * Fixed issue with fail_msg
  * CMake generated configs for find_package(cmocka)
  * Documentation improvements</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.7-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.7-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.7-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.7-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.7-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="450e6306620c8671fd857427aa39dafe51b2ce724b0cdcbd60dd100f29bf0960" name="libcmpiCppImpl0" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-27" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0.3-28" date="1682424000">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-29" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-30" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0.3-31" date="1715256000">- Update license tag in subpackage to SPDX format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.3-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.3-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="36a81e5e858cbf57035e7b1730c98a648e90e946f664ffc78f92fa540f09ece1" name="libcollection" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="58.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-53" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-54" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-55" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-56" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-57" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-58" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="aad8a5f0f7a0b85316d8bb20aedb53ad952b859c25397c51e4eaa8c073d05a47" name="libcollection-devel" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="58.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-53" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-54" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-55" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-56" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-57" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-58" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8031435190eb44947f6225979ddf677fba4c48426a5d769be8525d89a879e800" name="libcom_err" arch="x86_64">
  <version epoch="0" ver="1.47.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47.0-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Brian J. Murrell &lt;brian@interlinx.bc.ca&gt; - 1.47.0-5" date="1707480000">- Recommends: /usr/sbin/sendmail rather than sendmail as many packages
  can provide a /usr/sbin/sendmail command</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.47.1-1" date="1719316800">- Rebase to new upstream
- Remove stale patch from the package</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.47.1-2" date="1721649600">- Disable metadata_csum_seed and orphan_file features in mke2fs.conf</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.47.1-4" date="1750766400">- debugfs: byteswap dirsearch dirent buf on big endian systems
  Resolves: RHEL-74431</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.47.1-5" date="1763553600">- Bump release for SPDX rebuild
- Related: RHEL-119484</changelog>
</package>
<package pkgid="4f0e14046550b7241afc1bb5e3c2c4a49d0f7ffdc67012a7bd5088cc07358f3c" name="libcom_err-devel" arch="x86_64">
  <version epoch="0" ver="1.47.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47.0-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Brian J. Murrell &lt;brian@interlinx.bc.ca&gt; - 1.47.0-5" date="1707480000">- Recommends: /usr/sbin/sendmail rather than sendmail as many packages
  can provide a /usr/sbin/sendmail command</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.47.1-1" date="1719316800">- Rebase to new upstream
- Remove stale patch from the package</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.47.1-2" date="1721649600">- Disable metadata_csum_seed and orphan_file features in mke2fs.conf</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.47.1-4" date="1750766400">- debugfs: byteswap dirsearch dirent buf on big endian systems
  Resolves: RHEL-74431</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.47.1-5" date="1763553600">- Bump release for SPDX rebuild
- Related: RHEL-119484</changelog>
</package>
<package pkgid="231f410bdef95916ed008f82f69421e2e4ca35800cdbdeba2bb3696110c08322" name="libcomps" arch="x86_64">
  <version epoch="0" ver="0.1.21" rel="3.el10"/>
  <changelog author="Mattia Verga &lt;mattia.verga@proton.me&gt; - 0.1.19-4" date="1693915200">- Backport patch to fix segfault in fromxml_str</changelog>
  <changelog author="Mattia Verga &lt;mattia.verga@proton.me&gt; - 0.1.19-5" date="1696420800">- Backport additional patch to fix segfault in fromxml_str</changelog>
  <changelog author="Jan Kolarik &lt;jkolarik@redhat.com&gt; - 0.1.20-1" date="1696507200">- Update to 0.1.20
- Fixes of xml parsing
- Fix non-optimized builds by removing inline keyword
- Use Py_hash_t instead of long</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.1.20-2" date="1702468800">- Fix build with libxml2-2.12.0</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.1.20-3" date="1704283200">- Backport upstream patch to fix C compatibility issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.20-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.20-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 0.1.21-1" date="1713614400">- Update libcomps to 0.1.21 (RHEL-38831)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.21-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.21-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2da71eaa4147c4cb686ebd658d09f169daa7f4237a5f8732447b0c93f4d7d707" name="libcomps-devel" arch="x86_64">
  <version epoch="0" ver="0.1.21" rel="3.el10"/>
  <changelog author="Mattia Verga &lt;mattia.verga@proton.me&gt; - 0.1.19-4" date="1693915200">- Backport patch to fix segfault in fromxml_str</changelog>
  <changelog author="Mattia Verga &lt;mattia.verga@proton.me&gt; - 0.1.19-5" date="1696420800">- Backport additional patch to fix segfault in fromxml_str</changelog>
  <changelog author="Jan Kolarik &lt;jkolarik@redhat.com&gt; - 0.1.20-1" date="1696507200">- Update to 0.1.20
- Fixes of xml parsing
- Fix non-optimized builds by removing inline keyword
- Use Py_hash_t instead of long</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.1.20-2" date="1702468800">- Fix build with libxml2-2.12.0</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.1.20-3" date="1704283200">- Backport upstream patch to fix C compatibility issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.20-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.20-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 0.1.21-1" date="1713614400">- Update libcomps to 0.1.21 (RHEL-38831)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.21-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.21-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7013498869a4860db6e3dfa0cb69aa1228057104909668ea0f34ccfd636b54a9" name="libcomps-doc" arch="noarch">
  <version epoch="0" ver="0.1.21" rel="3.el10"/>
  <changelog author="Mattia Verga &lt;mattia.verga@proton.me&gt; - 0.1.19-4" date="1693915200">- Backport patch to fix segfault in fromxml_str</changelog>
  <changelog author="Mattia Verga &lt;mattia.verga@proton.me&gt; - 0.1.19-5" date="1696420800">- Backport additional patch to fix segfault in fromxml_str</changelog>
  <changelog author="Jan Kolarik &lt;jkolarik@redhat.com&gt; - 0.1.20-1" date="1696507200">- Update to 0.1.20
- Fixes of xml parsing
- Fix non-optimized builds by removing inline keyword
- Use Py_hash_t instead of long</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.1.20-2" date="1702468800">- Fix build with libxml2-2.12.0</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.1.20-3" date="1704283200">- Backport upstream patch to fix C compatibility issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.20-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.20-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 0.1.21-1" date="1713614400">- Update libcomps to 0.1.21 (RHEL-38831)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.21-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.21-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dff8fc592d5013482acb2ed0f5b757bebcc71f9c6502fa84296fc1fcb5d673fd" name="libconfig" arch="x86_64">
  <version epoch="0" ver="1.7.3" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.3-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.3-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="50cfcfbc1d870a2b1d9424faf492615ff7434216c7097ffc096c486ae86dea8b" name="libconfig-devel" arch="x86_64">
  <version epoch="0" ver="1.7.3" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.3-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.3-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="177b5cca89c47237e44c77df056bc08e6afa3a708d2f708ed967b53b491a5719" name="libcpuid" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Martin Gansser &lt;martinkg@fedoraproject.org&gt; - 0.6.4-1" date="1696852800">- Update to 0.6.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.4-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.4-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Martin Gansser &lt;martinkg@fedoraproject.org&gt; - 0.6.5-1" date="1714478400">- Update to 0.6.5</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.6.5-2" date="1715256000">- Specify license using an SPDX identifier</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.6.5-3" date="1716465600">- Patch bugs found by static analysis tools
- Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
- Add %{name}-fix-cpuid_get_hypervisor.patch
- Add %{name}-prevent-intel_fn11-array-overruns.patch</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.5-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.7.0-1" date="1725278400">- Rebase to 0.7.0
- Begin building the package for aarch64
- Add Python bindings as a subpackage (python3-libcpuid)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="09b82c490c10ef3b863d48746fd78c990b6091d9114a94da131c2b54c84f6ac5" name="libcpuid-devel" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Martin Gansser &lt;martinkg@fedoraproject.org&gt; - 0.6.4-1" date="1696852800">- Update to 0.6.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.4-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.4-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Martin Gansser &lt;martinkg@fedoraproject.org&gt; - 0.6.5-1" date="1714478400">- Update to 0.6.5</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.6.5-2" date="1715256000">- Specify license using an SPDX identifier</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.6.5-3" date="1716465600">- Patch bugs found by static analysis tools
- Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
- Add %{name}-fix-cpuid_get_hypervisor.patch
- Add %{name}-prevent-intel_fn11-array-overruns.patch</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.5-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.7.0-1" date="1725278400">- Rebase to 0.7.0
- Begin building the package for aarch64
- Add Python bindings as a subpackage (python3-libcpuid)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3ef3f3a6991111da308633d3fab22ff59bb930eefc34753286be85d99a345662" name="libcupsfilters" arch="x86_64">
  <version epoch="1" ver="2.0.0" rel="11.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-2" date="1697716800">- rebuilt for side-tag with libppd</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.0-5" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-6" date="1710936000">- RHEL-26148 - fix grayscale/color raster printing via AirPrint
- RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-9" date="1732190400">- RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-10" date="1739361600">- RHEL-71935 Fix several important issues reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-11" date="1754308800">- RHEL-68430 texttopdf omits Chinese characters when creating PDF documents</changelog>
</package>
<package pkgid="7a4c02290e08fd49b8f3c5f21f7139c762936c6dd07d52f09f3824edfee84520" name="libcupsfilters" arch="x86_64">
  <version epoch="1" ver="2.0.0" rel="13.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-9" date="1732190400">- RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-10" date="1739361600">- RHEL-71935 Fix several important issues reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-11" date="1754308800">- RHEL-68430 texttopdf omits Chinese characters when creating PDF documents</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.0.0-12" date="1785326400">- RHEL-212655 CVE-2026-64612 libcupsfilters: Handle libpng errors
  via longjmp()/setjmp() to prevent process abort on malformed PNG</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.0.0-13" date="1785326401">- RHEL-214027 CVE-2026-64611 libcupsfilters: Fix infinite loop and
  empty device_ids in ieee1284</changelog>
</package>
<package pkgid="bdf708e8765c5d01f4e0c93b799162e1a9548da8f4e09f4a557a13c17db9f898" name="libcupsfilters-devel" arch="x86_64">
  <version epoch="1" ver="2.0.0" rel="11.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-2" date="1697716800">- rebuilt for side-tag with libppd</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.0-5" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-6" date="1710936000">- RHEL-26148 - fix grayscale/color raster printing via AirPrint
- RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-9" date="1732190400">- RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-10" date="1739361600">- RHEL-71935 Fix several important issues reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-11" date="1754308800">- RHEL-68430 texttopdf omits Chinese characters when creating PDF documents</changelog>
</package>
<package pkgid="139f7825babb1fcf06026b8d8b31b7704d7ec615ac436ed41cd4f631db4c3e7f" name="libcupsfilters-devel" arch="x86_64">
  <version epoch="1" ver="2.0.0" rel="13.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-9" date="1732190400">- RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-10" date="1739361600">- RHEL-71935 Fix several important issues reported by OSH</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-11" date="1754308800">- RHEL-68430 texttopdf omits Chinese characters when creating PDF documents</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.0.0-12" date="1785326400">- RHEL-212655 CVE-2026-64612 libcupsfilters: Handle libpng errors
  via longjmp()/setjmp() to prevent process abort on malformed PNG</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1:2.0.0-13" date="1785326401">- RHEL-214027 CVE-2026-64611 libcupsfilters: Fix infinite loop and
  empty device_ids in ieee1284</changelog>
</package>
<package pkgid="f609d16249159992ccd381962f6d806d1b422a088c27bcf16bb80fa19595a732" name="libcurl" arch="x86_64">
  <version epoch="0" ver="8.12.1" rel="4.el10"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-1" date="1722427200">- new upstream release (RHEL-50806)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-2" date="1722600000">- add gating configuration (RHEL-52103)
- sigpipe: init the struct so that first apply ignores (RHEL-53327)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-3" date="1722600001">- fix libcurl and libcurl-minimal conflict in test plan (RHEL-52103)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-4" date="1724068800">- correct indentation in test plan</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.9.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-6" date="1730808000">- use tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-1" date="1742385600">- new upstream release (RHEL-84132)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-2" date="1744718400">- revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
  (temporary revert to workaround another issue RHEL-85608)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-3" date="1760961600">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121672</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4" date="1763380800">- openssl: respect system crypto policy for TLS max version (RHEL-128916)</changelog>
</package>
<package pkgid="d7867ddb6c6db47d973eec66afcce9915f2ef93b7568437dec2d4ccae3fc2e2a" name="libcurl" arch="x86_64">
  <version epoch="0" ver="8.12.1" rel="4.el10_2.4"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.9.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-6" date="1730808000">- use tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-1" date="1742385600">- new upstream release (RHEL-84132)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-2" date="1744718400">- revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
  (temporary revert to workaround another issue RHEL-85608)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-3" date="1760961600">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121672</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4" date="1763380800">- openssl: respect system crypto policy for TLS max version (RHEL-128916)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4.1" date="1776686400">- openssl: fix CA cache reuse with CURLSSLOPT_NO_PARTIALCHAIN (CVE-2025-14819)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4.2" date="1783944000">- fix SSH host key mismatch on type difference (CVE-2026-9547)
- fix schemeless URL handling with --proto-default (CVE-2026-12064)
- fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4.el10_2.3" date="1784721600">- fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965)
- fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783)
- fix proxy connection reuse with wrong credentials (CVE-2026-3784)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 8.12.1-4.4" date="1785326400">- fix proxy environment variable change detection (CVE-2026-8927)</changelog>
</package>
<package pkgid="21a310c47d460a90cc2e8f5f884e00d87a5c6c685b29ef2694e9aebabf188bf3" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="8.12.1" rel="4.el10"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-1" date="1722427200">- new upstream release (RHEL-50806)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-2" date="1722600000">- add gating configuration (RHEL-52103)
- sigpipe: init the struct so that first apply ignores (RHEL-53327)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-3" date="1722600001">- fix libcurl and libcurl-minimal conflict in test plan (RHEL-52103)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-4" date="1724068800">- correct indentation in test plan</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.9.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-6" date="1730808000">- use tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-1" date="1742385600">- new upstream release (RHEL-84132)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-2" date="1744718400">- revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
  (temporary revert to workaround another issue RHEL-85608)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-3" date="1760961600">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121672</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4" date="1763380800">- openssl: respect system crypto policy for TLS max version (RHEL-128916)</changelog>
</package>
<package pkgid="58944f30c3c02bf86f75aef24750e52028370e6d4855126c45223abf4f5f48f4" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="8.12.1" rel="4.el10_2.4"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.9.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-6" date="1730808000">- use tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-1" date="1742385600">- new upstream release (RHEL-84132)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-2" date="1744718400">- revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
  (temporary revert to workaround another issue RHEL-85608)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-3" date="1760961600">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121672</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4" date="1763380800">- openssl: respect system crypto policy for TLS max version (RHEL-128916)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4.1" date="1776686400">- openssl: fix CA cache reuse with CURLSSLOPT_NO_PARTIALCHAIN (CVE-2025-14819)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4.2" date="1783944000">- fix SSH host key mismatch on type difference (CVE-2026-9547)
- fix schemeless URL handling with --proto-default (CVE-2026-12064)
- fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4.el10_2.3" date="1784721600">- fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965)
- fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783)
- fix proxy connection reuse with wrong credentials (CVE-2026-3784)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 8.12.1-4.4" date="1785326400">- fix proxy environment variable change detection (CVE-2026-8927)</changelog>
</package>
<package pkgid="e852c430e70d2a7c092bf20239b3a6877af422bfef187b128d2e66a1946d80ea" name="libcurl-minimal" arch="x86_64">
  <version epoch="0" ver="8.12.1" rel="4.el10"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-1" date="1722427200">- new upstream release (RHEL-50806)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-2" date="1722600000">- add gating configuration (RHEL-52103)
- sigpipe: init the struct so that first apply ignores (RHEL-53327)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-3" date="1722600001">- fix libcurl and libcurl-minimal conflict in test plan (RHEL-52103)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-4" date="1724068800">- correct indentation in test plan</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.9.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-6" date="1730808000">- use tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-1" date="1742385600">- new upstream release (RHEL-84132)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-2" date="1744718400">- revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
  (temporary revert to workaround another issue RHEL-85608)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-3" date="1760961600">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121672</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4" date="1763380800">- openssl: respect system crypto policy for TLS max version (RHEL-128916)</changelog>
</package>
<package pkgid="ae615cde6a32e6c25251429747bfd8918a84f63fc0fc9304ff8d4085f58bac99" name="libcurl-minimal" arch="x86_64">
  <version epoch="0" ver="8.12.1" rel="4.el10_2.4"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 8.9.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.9.1-6" date="1730808000">- use tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-1" date="1742385600">- new upstream release (RHEL-84132)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-2" date="1744718400">- revert using tls-ca-bundle.pem instead of ca-bundle.crt (RHEL-56966)
  (temporary revert to workaround another issue RHEL-85608)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-3" date="1760961600">- cookie: don't treat the leading slash as trailing (CVE-2025-9086)
  Resolves: RHEL-121672</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4" date="1763380800">- openssl: respect system crypto policy for TLS max version (RHEL-128916)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4.1" date="1776686400">- openssl: fix CA cache reuse with CURLSSLOPT_NO_PARTIALCHAIN (CVE-2025-14819)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4.2" date="1783944000">- fix SSH host key mismatch on type difference (CVE-2026-9547)
- fix schemeless URL handling with --proto-default (CVE-2026-12064)
- fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 8.12.1-4.el10_2.3" date="1784721600">- fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965)
- fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783)
- fix proxy connection reuse with wrong credentials (CVE-2026-3784)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 8.12.1-4.4" date="1785326400">- fix proxy environment variable change detection (CVE-2026-8927)</changelog>
</package>
<package pkgid="6897ac55fc665dfce4d46e16971d758038d44c93be652aa64549d5dd7ba323ff" name="libdaemon" arch="x86_64">
  <version epoch="0" ver="0.14" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.14-27" date="1690977600">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-28" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-29" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.14-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.14-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2eea80e036d6f625972c93eb84aeea5451479b7b1c199967cc22339c89dc0717" name="libdaemon-devel" arch="x86_64">
  <version epoch="0" ver="0.14" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-25" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-26" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.14-27" date="1690977600">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-28" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14-29" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.14-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.14-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c9d1ff93bb6c8c323310cab63ed50ffd1a06ee8666add455dc0bb089ba0cdddc" name="libdatrie" arch="x86_64">
  <version epoch="0" ver="0.2.13" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.13-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.2.13-6" date="1684324800">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.13-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.13-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.13-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.13-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.13-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="73c16bbf3643d91f3b4434cbb85ed0fe32161ad498157ec3f2df959d40cc20d3" name="libdatrie-devel" arch="x86_64">
  <version epoch="0" ver="0.2.13" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.13-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.2.13-6" date="1684324800">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.13-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.13-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.13-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.13-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.13-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c2b380c6ff534370ad86a88a539399ec59636e05f4d3dc74dacf33d8ae310cc3" name="libdbusmenu" arch="x86_64">
  <version epoch="0" ver="16.04.0" rel="32.el10"/>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-23" date="1696939200">- Delete GTK2 sub packages for RHEL</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 16.04.0-24" date="1698926400">- Build require GTK+ 2 conditionally (follow up fix for previous change)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 16.04.0-25" date="1699272000">- Drop the requirements on dbus-glib as the project was migrated to GDBus</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.04.0-26" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.04.0-27" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-28" date="1715428800">- Add CI</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-29" date="1715515200">- Add gtk3-tests sub package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.04.0-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-31" date="1720785600">- Remove Xvfb dependency</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.04.0-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="45f6e370b49468cb60f52475fedc1bfe9287a7a03c38fb3343c628f067f3ecc2" name="libdbusmenu-devel" arch="x86_64">
  <version epoch="0" ver="16.04.0" rel="32.el10"/>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-23" date="1696939200">- Delete GTK2 sub packages for RHEL</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 16.04.0-24" date="1698926400">- Build require GTK+ 2 conditionally (follow up fix for previous change)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 16.04.0-25" date="1699272000">- Drop the requirements on dbus-glib as the project was migrated to GDBus</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.04.0-26" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.04.0-27" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-28" date="1715428800">- Add CI</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-29" date="1715515200">- Add gtk3-tests sub package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.04.0-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-31" date="1720785600">- Remove Xvfb dependency</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.04.0-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f2c74dbaf9e2c146cd3fe15802ddc005aa30648f05ab5b014625383b2032818c" name="libdbusmenu-doc" arch="noarch">
  <version epoch="0" ver="16.04.0" rel="32.el10"/>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-23" date="1696939200">- Delete GTK2 sub packages for RHEL</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 16.04.0-24" date="1698926400">- Build require GTK+ 2 conditionally (follow up fix for previous change)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 16.04.0-25" date="1699272000">- Drop the requirements on dbus-glib as the project was migrated to GDBus</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.04.0-26" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.04.0-27" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-28" date="1715428800">- Add CI</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-29" date="1715515200">- Add gtk3-tests sub package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.04.0-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-31" date="1720785600">- Remove Xvfb dependency</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.04.0-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="10d9a3bfba9f537457c6c633e127b488de0898eb3d786403c1034f9918fa499c" name="libdbusmenu-gtk3" arch="x86_64">
  <version epoch="0" ver="16.04.0" rel="32.el10"/>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-23" date="1696939200">- Delete GTK2 sub packages for RHEL</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 16.04.0-24" date="1698926400">- Build require GTK+ 2 conditionally (follow up fix for previous change)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 16.04.0-25" date="1699272000">- Drop the requirements on dbus-glib as the project was migrated to GDBus</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.04.0-26" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.04.0-27" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-28" date="1715428800">- Add CI</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-29" date="1715515200">- Add gtk3-tests sub package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.04.0-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-31" date="1720785600">- Remove Xvfb dependency</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.04.0-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="26ad0747f33effbb182398723fc54408595166b626a09d34f5d9d399dc7b5152" name="libdbusmenu-gtk3-devel" arch="x86_64">
  <version epoch="0" ver="16.04.0" rel="32.el10"/>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-23" date="1696939200">- Delete GTK2 sub packages for RHEL</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 16.04.0-24" date="1698926400">- Build require GTK+ 2 conditionally (follow up fix for previous change)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 16.04.0-25" date="1699272000">- Drop the requirements on dbus-glib as the project was migrated to GDBus</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.04.0-26" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.04.0-27" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-28" date="1715428800">- Add CI</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-29" date="1715515200">- Add gtk3-tests sub package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.04.0-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-31" date="1720785600">- Remove Xvfb dependency</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.04.0-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5ba998d188ea8bdda278481949a28df09b6d8cfe1f4d786db526e7883a7653e5" name="libdbusmenu-gtk3-tests" arch="x86_64">
  <version epoch="0" ver="16.04.0" rel="32.el10"/>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-23" date="1696939200">- Delete GTK2 sub packages for RHEL</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 16.04.0-24" date="1698926400">- Build require GTK+ 2 conditionally (follow up fix for previous change)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 16.04.0-25" date="1699272000">- Drop the requirements on dbus-glib as the project was migrated to GDBus</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.04.0-26" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.04.0-27" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-28" date="1715428800">- Add CI</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-29" date="1715515200">- Add gtk3-tests sub package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.04.0-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-31" date="1720785600">- Remove Xvfb dependency</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.04.0-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f4fff1300d71350f83c6dd8b48526ba34eba8ad51a146f6a2fab867b8e5e144f" name="libdbusmenu-jsonloader" arch="x86_64">
  <version epoch="0" ver="16.04.0" rel="32.el10"/>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-23" date="1696939200">- Delete GTK2 sub packages for RHEL</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 16.04.0-24" date="1698926400">- Build require GTK+ 2 conditionally (follow up fix for previous change)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 16.04.0-25" date="1699272000">- Drop the requirements on dbus-glib as the project was migrated to GDBus</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.04.0-26" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.04.0-27" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-28" date="1715428800">- Add CI</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-29" date="1715515200">- Add gtk3-tests sub package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.04.0-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-31" date="1720785600">- Remove Xvfb dependency</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.04.0-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3aae90c38565099b5928b8279d3a0d438473e57386379729c7d68a3bad76e2f1" name="libdbusmenu-jsonloader-devel" arch="x86_64">
  <version epoch="0" ver="16.04.0" rel="32.el10"/>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-23" date="1696939200">- Delete GTK2 sub packages for RHEL</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 16.04.0-24" date="1698926400">- Build require GTK+ 2 conditionally (follow up fix for previous change)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 16.04.0-25" date="1699272000">- Drop the requirements on dbus-glib as the project was migrated to GDBus</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.04.0-26" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.04.0-27" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-28" date="1715428800">- Add CI</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-29" date="1715515200">- Add gtk3-tests sub package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.04.0-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-31" date="1720785600">- Remove Xvfb dependency</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.04.0-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ced9cf91d3148e8ba6afe5aa9b950dc95516ec3896e153b196b9124cf48a9fd2" name="libdbusmenu-tools" arch="x86_64">
  <version epoch="0" ver="16.04.0" rel="32.el10"/>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-23" date="1696939200">- Delete GTK2 sub packages for RHEL</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 16.04.0-24" date="1698926400">- Build require GTK+ 2 conditionally (follow up fix for previous change)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 16.04.0-25" date="1699272000">- Drop the requirements on dbus-glib as the project was migrated to GDBus</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.04.0-26" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.04.0-27" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-28" date="1715428800">- Add CI</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-29" date="1715515200">- Add gtk3-tests sub package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.04.0-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; - 16.04.0-31" date="1720785600">- Remove Xvfb dependency</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.04.0-32" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b470cb42346805b7db03d89334dc788ce006e3c4a1e144b584f366aa2959304e" name="libdecor" arch="x86_64">
  <version epoch="0" ver="0.2.2" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 0.2.0-1" date="1695643200">- Bump version to 0.2.0</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 0.2.1-1" date="1701432000">- Bump version to 0.2.1</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 0.2.1-2" date="1701864000">- Fix crash when hiding/showing</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 0.2.2-1" date="1705320000">- Bump version to 0.2.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="08d25400f0980f11cfc7748c348f5cb2243a4aac712e8cc86fb0d7525936bde2" name="libdecor-devel" arch="x86_64">
  <version epoch="0" ver="0.2.2" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 0.2.0-1" date="1695643200">- Bump version to 0.2.0</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 0.2.1-1" date="1701432000">- Bump version to 0.2.1</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 0.2.1-2" date="1701864000">- Fix crash when hiding/showing</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 0.2.2-1" date="1705320000">- Bump version to 0.2.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f7782d2871a9d31d6d334e1f07b1bf944be9721c9294698cf1020ec537c0abe6" name="libdex" arch="x86_64">
  <version epoch="0" ver="0.8.1" rel="1.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.4.3-1" date="1704974400">- Update to 0.4.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.3-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.3-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 0.6.0-1" date="1712750400">- Update to libdex 0.6.0</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.6.0-2" date="1714132800">- Add gating.yaml via API</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 0.6.1-1" date="1718193600">- Update to libdex 0.6.1</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 0.6.1-2" date="1718193601">- Avoid asm.S usage on various Linux architectures</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 0.8.1-1" date="1730808000">- Update libdex to 0.8.1</changelog>
</package>
<package pkgid="c964ceb5c4302630deefbd029a39707a065f15a74c80e653d190f8bf170bcfc2" name="libdex-devel" arch="x86_64">
  <version epoch="0" ver="0.8.1" rel="1.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.4.3-1" date="1704974400">- Update to 0.4.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.3-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.3-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 0.6.0-1" date="1712750400">- Update to libdex 0.6.0</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.6.0-2" date="1714132800">- Add gating.yaml via API</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 0.6.1-1" date="1718193600">- Update to libdex 0.6.1</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 0.6.1-2" date="1718193601">- Avoid asm.S usage on various Linux architectures</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 0.8.1-1" date="1730808000">- Update libdex to 0.8.1</changelog>
</package>
<package pkgid="7812fd447cd2cf84ee9a84efde0477011cca20b45f8ebf4a7cfc1dfd65633c55" name="libdex-devel-docs" arch="noarch">
  <version epoch="0" ver="0.8.1" rel="1.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.4.3-1" date="1704974400">- Update to 0.4.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.3-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.3-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 0.6.0-1" date="1712750400">- Update to libdex 0.6.0</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.6.0-2" date="1714132800">- Add gating.yaml via API</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 0.6.1-1" date="1718193600">- Update to libdex 0.6.1</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 0.6.1-2" date="1718193601">- Avoid asm.S usage on various Linux architectures</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 0.8.1-1" date="1730808000">- Update libdex to 0.8.1</changelog>
</package>
<package pkgid="12a9cdd68d7a802aa194976b927c4c28790ba58f9c9780bde14275d8233984ff" name="libdhash" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="58.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-53" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-54" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-55" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-56" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-57" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-58" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a467235c129f75b4f005ab942f20acad07aa729e79bd4b6160d82e25086b6432" name="libdhash-devel" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="58.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-53" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-54" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-55" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-56" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-57" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-58" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="69fe38c88da297a92b4b63e88309ce09f16db74496c75d952c608768d7c3dd3e" name="libdisplay-info" arch="x86_64">
  <version epoch="0" ver="0.2.0" rel="2.el10"/>
  <changelog author="Aleksei Bavshin &lt;alebastr@fedoraproject.org&gt; - 0.1.1-1" date="1676548800">- Initial import (#2170328)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 0.2.0-1" date="1736424000">- Rebase to 0.2.0
  Resolves: RHEL-73467</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 0.2.0-2" date="1737979200">- Bump release for sidetag rebuild</changelog>
</package>
<package pkgid="cb8c2a9c3bfba5a9a2e356dceec14760f8ab9eb1f0bfde85dc1f60b047cd0f4d" name="libdisplay-info-devel" arch="x86_64">
  <version epoch="0" ver="0.2.0" rel="2.el10"/>
  <changelog author="Aleksei Bavshin &lt;alebastr@fedoraproject.org&gt; - 0.1.1-1" date="1676548800">- Initial import (#2170328)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 0.2.0-1" date="1736424000">- Rebase to 0.2.0
  Resolves: RHEL-73467</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 0.2.0-2" date="1737979200">- Bump release for sidetag rebuild</changelog>
</package>
<package pkgid="c48cb9a26a423cf43cc2693be7a69559d47df1102bcc2d7846153bed87b45329" name="libdisplay-info-tools" arch="x86_64">
  <version epoch="0" ver="0.2.0" rel="2.el10"/>
  <changelog author="Aleksei Bavshin &lt;alebastr@fedoraproject.org&gt; - 0.1.1-1" date="1676548800">- Initial import (#2170328)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 0.2.0-1" date="1736424000">- Rebase to 0.2.0
  Resolves: RHEL-73467</changelog>
  <changelog author="Sebastian Wick &lt;sebastian.wick@redhat.com&gt; - 0.2.0-2" date="1737979200">- Bump release for sidetag rebuild</changelog>
</package>
<package pkgid="4ba5f2671508adc4c8bd3eb6c1a565255e82e391cb3c7d073c223aa297e4b0fc" name="libdmmp" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="18.el10"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-9" date="1744804800">- Add 0030-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0031-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0032-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82535 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82535</changelog>
  <changelog author="Filip Suba &lt;fsuba@redhat.com&gt; - 0.9.9-10" date="1744977600">- Migrate gating tests from STI to tmt
- Related: RHEL-82535</changelog>
  <changelog author="Filip Suba &lt;fsuba@redhat.com&gt; - 0.9.9-11" date="1752494400">- Add 0033-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103112 ("Update multipath builtin config to add new
    device defaults [rhel-10]")
- Resolves: RHEL-103112</changelog>
  <changelog author="Lin Li &lt;lilin@redhat.com&gt; - 0.9.9-12" date="1757764800">Add 0034-libmultipath-fix-crash-in-print_foreign_topology.patch
  * Fixes RHEL-107436 ("Running multipath -ll on system with "enable_foreign
    nvme" results in segfault")
Resolves: RHEL-107436</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-13" date="1759320000">- Add 0035-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0036-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0037-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0038-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0039-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0040-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0041-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0042-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0043-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0044-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0045-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0046-libmpathpersist-redesign-failed-release-workaround.patch
- Add 0047-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0048-libmpathpersist-Handle-changing-key-corner-case.patch
- Add 0049-libmpathpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0050-libmultipath-rename-prflag_value-enums.patch
- Add 0051-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0052-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0053-libmpathpersist-remove-update_map_pr-code-for-NULL-p.patch
- Add 0054-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0055-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0056-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0057-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0058-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0059-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0060-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0061-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0062-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0063-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0064-libmpathpersist-update-reservation-key-before-checki.patch
- Add 0065-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0066-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0067-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0068-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0069-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0070-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0071-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0072-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0073-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0074-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0075-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0076-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0077-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
    reservation handling [rhel-10]")
- Resolves: RHEL-118720</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-14" date="1762862400">- Add 0078-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0079-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
    reservation handling [rhel-10]")
- Resolves: RHEL-118720</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-15" date="1763553600">- Add 0080-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128338 ("Update the multipath.conf stanza for Infinidat
    storage")
- Resolves: RHEL-128338</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-16" date="1769083200">- Add 0081-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-136405 ("improve Busy checking for multipathd show status
    output")
- Add 0082-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133815 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-10]")
- Resolves: RHEL-133815
- Resolves: RHEL-136405</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-17" date="1769688000">- Add 0083-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0084-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141287 ("Add purge_disconnected support to multipathd")
- Resolves: RHEL-141287</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-18" date="1771502400">- Add 0085-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0086-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0087-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-129442 ("Improve multipathd's handling of updating
    persistent reservations on restored paths.")
- Resolves: RHEL-129442</changelog>
</package>
<package pkgid="ef5b2a416d10a14ec0a1001dde8de4b9b460bc157b5d3cdfb8231941cdaf010f" name="libdmmp-devel" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="18.el10"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-9" date="1744804800">- Add 0030-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0031-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0032-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82535 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82535</changelog>
  <changelog author="Filip Suba &lt;fsuba@redhat.com&gt; - 0.9.9-10" date="1744977600">- Migrate gating tests from STI to tmt
- Related: RHEL-82535</changelog>
  <changelog author="Filip Suba &lt;fsuba@redhat.com&gt; - 0.9.9-11" date="1752494400">- Add 0033-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103112 ("Update multipath builtin config to add new
    device defaults [rhel-10]")
- Resolves: RHEL-103112</changelog>
  <changelog author="Lin Li &lt;lilin@redhat.com&gt; - 0.9.9-12" date="1757764800">Add 0034-libmultipath-fix-crash-in-print_foreign_topology.patch
  * Fixes RHEL-107436 ("Running multipath -ll on system with "enable_foreign
    nvme" results in segfault")
Resolves: RHEL-107436</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-13" date="1759320000">- Add 0035-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0036-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0037-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0038-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0039-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0040-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0041-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0042-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0043-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0044-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0045-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0046-libmpathpersist-redesign-failed-release-workaround.patch
- Add 0047-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0048-libmpathpersist-Handle-changing-key-corner-case.patch
- Add 0049-libmpathpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0050-libmultipath-rename-prflag_value-enums.patch
- Add 0051-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0052-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0053-libmpathpersist-remove-update_map_pr-code-for-NULL-p.patch
- Add 0054-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0055-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0056-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0057-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0058-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0059-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0060-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0061-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0062-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0063-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0064-libmpathpersist-update-reservation-key-before-checki.patch
- Add 0065-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0066-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0067-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0068-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0069-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0070-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0071-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0072-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0073-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0074-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0075-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0076-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0077-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
    reservation handling [rhel-10]")
- Resolves: RHEL-118720</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-14" date="1762862400">- Add 0078-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0079-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
    reservation handling [rhel-10]")
- Resolves: RHEL-118720</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-15" date="1763553600">- Add 0080-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128338 ("Update the multipath.conf stanza for Infinidat
    storage")
- Resolves: RHEL-128338</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-16" date="1769083200">- Add 0081-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-136405 ("improve Busy checking for multipathd show status
    output")
- Add 0082-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133815 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-10]")
- Resolves: RHEL-133815
- Resolves: RHEL-136405</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-17" date="1769688000">- Add 0083-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0084-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141287 ("Add purge_disconnected support to multipathd")
- Resolves: RHEL-141287</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.9.9-18" date="1771502400">- Add 0085-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0086-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0087-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-129442 ("Improve multipathd's handling of updating
    persistent reservations on restored paths.")
- Resolves: RHEL-129442</changelog>
</package>
<package pkgid="d7d4b60072ffd671c11bf1fff81860fb54f53bc87ffc048f5f74b5f3b6c9989f" name="libdnf" arch="x86_64">
  <version epoch="0" ver="0.73.1" rel="15.el10_2.rocky.0.1"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.73.1-7" date="1738756800">- Add persistence configuration option (RHEL-78034)</changelog>
  <changelog author="Carl George &lt;carl@redhat.com&gt; - 0.73.1-8" date="1738929600">- ConfigParser: make splitReleasever public (RHEL-68034)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.73.1-9" date="1741608000">- Support releasever_{major,minor}, shell-style variable substitution (RHEL-74025)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.73.1-10" date="1742472000">- module: Warn if module config file is inaccessible (RHEL-83804)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.73.1-11" date="1750766400">- history DB: Add "persistence" column (RHEL-99825)
- conf: Add bootc_unsafe_paths (RHEL-99826)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.73.1-12" date="1750939200">- Bump version due to failed build</changelog>
  <changelog author="Matej Focko &lt;mfocko@redhat.com&gt; - 0.73.1-13" date="1770120000">- Fix comparison of RPM items in the transaction (RHEL-128443)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 0.73.1-14" date="1770638400">- Mark all protected packages as user installed for all transactions (RHEL-128445)
- Add `filterUnneededExtraUserinstalled` and Python version to the API
- Describe all problems even when there are protected removals (RHEL-146507)
- Clearer error for protected package broken dependencies</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.73.1-15" date="1776081600">- Fix dnf_keyring_add_public_key() to add multiple keys from a single file
  (RHEL-156063)</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.73.1-15.rocky.0.1" date="1779192000">- Add Rocky Linux bug tracker</changelog>
</package>
<package pkgid="907412abbbef65f985732c2b7e0a194314ba81b9708d5a25f1ccc115d87db1e0" name="libdnf-devel" arch="x86_64">
  <version epoch="0" ver="0.73.1" rel="15.el10_2.rocky.0.1"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.73.1-7" date="1738756800">- Add persistence configuration option (RHEL-78034)</changelog>
  <changelog author="Carl George &lt;carl@redhat.com&gt; - 0.73.1-8" date="1738929600">- ConfigParser: make splitReleasever public (RHEL-68034)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.73.1-9" date="1741608000">- Support releasever_{major,minor}, shell-style variable substitution (RHEL-74025)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.73.1-10" date="1742472000">- module: Warn if module config file is inaccessible (RHEL-83804)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.73.1-11" date="1750766400">- history DB: Add "persistence" column (RHEL-99825)
- conf: Add bootc_unsafe_paths (RHEL-99826)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.73.1-12" date="1750939200">- Bump version due to failed build</changelog>
  <changelog author="Matej Focko &lt;mfocko@redhat.com&gt; - 0.73.1-13" date="1770120000">- Fix comparison of RPM items in the transaction (RHEL-128443)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 0.73.1-14" date="1770638400">- Mark all protected packages as user installed for all transactions (RHEL-128445)
- Add `filterUnneededExtraUserinstalled` and Python version to the API
- Describe all problems even when there are protected removals (RHEL-146507)
- Clearer error for protected package broken dependencies</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.73.1-15" date="1776081600">- Fix dnf_keyring_add_public_key() to add multiple keys from a single file
  (RHEL-156063)</changelog>
  <changelog author="Louis Abel &lt;label@resf.org&gt; - 0.73.1-15.rocky.0.1" date="1779192000">- Add Rocky Linux bug tracker</changelog>
</package>
<package pkgid="89b9d58a530c6d9795ddabb81022a07751e6360bb5128c934a7f5f34e6df8e8f" name="libdnf-plugin-subscription-manager" arch="x86_64">
  <version epoch="0" ver="1.30.12" rel="1.el10.rocky.0.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.30.4-1" date="1737547200">- Revert "feat: Disable anonymous cloud registration temporarily"
  (ptoscano@redhat.com)
- Revert "feat: forcefully switch automatic cloud registration to v1"
  (ptoscano@redhat.com)
- Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (Italian) (toscano.pino@tiscali.it)
- Translated using Weblate (French) (leane.grasser@proton.me)
- Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Update translation files (noreply@weblate.org)
- spec: respect the %{_sbindir} of the distro (ptoscano@redhat.com)
- build: make it possible to customize the 'sbin' install dir
  (ptoscano@redhat.com)
- fix: Restart rhsm service after installation (pkoprda@redhat.com)
- Drop pam_console leftovers (ptoscano@redhat.com)
- Stop using usermode (ptoscano@redhat.com)
- fix: Do not upload profile from DNF, when it is disabled in conf
  (jhnidek@redhat.com)
- rhsmcertd: use ISO 8601 timestamps for the log file (ptoscano@redhat.com)
- rhsmcertd: refactor timestamp function (ptoscano@redhat.com)
- ci: temporarily install 'which' on CentOS Stream 10 (ptoscano@redhat.com)
- New extraction for translatable strings (ptoscano@redhat.com)
- ci: use official c10s container image (ptoscano@redhat.com)
- Translated using Weblate (Italian) (info@salvatorecocuzza.it)
- Translated using Weblate (French) (leane.grasser@proton.me)
- Translated using Weblate (German) (atalanttore@googlemail.com)
- Translated using Weblate (Korean) (simmon@nplob.com)
- feat: Enable register with environment names and environment types
  (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.30.5-1" date="1738670400">- fix: Disabling of content in D-Bus methods Register*() (jhnidek@redhat.com)
- chore: logging.warn() -&gt; logging.warning() (ptoscano@redhat.com)
- Feat CCT-467: Add explanatory info about the source of overrides in repo-
  overrides command (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
- feat: Allow to call RegisterWithActivationKeys() with enable_content
  (jhnidek@redhat.com)
- refactor: Small changes of _enable_content (jhnidek@redhat.com)
- fix: It is possible to disable content using enable_content option
  (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.30.6-1" date="1741262400">- Translated using Weblate (Italian) (toscano.pino@tiscali.it)
- Translated using Weblate (Japanese) (ptoscano@redhat.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (French) (leane.grasser@proton.me)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (Korean) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Update translation files (noreply@weblate.org)
- spec: Remove an unnecessary explicit dependency on json-c
  (debarshir@gnome.org)
- spec: Require shared libraries with architecture-specific dependencies
  (debarshir@gnome.org)
- Revert "ci: temporarily install 'which' on CentOS Stream 10"
  (ptoscano@redhat.com)
- build: cockpit: fix installation of sub-man with newer Fedora
  (ptoscano@redhat.com)
- spec: Require the base package with architecture-specific dependencies
  (debarshir@gnome.org)
- New extraction for translatable strings (ptoscano@redhat.com)
- feat: drop the --ondate option of "status" (ptoscano@redhat.com)
- feat: drop non-SCA support in status command (ptoscano@redhat.com)
- tests: fix mocking of get_terminal_width() in TestColumnize
  (ptoscano@redhat.com)
- feat: print compliance errors &amp; syspurpose status only in entitlement mode
  (ptoscano@redhat.com)
- feat: print "registered" as status when using SCA (ptoscano@redhat.com)
- feat: print "not registered" on status when not registered
  (ptoscano@redhat.com)
- tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
- refactor: move determination of content access mode in own method
  (ptoscano@redhat.com)
- tests: move StubIdentity to stubs (ptoscano@redhat.com)
- tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
- chore: move banner printing to its own function (ptoscano@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.30.7-1" date="1747224000">- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Italian) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (Italian) (info@salvatorecocuzza.it)
- Translated using Weblate (Spanish) (fserrador@gmail.com)
- Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
- Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
  translation-memory@weblate.org)
- Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
- Translated using Weblate (Japanese) (mhorky@redhat.com)
- Translated using Weblate (French) (leane.grasser@proton.me)
- fix: Unit test should ignore locale, when generating test timestamp
  (jhnidek@redhat.com)
- fix: Handle improperly closed connections (mhorky@redhat.com)
- test: Added integration tests for activation keys (jstavel@redhat.com)
- test: Integration tests for DBus Unregister call (jhnidek@redhat.com)
- fix: Do not call removed bash script from tesh.sh (jhnidek@redhat.com)
- spec: drop old libdnf-plugin-subscription-manager-debuginfo definition
  (ptoscano@redhat.com)
- spec: switch from an own run_dir to _rundir (ptoscano@redhat.com)
- spec: switch from python_sitelib to python3_sitelib (ptoscano@redhat.com)
- spec: switch from python_sitearch to python3_sitearch (ptoscano@redhat.com)
- spec: inline &amp; drop rhsm_package_name (ptoscano@redhat.com)
- spec: switch from __python to __python3 (ptoscano@redhat.com)
- spec: inline &amp; drop py_package_prefix (ptoscano@redhat.com)
- spec: remove redundant check (ptoscano@redhat.com)
- spec: deduplicate BuildRequires for use_dnf (ptoscano@redhat.com)
- spec: drop old %post snippet for rhsmd (ptoscano@redhat.com)
- spec: drop EL 8 bits (ptoscano@redhat.com)
- ci: tweak the dependabot config for branches a bit (ptoscano@redhat.com)
- feat: remove no more needed branding strings (ptoscano@redhat.com)
- feat: drop ClassicCheck (ptoscano@redhat.com)
- ci: track also active stable branches with dependabot for GitHub actions
  (ptoscano@redhat.com)
- tests: update location of pytest-client-tools (ptoscano@redhat.com)
- Handle URL params for AptRepoFiles (grigo@atix.de)
- fix: Append two additional facts to the graylist (pkoprda@redhat.com)
- refactor: Use class constant instead of variable graylist
  (pkoprda@redhat.com)
- spec: Require subpackages from the same build as the base package
  (debarshir@gnome.org)
- spec: Consolidate dependencies on the DNF &amp; libdnf plugins in one place
  (debarshir@gnome.org)
- spec: Fix grammar and spelling mistakes (debarshir@gnome.org)
- build: use cmake pkg-config imported targets (ptoscano@redhat.com)
- build: fix order of parameters for pkg_check_modules() (ptoscano@redhat.com)
- build: drop manual setting of -std=c99 (ptoscano@redhat.com)
- build: remove check for in source cmake builddir (ptoscano@redhat.com)
- build: bump cmake required version to 3.20 (ptoscano@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.30.8-1" date="1752494400">- fix: Enable content during auto-registration v2 (jhnidek@redhat.com)
- CCT-1490: blackified repolib.py (jstavel@redhat.com)
- CCT-1473: new url for local candlepin image, fixed register test (#3580)
  (jstavel@redhat.com)
- fix: Create consumer cert &amp; key, when chown failed (jhnidek@redhat.com)
- Skip to load default plugins on suse/sles (suttner@atix.de)
- CCT-739: tests for GetUuid method (jstavel@redhat.com)
- feat: Added warning to dnf4 plugin about skewed clock (jhnidek@redhat.com)
- CCT-1081 FEAT Remove unused classes and functions - including
  Conduits/Slots/Hooks for pre/post_subscribe Remove "pre_subscribe" and
  "post_subscribe" plugin slots by removing classes SubscriptionConduit and
  PostSubscriptionConduit. (mgrunwal@redhat.com)
- Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
- chore: Drop get_status_for_icon (mhorky@redhat.com)
- chore: Remove getCompliance method from connection.py (mhorky@redhat.com)
- chore: Clean up compliance status of ComplianceManager (mhorky@redhat.com)
- chore: Hardcode SCA-relevant values to ComplianceManager (mhorky@redhat.com)
- chore: Drop HTTP call to /consumers/{uuid}/compliance (mhorky@redhat.com)
- feat: adding sourcery config (jmolet@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.30.9-1" date="1753272000">- feat: Call random.seed() at begining of auto-register (jhnidek@redhat.com)
- feat: Better control over auto-reg waiting game (jhnidek@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.30.10-1" date="1753876800">- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Spanish) (fserrador@gmail.com)
- Translated using Weblate (Spanish) (jsefler@redhat.com)
- Translated using Weblate (Korean) (simmon@nplob.com)
- fix: Wait random time before reaching IMDS server (jhnidek@redhat.com)
- CCT-745: added properties for multi org environment (#3589)
  (jstavel@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.30.11-1" date="1762344000">- fix: Do not send JSON document with empty signature (jhnidek@redhat.com)
- Translated using Weblate (Czech) (pavel.borecki@gmail.com)
- Translated using Weblate (Czech) (jhnidek@redhat.com)
- Translated using Weblate (Korean) (simmon@nplob.com)
- Translated using Weblate (Czech) (pavel.borecki@gmail.com)
- Translated using Weblate (Czech) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Added translation using Weblate (Czech) (pavel.borecki@gmail.com)
- chore: Make new black happy again (jhnidek@redhat.com)
- chore: Increased log level of messages (jhnidek@redhat.com)
- fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
- ci: bump actions/upload-artifact from 4 to 5
  (49699333+dependabot[bot]@users.noreply.github.com)
- chore: Removed getSyspurposeCompliance (jhnidek@redhat.com)
- chore: Do not call candlepin from GetSyspurposeStatus (jhnidek@redhat.com)
- chore: Removed SyspurposeComplianceStatusCache (jhnidek@redhat.com)
- fix: Require findutils in .spec file (jhnidek@redhat.com)
- feat: Try to cache candlepin server capabilities (jhnidek@redhat.com)
- solved a conflict in utils.py (jstavel@redhat.com)
- CCT-744: integration tests for DBus Config object (jstavel@redhat.com)
- CCT-1029: tests for Register with environment option (jstavel@redhat.com)
- chore: Small changes in integration-tests/test_syspurpose.py
  (jhnidek@redhat.com)
- chore: Small fixes in test_register_get_orgs.py (jhnidek@redhat.com)
- chore: Small fixes of integration-tests/test_register.py (jhnidek@redhat.com)
- chore: Small tweaks of bash script of integration tests (jhnidek@redhat.com)
- chore(doc): Improved README.md for integration tests (jhnidek@redhat.com)
- CCT-743: rebased (jstavel@redhat.com)
- CCT-1600: fix applied, unified settings.toml to use the same name of
  valid_fields.json (jstavel@redhat.com)
- ci: bump actions/checkout from 4 to 5
  (49699333+dependabot[bot]@users.noreply.github.com)
- CCT-742: integration tests for DBus Syspurpose object (jstavel@redhat.com)
- CCT-1029: test for dbus method GetEnvironments (jstavel@redhat.com)
- CCT-1097: added enable_content for registration tests (jstavel@redhat.com)
- CCT-745: multi org credentials added (jstavel@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.30.12-1" date="1769169600">- feat: Added more debug prints to cloud-what (jhnidek@redhat.com)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
  memory@weblate.org)
- Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
- Added translation using Weblate (Finnish) (noreply-addon-
  languages@weblate.org)
- Translated using Weblate (Czech) (jsefler@redhat.com)
- fix(test): Fix unit tests of "sub-man status" (jhnidek@redhat.com)
- RHEL-126153: Update GCP to Google Cloud in log messages (crag@redhat.com)
- fix: Update user-facing GCP refrences to Google Cloud (crag@redhat.com)
- ci: bump actions/upload-artifact from 5 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fix profile upload because of missing self.cp (suttner@atix.de)
- feat: added signature type log in TLS handshake (macano@redhat.com)
- feat: added internal method to get tls handshake info
  (manuelcanorojo@gmail.com)
- fix: Print list of environments without --set/--list (jhnidek@redhat.com)
- fix: Fix getting AWS IMDSv2 signature (jhnidek@redhat.com)
- fix(test): Fix unit test of aws (jhnidek@redhat.com)
- fix(ci): Fixed integration tests of syspurpose (jhnidek@redhat.com)
- chore: Removed deprecated information from setup.py (jhnidek@redhat.com)
- chore(ci): Specify permissions for Actions (mhorky@redhat.com)
- feat: check if --set arg is empty when the environments module is called
  (manuelcanorojo@gmail.com)
- docs: added missing gettext building dependency (manuelcanorojo@gmail.com)
- docs: improved man content related to subscription-manager environment
  variables for proxy configuration (manuelcanorojo@gmail.com)
- ci: bump actions/checkout from 5 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fix gobject python package name of sles (suttner@atix.de)
- Fix SLES build on OBS (suttner@atix.de)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 1.30.12-1.rocky.0.1" date="1769256000">- Remove Red Hat references</changelog>
</package>
<package pkgid="dbdadc1d5c856a9858f5b9def750269b5e0b908876b1a1da49ef96c07051d3e3" name="libdnf5" arch="x86_64">
  <version epoch="0" ver="5.1.12" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.8-1" date="1700827200">- Release 5.1.8
- Update translations from weblate
- Don't run infinitely when enabling dependent modules and module is not found
- Always print "[d]" in module list for default streams
- Fix transaction table headers for module operations
- Implement `config-manager addrepo --add-or-replace`
- Implement plugin `config-manager`
- Allow globs in module_spec arguments
- Document needs-restarting plugin
- Add no-op `needs-restarting -r` for DNF 4 compat
- Implement `needs-restarting --services`
- Initial implementation of needs-restarting</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.9-1" date="1702036800">- Release 5.1.9
- Update translations from weblate
- Fix builds for RISC-V arch
- Fix architecture autodetection
- Move `am_i_root` function to common library
- Implement `module info` command
- Add user confirmation request if `history store` overwrites a file
- Add `history store` command
- Add API to serialize base::transaction in JSON
- Add API to serialize transaction::transaction in JSON
- Add docs for `provides`
- Implement command `provides`
- Read `copr.vendor.conf` in `/usr/share` first
- Add docs for `check` command
- Implement `check` command
- Expose `utis/fs/file.hpp` and `temp.hpp` on API
- Document dropping of the `skip-broken` for `upgrade`
- Update man pages with missing dependency resolving-related options
- Document `skip-broken` option only for related commands
- Test for adding an empty list to memory file
- Check serialized temporary files memory is non-empty
- Add `microcode_ctl` to needs-restarting's reboot list
- Fix reporting spec matches only source</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.10-1" date="1704196800">- Release 5.1.10
- Document dnf5 plugins
- Document How-to write libdnf5 plugin tutorial
- Document How-to write dnf5 plugin tutorial
- Document Templates for libdnf5 plugin
- Document Templates for dnf5 plugin
- Sort the module info table
- `module info` print hint for active modules
- `module info` print "[a]" for active modules
- Ensure write permission before importing packages
- Change module dependency string to be the same as in dnf4
- `module info`: improve summary and description
- Escape glob characters in pkg specs for `builddep`
- Add `mc` alias for `makecache`
- Implement `logdir`, `log_size` and `log_rotate` config options
- remove redundant "all" in command `check`
- Improve bash completion
- Fix progress bars miss newlines on non-interactive output</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 5.1.10-2" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.1.10-3" date="1704369600">- Disable zchunk on RHEL</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.11-1" date="1704974400">- Release 5.1.11
- Update translations from weblate
- Fix `--skip-unavailable` documentation
- Make `cachedir`, `system_cachedir` relative to `installroot`
- Workaround for swig-4.2.0 missing fragment dependency
- Add `repoquery --recursive` option
- Add `repoquery --providers-of=PACKAGE_ATTRIBUTE` option
- Update documentation of repoquery
- Update documentation for remove command behavior
- Limit search pattern for remove command to NEVRAs and files
- Packaging: Require an exact release of libdnf5-cli by dnf5-plugins
- Disable zchunk on RHEL
- Add dnf5.conf man page
- Add RPM package Group attribute to dnf5daemon-server
- Document changes related to caching
- Document caching man page
- Document Global Option `--help-cmd` dropped
- log_event: Correct message for HINT_ICASE</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.12-1" date="1707480000">- Release 5.1.12
- Update translations from weblate
- Drop dnf obsoletion temporarily
- Use regex for tmt plan names
- Add tmt tests identifiers
- PackageQuery: Add `filter_{latest,earliest}_evr_ignore_arch`
- Suggest to use dnf5 command to install dnf5 plugins
- Added arch option to the download command
- CI: Upgrade action/checkout to a version with Node.js 20
- Document explicit nevra remove commands and aliases dropped
- build: Include &lt;unistd.h&gt; for isatty()
- Change user info display on history command to include display name and username
- Revert "Use focusbest: prefer latest deps versions over smaller transactions"
- Fix a warning when building docs.
- modules: Add a test for enabling default modules
- modules: Add a new module stream to test data
- modules: Respect defaults when enabling multiple streams of a module
- modules: Fix TransactionItemType for not found modules
- Build: Require GCC 10.1 for std::in_range&lt;&gt;()
- Add --urlprotocol option to download command
- dnfdaemon: Explicitly specify allowed config overrides
- Disable dnf and dnf5daemon tests
- needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
- doc: Add --destdir option to upgrade command manual
- Move number placeholder to postposition in copr_repo.cpp
- Added url option
- Load protected packages from installroot
- Make protected_packages an append options
- doc: Create a man page for Aliases
- I18N: Annotate literals in advisory command
- Extend filter_release and filter_version tests
- package_query: Fix filter_version with non EQ comparator
- Fix clang format
- Fix code for string deduplication
- Use placeholders to deduplicate strings
- Add __hash__(), __str__(), and __repr__() for Package
- Add __hash__() for Reldep Python binding
- Add __repr__() to python bindings of Reldep
- Define tp_str slot for Reldep Class
- group: Fix using allowerasing option
- Fix misspellings
- I18N: Remove duplicate empty message IDs from catalogs
- I18N: Do not mark empty strings for a translation</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.1.12-1.rocky.0.1" date="1709380800">- Add Rocky bugtracker</changelog>
</package>
<package pkgid="8ac808327b56ab190d283905a2f298d28cb62033500a54cf3176fc7fddbba4fc" name="libdnf5-cli" arch="x86_64">
  <version epoch="0" ver="5.1.12" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.8-1" date="1700827200">- Release 5.1.8
- Update translations from weblate
- Don't run infinitely when enabling dependent modules and module is not found
- Always print "[d]" in module list for default streams
- Fix transaction table headers for module operations
- Implement `config-manager addrepo --add-or-replace`
- Implement plugin `config-manager`
- Allow globs in module_spec arguments
- Document needs-restarting plugin
- Add no-op `needs-restarting -r` for DNF 4 compat
- Implement `needs-restarting --services`
- Initial implementation of needs-restarting</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.9-1" date="1702036800">- Release 5.1.9
- Update translations from weblate
- Fix builds for RISC-V arch
- Fix architecture autodetection
- Move `am_i_root` function to common library
- Implement `module info` command
- Add user confirmation request if `history store` overwrites a file
- Add `history store` command
- Add API to serialize base::transaction in JSON
- Add API to serialize transaction::transaction in JSON
- Add docs for `provides`
- Implement command `provides`
- Read `copr.vendor.conf` in `/usr/share` first
- Add docs for `check` command
- Implement `check` command
- Expose `utis/fs/file.hpp` and `temp.hpp` on API
- Document dropping of the `skip-broken` for `upgrade`
- Update man pages with missing dependency resolving-related options
- Document `skip-broken` option only for related commands
- Test for adding an empty list to memory file
- Check serialized temporary files memory is non-empty
- Add `microcode_ctl` to needs-restarting's reboot list
- Fix reporting spec matches only source</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.10-1" date="1704196800">- Release 5.1.10
- Document dnf5 plugins
- Document How-to write libdnf5 plugin tutorial
- Document How-to write dnf5 plugin tutorial
- Document Templates for libdnf5 plugin
- Document Templates for dnf5 plugin
- Sort the module info table
- `module info` print hint for active modules
- `module info` print "[a]" for active modules
- Ensure write permission before importing packages
- Change module dependency string to be the same as in dnf4
- `module info`: improve summary and description
- Escape glob characters in pkg specs for `builddep`
- Add `mc` alias for `makecache`
- Implement `logdir`, `log_size` and `log_rotate` config options
- remove redundant "all" in command `check`
- Improve bash completion
- Fix progress bars miss newlines on non-interactive output</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 5.1.10-2" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.1.10-3" date="1704369600">- Disable zchunk on RHEL</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.11-1" date="1704974400">- Release 5.1.11
- Update translations from weblate
- Fix `--skip-unavailable` documentation
- Make `cachedir`, `system_cachedir` relative to `installroot`
- Workaround for swig-4.2.0 missing fragment dependency
- Add `repoquery --recursive` option
- Add `repoquery --providers-of=PACKAGE_ATTRIBUTE` option
- Update documentation of repoquery
- Update documentation for remove command behavior
- Limit search pattern for remove command to NEVRAs and files
- Packaging: Require an exact release of libdnf5-cli by dnf5-plugins
- Disable zchunk on RHEL
- Add dnf5.conf man page
- Add RPM package Group attribute to dnf5daemon-server
- Document changes related to caching
- Document caching man page
- Document Global Option `--help-cmd` dropped
- log_event: Correct message for HINT_ICASE</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.12-1" date="1707480000">- Release 5.1.12
- Update translations from weblate
- Drop dnf obsoletion temporarily
- Use regex for tmt plan names
- Add tmt tests identifiers
- PackageQuery: Add `filter_{latest,earliest}_evr_ignore_arch`
- Suggest to use dnf5 command to install dnf5 plugins
- Added arch option to the download command
- CI: Upgrade action/checkout to a version with Node.js 20
- Document explicit nevra remove commands and aliases dropped
- build: Include &lt;unistd.h&gt; for isatty()
- Change user info display on history command to include display name and username
- Revert "Use focusbest: prefer latest deps versions over smaller transactions"
- Fix a warning when building docs.
- modules: Add a test for enabling default modules
- modules: Add a new module stream to test data
- modules: Respect defaults when enabling multiple streams of a module
- modules: Fix TransactionItemType for not found modules
- Build: Require GCC 10.1 for std::in_range&lt;&gt;()
- Add --urlprotocol option to download command
- dnfdaemon: Explicitly specify allowed config overrides
- Disable dnf and dnf5daemon tests
- needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
- doc: Add --destdir option to upgrade command manual
- Move number placeholder to postposition in copr_repo.cpp
- Added url option
- Load protected packages from installroot
- Make protected_packages an append options
- doc: Create a man page for Aliases
- I18N: Annotate literals in advisory command
- Extend filter_release and filter_version tests
- package_query: Fix filter_version with non EQ comparator
- Fix clang format
- Fix code for string deduplication
- Use placeholders to deduplicate strings
- Add __hash__(), __str__(), and __repr__() for Package
- Add __hash__() for Reldep Python binding
- Add __repr__() to python bindings of Reldep
- Define tp_str slot for Reldep Class
- group: Fix using allowerasing option
- Fix misspellings
- I18N: Remove duplicate empty message IDs from catalogs
- I18N: Do not mark empty strings for a translation</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.1.12-1.rocky.0.1" date="1709380800">- Add Rocky bugtracker</changelog>
</package>
<package pkgid="b270d51de9a7107b10e867977ebc305cdb9011ba6bb10c2dfa6ebc80de0e8f2b" name="libdnf5-cli-devel" arch="x86_64">
  <version epoch="0" ver="5.1.12" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.8-1" date="1700827200">- Release 5.1.8
- Update translations from weblate
- Don't run infinitely when enabling dependent modules and module is not found
- Always print "[d]" in module list for default streams
- Fix transaction table headers for module operations
- Implement `config-manager addrepo --add-or-replace`
- Implement plugin `config-manager`
- Allow globs in module_spec arguments
- Document needs-restarting plugin
- Add no-op `needs-restarting -r` for DNF 4 compat
- Implement `needs-restarting --services`
- Initial implementation of needs-restarting</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.9-1" date="1702036800">- Release 5.1.9
- Update translations from weblate
- Fix builds for RISC-V arch
- Fix architecture autodetection
- Move `am_i_root` function to common library
- Implement `module info` command
- Add user confirmation request if `history store` overwrites a file
- Add `history store` command
- Add API to serialize base::transaction in JSON
- Add API to serialize transaction::transaction in JSON
- Add docs for `provides`
- Implement command `provides`
- Read `copr.vendor.conf` in `/usr/share` first
- Add docs for `check` command
- Implement `check` command
- Expose `utis/fs/file.hpp` and `temp.hpp` on API
- Document dropping of the `skip-broken` for `upgrade`
- Update man pages with missing dependency resolving-related options
- Document `skip-broken` option only for related commands
- Test for adding an empty list to memory file
- Check serialized temporary files memory is non-empty
- Add `microcode_ctl` to needs-restarting's reboot list
- Fix reporting spec matches only source</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.10-1" date="1704196800">- Release 5.1.10
- Document dnf5 plugins
- Document How-to write libdnf5 plugin tutorial
- Document How-to write dnf5 plugin tutorial
- Document Templates for libdnf5 plugin
- Document Templates for dnf5 plugin
- Sort the module info table
- `module info` print hint for active modules
- `module info` print "[a]" for active modules
- Ensure write permission before importing packages
- Change module dependency string to be the same as in dnf4
- `module info`: improve summary and description
- Escape glob characters in pkg specs for `builddep`
- Add `mc` alias for `makecache`
- Implement `logdir`, `log_size` and `log_rotate` config options
- remove redundant "all" in command `check`
- Improve bash completion
- Fix progress bars miss newlines on non-interactive output</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 5.1.10-2" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.1.10-3" date="1704369600">- Disable zchunk on RHEL</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.11-1" date="1704974400">- Release 5.1.11
- Update translations from weblate
- Fix `--skip-unavailable` documentation
- Make `cachedir`, `system_cachedir` relative to `installroot`
- Workaround for swig-4.2.0 missing fragment dependency
- Add `repoquery --recursive` option
- Add `repoquery --providers-of=PACKAGE_ATTRIBUTE` option
- Update documentation of repoquery
- Update documentation for remove command behavior
- Limit search pattern for remove command to NEVRAs and files
- Packaging: Require an exact release of libdnf5-cli by dnf5-plugins
- Disable zchunk on RHEL
- Add dnf5.conf man page
- Add RPM package Group attribute to dnf5daemon-server
- Document changes related to caching
- Document caching man page
- Document Global Option `--help-cmd` dropped
- log_event: Correct message for HINT_ICASE</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.12-1" date="1707480000">- Release 5.1.12
- Update translations from weblate
- Drop dnf obsoletion temporarily
- Use regex for tmt plan names
- Add tmt tests identifiers
- PackageQuery: Add `filter_{latest,earliest}_evr_ignore_arch`
- Suggest to use dnf5 command to install dnf5 plugins
- Added arch option to the download command
- CI: Upgrade action/checkout to a version with Node.js 20
- Document explicit nevra remove commands and aliases dropped
- build: Include &lt;unistd.h&gt; for isatty()
- Change user info display on history command to include display name and username
- Revert "Use focusbest: prefer latest deps versions over smaller transactions"
- Fix a warning when building docs.
- modules: Add a test for enabling default modules
- modules: Add a new module stream to test data
- modules: Respect defaults when enabling multiple streams of a module
- modules: Fix TransactionItemType for not found modules
- Build: Require GCC 10.1 for std::in_range&lt;&gt;()
- Add --urlprotocol option to download command
- dnfdaemon: Explicitly specify allowed config overrides
- Disable dnf and dnf5daemon tests
- needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
- doc: Add --destdir option to upgrade command manual
- Move number placeholder to postposition in copr_repo.cpp
- Added url option
- Load protected packages from installroot
- Make protected_packages an append options
- doc: Create a man page for Aliases
- I18N: Annotate literals in advisory command
- Extend filter_release and filter_version tests
- package_query: Fix filter_version with non EQ comparator
- Fix clang format
- Fix code for string deduplication
- Use placeholders to deduplicate strings
- Add __hash__(), __str__(), and __repr__() for Package
- Add __hash__() for Reldep Python binding
- Add __repr__() to python bindings of Reldep
- Define tp_str slot for Reldep Class
- group: Fix using allowerasing option
- Fix misspellings
- I18N: Remove duplicate empty message IDs from catalogs
- I18N: Do not mark empty strings for a translation</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.1.12-1.rocky.0.1" date="1709380800">- Add Rocky bugtracker</changelog>
</package>
<package pkgid="c0becc593a6b160266520ecf5eeef7d084998e087f90cbb5166b6359d037640a" name="libdnf5-devel" arch="x86_64">
  <version epoch="0" ver="5.1.12" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.8-1" date="1700827200">- Release 5.1.8
- Update translations from weblate
- Don't run infinitely when enabling dependent modules and module is not found
- Always print "[d]" in module list for default streams
- Fix transaction table headers for module operations
- Implement `config-manager addrepo --add-or-replace`
- Implement plugin `config-manager`
- Allow globs in module_spec arguments
- Document needs-restarting plugin
- Add no-op `needs-restarting -r` for DNF 4 compat
- Implement `needs-restarting --services`
- Initial implementation of needs-restarting</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.9-1" date="1702036800">- Release 5.1.9
- Update translations from weblate
- Fix builds for RISC-V arch
- Fix architecture autodetection
- Move `am_i_root` function to common library
- Implement `module info` command
- Add user confirmation request if `history store` overwrites a file
- Add `history store` command
- Add API to serialize base::transaction in JSON
- Add API to serialize transaction::transaction in JSON
- Add docs for `provides`
- Implement command `provides`
- Read `copr.vendor.conf` in `/usr/share` first
- Add docs for `check` command
- Implement `check` command
- Expose `utis/fs/file.hpp` and `temp.hpp` on API
- Document dropping of the `skip-broken` for `upgrade`
- Update man pages with missing dependency resolving-related options
- Document `skip-broken` option only for related commands
- Test for adding an empty list to memory file
- Check serialized temporary files memory is non-empty
- Add `microcode_ctl` to needs-restarting's reboot list
- Fix reporting spec matches only source</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.10-1" date="1704196800">- Release 5.1.10
- Document dnf5 plugins
- Document How-to write libdnf5 plugin tutorial
- Document How-to write dnf5 plugin tutorial
- Document Templates for libdnf5 plugin
- Document Templates for dnf5 plugin
- Sort the module info table
- `module info` print hint for active modules
- `module info` print "[a]" for active modules
- Ensure write permission before importing packages
- Change module dependency string to be the same as in dnf4
- `module info`: improve summary and description
- Escape glob characters in pkg specs for `builddep`
- Add `mc` alias for `makecache`
- Implement `logdir`, `log_size` and `log_rotate` config options
- remove redundant "all" in command `check`
- Improve bash completion
- Fix progress bars miss newlines on non-interactive output</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 5.1.10-2" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.1.10-3" date="1704369600">- Disable zchunk on RHEL</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.11-1" date="1704974400">- Release 5.1.11
- Update translations from weblate
- Fix `--skip-unavailable` documentation
- Make `cachedir`, `system_cachedir` relative to `installroot`
- Workaround for swig-4.2.0 missing fragment dependency
- Add `repoquery --recursive` option
- Add `repoquery --providers-of=PACKAGE_ATTRIBUTE` option
- Update documentation of repoquery
- Update documentation for remove command behavior
- Limit search pattern for remove command to NEVRAs and files
- Packaging: Require an exact release of libdnf5-cli by dnf5-plugins
- Disable zchunk on RHEL
- Add dnf5.conf man page
- Add RPM package Group attribute to dnf5daemon-server
- Document changes related to caching
- Document caching man page
- Document Global Option `--help-cmd` dropped
- log_event: Correct message for HINT_ICASE</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.12-1" date="1707480000">- Release 5.1.12
- Update translations from weblate
- Drop dnf obsoletion temporarily
- Use regex for tmt plan names
- Add tmt tests identifiers
- PackageQuery: Add `filter_{latest,earliest}_evr_ignore_arch`
- Suggest to use dnf5 command to install dnf5 plugins
- Added arch option to the download command
- CI: Upgrade action/checkout to a version with Node.js 20
- Document explicit nevra remove commands and aliases dropped
- build: Include &lt;unistd.h&gt; for isatty()
- Change user info display on history command to include display name and username
- Revert "Use focusbest: prefer latest deps versions over smaller transactions"
- Fix a warning when building docs.
- modules: Add a test for enabling default modules
- modules: Add a new module stream to test data
- modules: Respect defaults when enabling multiple streams of a module
- modules: Fix TransactionItemType for not found modules
- Build: Require GCC 10.1 for std::in_range&lt;&gt;()
- Add --urlprotocol option to download command
- dnfdaemon: Explicitly specify allowed config overrides
- Disable dnf and dnf5daemon tests
- needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
- doc: Add --destdir option to upgrade command manual
- Move number placeholder to postposition in copr_repo.cpp
- Added url option
- Load protected packages from installroot
- Make protected_packages an append options
- doc: Create a man page for Aliases
- I18N: Annotate literals in advisory command
- Extend filter_release and filter_version tests
- package_query: Fix filter_version with non EQ comparator
- Fix clang format
- Fix code for string deduplication
- Use placeholders to deduplicate strings
- Add __hash__(), __str__(), and __repr__() for Package
- Add __hash__() for Reldep Python binding
- Add __repr__() to python bindings of Reldep
- Define tp_str slot for Reldep Class
- group: Fix using allowerasing option
- Fix misspellings
- I18N: Remove duplicate empty message IDs from catalogs
- I18N: Do not mark empty strings for a translation</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.1.12-1.rocky.0.1" date="1709380800">- Add Rocky bugtracker</changelog>
</package>
<package pkgid="5bd8a92195d4aa81202317ad7a1e3517fdb52e603407437a278144cd49e608d3" name="libdnf5-plugin-actions" arch="x86_64">
  <version epoch="0" ver="5.1.12" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.8-1" date="1700827200">- Release 5.1.8
- Update translations from weblate
- Don't run infinitely when enabling dependent modules and module is not found
- Always print "[d]" in module list for default streams
- Fix transaction table headers for module operations
- Implement `config-manager addrepo --add-or-replace`
- Implement plugin `config-manager`
- Allow globs in module_spec arguments
- Document needs-restarting plugin
- Add no-op `needs-restarting -r` for DNF 4 compat
- Implement `needs-restarting --services`
- Initial implementation of needs-restarting</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.9-1" date="1702036800">- Release 5.1.9
- Update translations from weblate
- Fix builds for RISC-V arch
- Fix architecture autodetection
- Move `am_i_root` function to common library
- Implement `module info` command
- Add user confirmation request if `history store` overwrites a file
- Add `history store` command
- Add API to serialize base::transaction in JSON
- Add API to serialize transaction::transaction in JSON
- Add docs for `provides`
- Implement command `provides`
- Read `copr.vendor.conf` in `/usr/share` first
- Add docs for `check` command
- Implement `check` command
- Expose `utis/fs/file.hpp` and `temp.hpp` on API
- Document dropping of the `skip-broken` for `upgrade`
- Update man pages with missing dependency resolving-related options
- Document `skip-broken` option only for related commands
- Test for adding an empty list to memory file
- Check serialized temporary files memory is non-empty
- Add `microcode_ctl` to needs-restarting's reboot list
- Fix reporting spec matches only source</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.10-1" date="1704196800">- Release 5.1.10
- Document dnf5 plugins
- Document How-to write libdnf5 plugin tutorial
- Document How-to write dnf5 plugin tutorial
- Document Templates for libdnf5 plugin
- Document Templates for dnf5 plugin
- Sort the module info table
- `module info` print hint for active modules
- `module info` print "[a]" for active modules
- Ensure write permission before importing packages
- Change module dependency string to be the same as in dnf4
- `module info`: improve summary and description
- Escape glob characters in pkg specs for `builddep`
- Add `mc` alias for `makecache`
- Implement `logdir`, `log_size` and `log_rotate` config options
- remove redundant "all" in command `check`
- Improve bash completion
- Fix progress bars miss newlines on non-interactive output</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 5.1.10-2" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.1.10-3" date="1704369600">- Disable zchunk on RHEL</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.11-1" date="1704974400">- Release 5.1.11
- Update translations from weblate
- Fix `--skip-unavailable` documentation
- Make `cachedir`, `system_cachedir` relative to `installroot`
- Workaround for swig-4.2.0 missing fragment dependency
- Add `repoquery --recursive` option
- Add `repoquery --providers-of=PACKAGE_ATTRIBUTE` option
- Update documentation of repoquery
- Update documentation for remove command behavior
- Limit search pattern for remove command to NEVRAs and files
- Packaging: Require an exact release of libdnf5-cli by dnf5-plugins
- Disable zchunk on RHEL
- Add dnf5.conf man page
- Add RPM package Group attribute to dnf5daemon-server
- Document changes related to caching
- Document caching man page
- Document Global Option `--help-cmd` dropped
- log_event: Correct message for HINT_ICASE</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.12-1" date="1707480000">- Release 5.1.12
- Update translations from weblate
- Drop dnf obsoletion temporarily
- Use regex for tmt plan names
- Add tmt tests identifiers
- PackageQuery: Add `filter_{latest,earliest}_evr_ignore_arch`
- Suggest to use dnf5 command to install dnf5 plugins
- Added arch option to the download command
- CI: Upgrade action/checkout to a version with Node.js 20
- Document explicit nevra remove commands and aliases dropped
- build: Include &lt;unistd.h&gt; for isatty()
- Change user info display on history command to include display name and username
- Revert "Use focusbest: prefer latest deps versions over smaller transactions"
- Fix a warning when building docs.
- modules: Add a test for enabling default modules
- modules: Add a new module stream to test data
- modules: Respect defaults when enabling multiple streams of a module
- modules: Fix TransactionItemType for not found modules
- Build: Require GCC 10.1 for std::in_range&lt;&gt;()
- Add --urlprotocol option to download command
- dnfdaemon: Explicitly specify allowed config overrides
- Disable dnf and dnf5daemon tests
- needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
- doc: Add --destdir option to upgrade command manual
- Move number placeholder to postposition in copr_repo.cpp
- Added url option
- Load protected packages from installroot
- Make protected_packages an append options
- doc: Create a man page for Aliases
- I18N: Annotate literals in advisory command
- Extend filter_release and filter_version tests
- package_query: Fix filter_version with non EQ comparator
- Fix clang format
- Fix code for string deduplication
- Use placeholders to deduplicate strings
- Add __hash__(), __str__(), and __repr__() for Package
- Add __hash__() for Reldep Python binding
- Add __repr__() to python bindings of Reldep
- Define tp_str slot for Reldep Class
- group: Fix using allowerasing option
- Fix misspellings
- I18N: Remove duplicate empty message IDs from catalogs
- I18N: Do not mark empty strings for a translation</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.1.12-1.rocky.0.1" date="1709380800">- Add Rocky bugtracker</changelog>
</package>
<package pkgid="51ae45368752ab333571f6f105a65d848d16e7528a21c938f6aea2756d44e7a7" name="libdnf5-plugin-rhsm" arch="x86_64">
  <version epoch="0" ver="5.1.12" rel="1.el10.rocky.0.1"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.8-1" date="1700827200">- Release 5.1.8
- Update translations from weblate
- Don't run infinitely when enabling dependent modules and module is not found
- Always print "[d]" in module list for default streams
- Fix transaction table headers for module operations
- Implement `config-manager addrepo --add-or-replace`
- Implement plugin `config-manager`
- Allow globs in module_spec arguments
- Document needs-restarting plugin
- Add no-op `needs-restarting -r` for DNF 4 compat
- Implement `needs-restarting --services`
- Initial implementation of needs-restarting</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.9-1" date="1702036800">- Release 5.1.9
- Update translations from weblate
- Fix builds for RISC-V arch
- Fix architecture autodetection
- Move `am_i_root` function to common library
- Implement `module info` command
- Add user confirmation request if `history store` overwrites a file
- Add `history store` command
- Add API to serialize base::transaction in JSON
- Add API to serialize transaction::transaction in JSON
- Add docs for `provides`
- Implement command `provides`
- Read `copr.vendor.conf` in `/usr/share` first
- Add docs for `check` command
- Implement `check` command
- Expose `utis/fs/file.hpp` and `temp.hpp` on API
- Document dropping of the `skip-broken` for `upgrade`
- Update man pages with missing dependency resolving-related options
- Document `skip-broken` option only for related commands
- Test for adding an empty list to memory file
- Check serialized temporary files memory is non-empty
- Add `microcode_ctl` to needs-restarting's reboot list
- Fix reporting spec matches only source</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.10-1" date="1704196800">- Release 5.1.10
- Document dnf5 plugins
- Document How-to write libdnf5 plugin tutorial
- Document How-to write dnf5 plugin tutorial
- Document Templates for libdnf5 plugin
- Document Templates for dnf5 plugin
- Sort the module info table
- `module info` print hint for active modules
- `module info` print "[a]" for active modules
- Ensure write permission before importing packages
- Change module dependency string to be the same as in dnf4
- `module info`: improve summary and description
- Escape glob characters in pkg specs for `builddep`
- Add `mc` alias for `makecache`
- Implement `logdir`, `log_size` and `log_rotate` config options
- remove redundant "all" in command `check`
- Improve bash completion
- Fix progress bars miss newlines on non-interactive output</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 5.1.10-2" date="1704283200">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_3.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.1.10-3" date="1704369600">- Disable zchunk on RHEL</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.11-1" date="1704974400">- Release 5.1.11
- Update translations from weblate
- Fix `--skip-unavailable` documentation
- Make `cachedir`, `system_cachedir` relative to `installroot`
- Workaround for swig-4.2.0 missing fragment dependency
- Add `repoquery --recursive` option
- Add `repoquery --providers-of=PACKAGE_ATTRIBUTE` option
- Update documentation of repoquery
- Update documentation for remove command behavior
- Limit search pattern for remove command to NEVRAs and files
- Packaging: Require an exact release of libdnf5-cli by dnf5-plugins
- Disable zchunk on RHEL
- Add dnf5.conf man page
- Add RPM package Group attribute to dnf5daemon-server
- Document changes related to caching
- Document caching man page
- Document Global Option `--help-cmd` dropped
- log_event: Correct message for HINT_ICASE</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.11-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 5.1.12-1" date="1707480000">- Release 5.1.12
- Update translations from weblate
- Drop dnf obsoletion temporarily
- Use regex for tmt plan names
- Add tmt tests identifiers
- PackageQuery: Add `filter_{latest,earliest}_evr_ignore_arch`
- Suggest to use dnf5 command to install dnf5 plugins
- Added arch option to the download command
- CI: Upgrade action/checkout to a version with Node.js 20
- Document explicit nevra remove commands and aliases dropped
- build: Include &lt;unistd.h&gt; for isatty()
- Change user info display on history command to include display name and username
- Revert "Use focusbest: prefer latest deps versions over smaller transactions"
- Fix a warning when building docs.
- modules: Add a test for enabling default modules
- modules: Add a new module stream to test data
- modules: Respect defaults when enabling multiple streams of a module
- modules: Fix TransactionItemType for not found modules
- Build: Require GCC 10.1 for std::in_range&lt;&gt;()
- Add --urlprotocol option to download command
- dnfdaemon: Explicitly specify allowed config overrides
- Disable dnf and dnf5daemon tests
- needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
- doc: Add --destdir option to upgrade command manual
- Move number placeholder to postposition in copr_repo.cpp
- Added url option
- Load protected packages from installroot
- Make protected_packages an append options
- doc: Create a man page for Aliases
- I18N: Annotate literals in advisory command
- Extend filter_release and filter_version tests
- package_query: Fix filter_version with non EQ comparator
- Fix clang format
- Fix code for string deduplication
- Use placeholders to deduplicate strings
- Add __hash__(), __str__(), and __repr__() for Package
- Add __hash__() for Reldep Python binding
- Add __repr__() to python bindings of Reldep
- Define tp_str slot for Reldep Class
- group: Fix using allowerasing option
- Fix misspellings
- I18N: Remove duplicate empty message IDs from catalogs
- I18N: Do not mark empty strings for a translation</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 5.1.12-1.rocky.0.1" date="1709380800">- Add Rocky bugtracker</changelog>
</package>
<package pkgid="7163e9205f01064296403d557160eeb918d5b19a25d414b8ce8192a9188a49dc" name="libdrm" arch="x86_64">
  <version epoch="0" ver="2.4.128" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.120-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.120-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.120-4" date="1716811200">- Fix findings from static application security testing (SAST)</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.121-1" date="1717588800">- Update to 2.4.121</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.121-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.121-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.123-1" date="1731412800">- Update to 2.4.123
  Resolves: https://issues.redhat.com/browse/RHEL-53895</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.127-1" date="1760961600">- Update to 2.4.127
  amdgpu-apu.patch: Read model name from /proc/cpuinfo for APUs</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.127-2" date="1761134400">- Added amdgpu-slice.patch and amdgpu-fallback.patch</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.128-1" date="1763380800">- Update to 2.4.128-1</changelog>
</package>
<package pkgid="6f441eb400b383d51d90670ef509655de79f068cdcd843998acfe16b22327ea6" name="libdrm-devel" arch="x86_64">
  <version epoch="0" ver="2.4.128" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.120-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.120-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.120-4" date="1716811200">- Fix findings from static application security testing (SAST)</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.121-1" date="1717588800">- Update to 2.4.121</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.121-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.121-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.123-1" date="1731412800">- Update to 2.4.123
  Resolves: https://issues.redhat.com/browse/RHEL-53895</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.127-1" date="1760961600">- Update to 2.4.127
  amdgpu-apu.patch: Read model name from /proc/cpuinfo for APUs</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.127-2" date="1761134400">- Added amdgpu-slice.patch and amdgpu-fallback.patch</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.128-1" date="1763380800">- Update to 2.4.128-1</changelog>
</package>
<package pkgid="967486444fc52dc5e6bff0cd5ccf4af53b23828924b89685215829af7137040f" name="libdvbv5" arch="x86_64">
  <version epoch="0" ver="1.26.1" rel="5.el10"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.26.1-1" date="1702468800">- Update to 1.26.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26.1-2" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.26.1-5" date="1765454400">- Rebuilt for CRB inclusion
  Resolves: RHEL-135109</changelog>
</package>
<package pkgid="0fc1fb35438b356c5c011c3ee99b92bc0552adf8694cf80105438709f92ac56e" name="libdvbv5-devel" arch="x86_64">
  <version epoch="0" ver="1.26.1" rel="5.el10"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.26.1-1" date="1702468800">- Update to 1.26.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26.1-2" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.26.1-5" date="1765454400">- Rebuilt for CRB inclusion
  Resolves: RHEL-135109</changelog>
</package>
<package pkgid="386ce3d0e0941e923875c1903f494178e630c983469d3f36cd99af00709091a2" name="libdvbv5-gconv" arch="x86_64">
  <version epoch="0" ver="1.26.1" rel="5.el10"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.26.1-1" date="1702468800">- Update to 1.26.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26.1-2" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.26.1-5" date="1765454400">- Rebuilt for CRB inclusion
  Resolves: RHEL-135109</changelog>
</package>
<package pkgid="b9876e8201702e7724f3bf6bfe23295feff7aedc474129017204bd4fb021c766" name="libdvdnav" arch="x86_64">
  <version epoch="0" ver="6.1.1" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.1-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.1-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.1-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.1-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.1.1-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.1.1-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9601ca0b0d71a271dad71cc6a3e534f9437d044dbaa1b4f55b952735f436cca2" name="libdvdnav-devel" arch="x86_64">
  <version epoch="0" ver="6.1.1" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.1-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.1-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.1-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.1-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.1.1-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.1.1-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3ddda2d3b0f2e35417d5e3c7f8b9141ab4db09f596593788cb88f4e976f3079d" name="libdvdread" arch="x86_64">
  <version epoch="0" ver="6.1.3" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.3-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.3-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.3-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.3-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.1.3-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 6.1.3-8" date="1723550400">- migrated to SPDX license, originally from Fedora by &lt;msuchy&gt;
- Correct License: some files are GPL 2 or GPL 3, but not later</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.1.3-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7c791cc484337f94b45318cc84a612122c1f3158e4b9055cd5fd5354c8db28b8" name="libdvdread-devel" arch="x86_64">
  <version epoch="0" ver="6.1.3" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.3-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.3-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.3-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.3-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.1.3-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 6.1.3-8" date="1723550400">- migrated to SPDX license, originally from Fedora by &lt;msuchy&gt;
- Correct License: some files are GPL 2 or GPL 3, but not later</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 6.1.3-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="11f216cec7f14e3a4c808315d2d604941ee23fa1562d9e77ca8460681c18f7c3" name="libdwarves1" arch="x86_64">
  <version epoch="0" ver="1.31" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.25-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 1.27-1" date="1719403200">- Resolves: RHEL-45148
- Add gating.yaml
- Add "Provides: pahole"
- New release: v1.26
- When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
- Print number of holes, bit holes and bit paddings in class member types.
- Introduce --contains_enumerator=ENUMERATOR_NAME:
- Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
- Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
- Fix loading DW_TAG_subroutine_type generated by the Go compiler.
- Fix loading of 32-bit signed enums from BTF.
- Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
- Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
- Do type expansion to cover "private" types and enumerations in btfdiff.
- New release: v1.27
- Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
- Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
- Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
- Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
- Fix hole discovery with inheritance in C++.</changelog>
  <changelog author="Davide Cavalca &lt;dcavalca@centosproject.org&gt; - 1.27-2" date="1723464000">- Backport upstream bugfixes for clang builds
  Resolves: RHEL-54228</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.27-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Gregory Bell &lt;grbell@redhat.com&gt; - 1.30-1" date="1750420800">- New release: 1.30
- Better detection of abort during DWARF loader thread processing
- pahole now detects presence of libbpf APIs and BTF features using weak function
  declarations when built using a shared library libbpf
- Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
- New release: 1.29
- Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
- The BTF encoding now is always reproducible, and as fast/faster than before.
- The memory consumption is reduced.
- Support for multiple BTF_DECL_TAGs pointing to same tag.
- Verify that pfunct prints btf_decl_tags read from BTF.
- Don't print functions twice when using 'pfunct -f function_name'.
- New release: 1.28
- Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
- Show flexible arrays statistics
- Add '--padding N' and '--padding_ge N' to show structs with paddings
- Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
- Don't stop pfunct output at the first function that matches a filter, show all of them
- Allow encoding data about all global variables, not just per CPU ones
- Handle .BTF_ids section endianness, fully supporting cross builds
- Generate decl tags for bpf_fastcall for eligible kfuncs
- Add "distilled_base" BTF feature to split BTF generation.
- Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
- Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
- Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
- Serialize access to elfutils dwarf_getlocation().
- Honour --lang_exclude when merging LTO built CUs.
- Add the debuginfod client cache directory to the vmlinux search path.
- Print the CU's language when a tag isn't supported.
- Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
- Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
- Introduce a tests/ directory with regression tests</changelog>
  <changelog author="Gregory Bell &lt;grbell@redhat.com&gt; - 1.31-1" date="1763553600">- Rework the selection of functions to represent in BTF, for instance:
- Skip functions that passes values thru the stack when those structs don't
  have expected alignment due to some attribute usage that then causes
  problems with BTF trampolines due to lack of expressiveness in BTF to
  signal such special cases.
- Skip objects (compile units) without DWARF: don't stop a multi object
  encoding session just because one doesn't have any DWARF in it.
- Fix BTF dedup by updating libbpf. 
- Fix the inference of the explicit alignment attribute of zero length arrays,
  like struct skb_ext-&gt;data[] in the Linux kernel. Important as BTF has no no
  explicit alignment attribute encoding.
- Fix the inference of alignments after bitfields, such as in struct
  nft_rule_dp-&gt;data[] after -&gt;handle:42, also in the Linux kernel.
- Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct.
- Add comparision of functions encoded in BTF between baseline 'master' branch
  and current branch, i.e. 'next'.</changelog>
</package>
<package pkgid="7feeb8cb4ccc6590cb9764989b67b3c40a5993144bce673aa69d642707ae9460" name="libdwarves1-devel" arch="x86_64">
  <version epoch="0" ver="1.31" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.25-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 1.27-1" date="1719403200">- Resolves: RHEL-45148
- Add gating.yaml
- Add "Provides: pahole"
- New release: v1.26
- When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
- Print number of holes, bit holes and bit paddings in class member types.
- Introduce --contains_enumerator=ENUMERATOR_NAME:
- Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
- Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
- Fix loading DW_TAG_subroutine_type generated by the Go compiler.
- Fix loading of 32-bit signed enums from BTF.
- Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
- Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
- Do type expansion to cover "private" types and enumerations in btfdiff.
- New release: v1.27
- Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
- Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
- Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
- Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
- Fix hole discovery with inheritance in C++.</changelog>
  <changelog author="Davide Cavalca &lt;dcavalca@centosproject.org&gt; - 1.27-2" date="1723464000">- Backport upstream bugfixes for clang builds
  Resolves: RHEL-54228</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.27-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Gregory Bell &lt;grbell@redhat.com&gt; - 1.30-1" date="1750420800">- New release: 1.30
- Better detection of abort during DWARF loader thread processing
- pahole now detects presence of libbpf APIs and BTF features using weak function
  declarations when built using a shared library libbpf
- Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
- New release: 1.29
- Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
- The BTF encoding now is always reproducible, and as fast/faster than before.
- The memory consumption is reduced.
- Support for multiple BTF_DECL_TAGs pointing to same tag.
- Verify that pfunct prints btf_decl_tags read from BTF.
- Don't print functions twice when using 'pfunct -f function_name'.
- New release: 1.28
- Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
- Show flexible arrays statistics
- Add '--padding N' and '--padding_ge N' to show structs with paddings
- Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
- Don't stop pfunct output at the first function that matches a filter, show all of them
- Allow encoding data about all global variables, not just per CPU ones
- Handle .BTF_ids section endianness, fully supporting cross builds
- Generate decl tags for bpf_fastcall for eligible kfuncs
- Add "distilled_base" BTF feature to split BTF generation.
- Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
- Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
- Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
- Serialize access to elfutils dwarf_getlocation().
- Honour --lang_exclude when merging LTO built CUs.
- Add the debuginfod client cache directory to the vmlinux search path.
- Print the CU's language when a tag isn't supported.
- Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
- Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
- Introduce a tests/ directory with regression tests</changelog>
  <changelog author="Gregory Bell &lt;grbell@redhat.com&gt; - 1.31-1" date="1763553600">- Rework the selection of functions to represent in BTF, for instance:
- Skip functions that passes values thru the stack when those structs don't
  have expected alignment due to some attribute usage that then causes
  problems with BTF trampolines due to lack of expressiveness in BTF to
  signal such special cases.
- Skip objects (compile units) without DWARF: don't stop a multi object
  encoding session just because one doesn't have any DWARF in it.
- Fix BTF dedup by updating libbpf. 
- Fix the inference of the explicit alignment attribute of zero length arrays,
  like struct skb_ext-&gt;data[] in the Linux kernel. Important as BTF has no no
  explicit alignment attribute encoding.
- Fix the inference of alignments after bitfields, such as in struct
  nft_rule_dp-&gt;data[] after -&gt;handle:42, also in the Linux kernel.
- Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct.
- Add comparision of functions encoded in BTF between baseline 'master' branch
  and current branch, i.e. 'next'.</changelog>
</package>
<package pkgid="19e64913780b1b5887c1feabbd3152f8781af7a1e44d39035176fcfae4c7adb9" name="libecap" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.0.1-14" date="1694433600">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-15" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-16" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Songsong Zhang &lt;U2FsdGVkX1@gmail.com&gt; - 1.0.1-17" date="1708516800">- Add riscv64 support</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.1-18" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.1-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c1e4f7b43f83cd084425e45121e651a163f2a4a64b66631e156edc2daa8a47e4" name="libecap-devel" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.0.1-14" date="1694433600">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-15" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-16" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Songsong Zhang &lt;U2FsdGVkX1@gmail.com&gt; - 1.0.1-17" date="1708516800">- Add riscv64 support</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.1-18" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.1-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dd89fefb1eee26bd47d89368c64e64392af79839beeee5ff1d85f8267491db4b" name="libeconf" arch="x86_64">
  <version epoch="0" ver="0.6.2" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.5.2-1" date="1693224000">- Update to 0.5.2 (RH#1980774)
- Fix CVE-2023-22652 (RH#2212464)
- Fix CVE-2023-30079 (RH#2235236)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.6.2-1" date="1709726400">- Rebase to 0.6.2</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.6.2-2" date="1718712000">- Fix static analyzer detected issues. Resolves: RHEL-35252</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="784e947f0ee471f598cf9da1b63dc390770ce96f65ac7cd6d8118b7f4125b7d8" name="libeconf-devel" arch="x86_64">
  <version epoch="0" ver="0.6.2" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.5.2-1" date="1693224000">- Update to 0.5.2 (RH#1980774)
- Fix CVE-2023-22652 (RH#2212464)
- Fix CVE-2023-30079 (RH#2235236)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.6.2-1" date="1709726400">- Rebase to 0.6.2</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.6.2-2" date="1718712000">- Fix static analyzer detected issues. Resolves: RHEL-35252</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="37957454677fd0d7f8510ffbc36c4a56f6d4ac451fa5f015d8aacacaf32f20da" name="libeconf-utils" arch="x86_64">
  <version epoch="0" ver="0.6.2" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.5.2-1" date="1693224000">- Update to 0.5.2 (RH#1980774)
- Fix CVE-2023-22652 (RH#2212464)
- Fix CVE-2023-30079 (RH#2235236)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.6.2-1" date="1709726400">- Rebase to 0.6.2</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.6.2-2" date="1718712000">- Fix static analyzer detected issues. Resolves: RHEL-35252</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="35da414e31bacf882cfebc2d72d8f87479b93fc731fa3ffb0fde3e50f13927cb" name="libecpg" arch="x86_64">
  <version epoch="0" ver="16.1" rel="14.el10_0"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 16.1-4" date="1724673600">- rebuild in Konflux</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 16.1-5" date="1724932800">- make the build deterministic by serial make process</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Aviv Sabadra &lt;asabadra@redhat.com&gt; - 16.1-7" date="1731499200">- Bump release for building in Konflux</changelog>
  <changelog author="Aviv Sabadra &lt;asabadra@redhat.com&gt; - 16.1-8" date="1731931200">- Bump release for building in Konflux</changelog>
  <changelog author="Aviv Sabadra &lt;asabadra@redhat.com&gt; - 16.1-10" date="1732104000">- Bump release for Konflux</changelog>
  <changelog author="Aviv Sabadra &lt;asabadra@redhat.com&gt; - 16.1-11" date="1737979200">- Bump release for final January Konflux build</changelog>
  <changelog author="Aviv Sabadra &lt;asabadra@redhat.com&gt; - 16.1-12" date="1738065600">- Drop unnecessary PVC</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 16.1-13" date="1738929600">- Test draft builds with composes</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 16.1-14" date="1743076800">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
</package>
<package pkgid="675a0376aab2d4ab60ec00367a330c59ec6dc5b1ee8213234c2a3729d966d2aa" name="libecpg-devel" arch="x86_64">
  <version epoch="0" ver="16.1" rel="14.el10_0"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 16.1-4" date="1724673600">- rebuild in Konflux</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 16.1-5" date="1724932800">- make the build deterministic by serial make process</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Aviv Sabadra &lt;asabadra@redhat.com&gt; - 16.1-7" date="1731499200">- Bump release for building in Konflux</changelog>
  <changelog author="Aviv Sabadra &lt;asabadra@redhat.com&gt; - 16.1-8" date="1731931200">- Bump release for building in Konflux</changelog>
  <changelog author="Aviv Sabadra &lt;asabadra@redhat.com&gt; - 16.1-10" date="1732104000">- Bump release for Konflux</changelog>
  <changelog author="Aviv Sabadra &lt;asabadra@redhat.com&gt; - 16.1-11" date="1737979200">- Bump release for final January Konflux build</changelog>
  <changelog author="Aviv Sabadra &lt;asabadra@redhat.com&gt; - 16.1-12" date="1738065600">- Drop unnecessary PVC</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 16.1-13" date="1738929600">- Test draft builds with composes</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 16.1-14" date="1743076800">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
</package>
<package pkgid="ae4c51c757ef85bdac1fce18ec95497df11488de0dc3c55e9ff54e940256befc" name="libedit" arch="x86_64">
  <version epoch="0" ver="3.1" rel="52.20230828cvs.el10"/>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.1-44.20221030cvs" date="1669464000">- New version (20221030-3.1)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-45.20221030cvs" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-46.20221030cvs" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.1-47.20221030cvs" date="1690977600">- Drop unneeded strlcat patch</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.1-48.20230828cvs" date="1693224000">- New version (20230828-3.1)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-49.20230828cvs" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-50.20230828cvs" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1-51.20230828cvs" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1-52.20230828cvs" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="61c2a2f0b00b95907c484af4b927501df42e2d845b61d454e4976538aabd7efe" name="libedit-devel" arch="x86_64">
  <version epoch="0" ver="3.1" rel="52.20230828cvs.el10"/>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.1-44.20221030cvs" date="1669464000">- New version (20221030-3.1)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-45.20221030cvs" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-46.20221030cvs" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.1-47.20221030cvs" date="1690977600">- Drop unneeded strlcat patch</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.1-48.20230828cvs" date="1693224000">- New version (20230828-3.1)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-49.20230828cvs" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-50.20230828cvs" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1-51.20230828cvs" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.1-52.20230828cvs" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="80b8b3a46252ead90e7ed28bbb592491dcf944007ab472dd4514063e4174f89a" name="libei" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="1.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.0-1" date="1701864000">- libei 1.2.0</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.0-2" date="1702468800">- Handle OEFFIS_DEVICE_ALL_DEVICES correctly</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.1-1" date="1707134400">- libei 1.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 1.3.0-1" date="1736424000">- Update to version 1.3.0
  Resolves: RHEL-73468</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.5.0-1" date="1762344000">- Update to 1.5.0</changelog>
</package>
<package pkgid="c1f923db2ed16db36bb6d031712c1534f0a1b1d059e43379e07ac9c980ea40e8" name="libei-devel" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="1.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.0-1" date="1701864000">- libei 1.2.0</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.0-2" date="1702468800">- Handle OEFFIS_DEVICE_ALL_DEVICES correctly</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.1-1" date="1707134400">- libei 1.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 1.3.0-1" date="1736424000">- Update to version 1.3.0
  Resolves: RHEL-73468</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.5.0-1" date="1762344000">- Update to 1.5.0</changelog>
</package>
<package pkgid="41f1c54722204ec227411e8c8306370cf684a97a06e24abd29cd76d5a01a10ba" name="libei-utils" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="1.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.0-1" date="1701864000">- libei 1.2.0</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.0-2" date="1702468800">- Handle OEFFIS_DEVICE_ALL_DEVICES correctly</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.1-1" date="1707134400">- libei 1.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 1.3.0-1" date="1736424000">- Update to version 1.3.0
  Resolves: RHEL-73468</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.5.0-1" date="1762344000">- Update to 1.5.0</changelog>
</package>
<package pkgid="7bd615259873ab7428a369b70800d0ab8d6c45cafc32da614d3f96737b587615" name="libeis" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="1.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.0-1" date="1701864000">- libei 1.2.0</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.0-2" date="1702468800">- Handle OEFFIS_DEVICE_ALL_DEVICES correctly</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.1-1" date="1707134400">- libei 1.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 1.3.0-1" date="1736424000">- Update to version 1.3.0
  Resolves: RHEL-73468</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.5.0-1" date="1762344000">- Update to 1.5.0</changelog>
</package>
<package pkgid="926eacf774b607325033943b47f5bd7840c3ea05fc65e1ce2237a55d43c8cc52" name="libeis-devel" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="1.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.0-1" date="1701864000">- libei 1.2.0</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.0-2" date="1702468800">- Handle OEFFIS_DEVICE_ALL_DEVICES correctly</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.1-1" date="1707134400">- libei 1.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 1.3.0-1" date="1736424000">- Update to version 1.3.0
  Resolves: RHEL-73468</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.5.0-1" date="1762344000">- Update to 1.5.0</changelog>
</package>
<package pkgid="1901491d5b81eac69f9f99c42e75b6081bf48335212e003c551ee24b507055a7" name="libell" arch="x86_64">
  <version epoch="0" ver="0.62" rel="3.el10"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.58-1" date="1692964800">- Update to 0.58</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.59-1" date="1695988800">- Update to 0.59</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.60-1" date="1700481600">- Update to 0.60</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.61-1" date="1702728000">- Update to 0.61</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 0.61-2" date="1704715200">- Change specfile to use SPDX identifier</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.61-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.61-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.62-1" date="1707566400">- Update to 0.62</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.62-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.62-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="668e32119015997dbbfa47b8694360a36fb0558c9f4aa2c55ba1db5eabab6886" name="libell-devel" arch="x86_64">
  <version epoch="0" ver="0.62" rel="3.el10"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.58-1" date="1692964800">- Update to 0.58</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.59-1" date="1695988800">- Update to 0.59</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.60-1" date="1700481600">- Update to 0.60</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.61-1" date="1702728000">- Update to 0.61</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 0.61-2" date="1704715200">- Change specfile to use SPDX identifier</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.61-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.61-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.62-1" date="1707566400">- Update to 0.62</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.62-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.62-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c9b3958f7f6309acd33985a0cb0600e30aece42024c18d3ad6574ee426fc45b3" name="libepoxy" arch="x86_64">
  <version epoch="0" ver="1.5.10" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.10-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.10-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt;" date="1694088000">- SPDX migration: license is already SPDX compatible</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.10-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.10-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.10-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Niels De Graef  &lt;ndegraef@redhat.com&gt; - 1.5.10-8" date="1720440000">- Move away from xvfb-run
  Resolves: https://issues.redhat.com/browse/RHEL-36639</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.10-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a711c09027c219919114153c03574d8a316d0c33dd668fe231f9aff5d351f84c" name="libepoxy-devel" arch="x86_64">
  <version epoch="0" ver="1.5.10" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.10-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.10-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt;" date="1694088000">- SPDX migration: license is already SPDX compatible</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.10-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.10-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.10-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Niels De Graef  &lt;ndegraef@redhat.com&gt; - 1.5.10-8" date="1720440000">- Move away from xvfb-run
  Resolves: https://issues.redhat.com/browse/RHEL-36639</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.10-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5e3e53783d235c4eaf41078bdd9e47512fe2fce702eb4b07b01587fe0f85f16b" name="liberation-fonts" arch="noarch">
  <version epoch="1" ver="2.1.5" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT fedoraproject DOT org&gt; - 1:2.1.5-6" date="1692619200">- Migrate to SPDX license expression</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.1.5-7" date="1695643200">- Add a rule to use Liberation Sans as a fallback of ArialMT.
  Resolves: rhbz#1490184</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.1.5-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.1.5-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6d34a65e1e5f4f7357380814636af8ab5c4cc844f7b8f7dcbab2b09984aef2d5" name="liberation-fonts-common" arch="noarch">
  <version epoch="1" ver="2.1.5" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT fedoraproject DOT org&gt; - 1:2.1.5-6" date="1692619200">- Migrate to SPDX license expression</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.1.5-7" date="1695643200">- Add a rule to use Liberation Sans as a fallback of ArialMT.
  Resolves: rhbz#1490184</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.1.5-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.1.5-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="aaaa431240298a63961e598cc61c9d743ddd87d911ff79eb44037a546fd7ca93" name="liberation-mono-fonts" arch="noarch">
  <version epoch="1" ver="2.1.5" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT fedoraproject DOT org&gt; - 1:2.1.5-6" date="1692619200">- Migrate to SPDX license expression</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.1.5-7" date="1695643200">- Add a rule to use Liberation Sans as a fallback of ArialMT.
  Resolves: rhbz#1490184</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.1.5-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.1.5-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a6d53e55fcfbc3049d62be53f509128f0b22c8c91abaa3071de240c127a1bd5b" name="liberation-narrow-fonts" arch="noarch">
  <version epoch="2" ver="1.07.6" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.07.6-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.07.6-11" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT fedoraproject DOT org&gt; - 2:1.07.6-12" date="1692619200">- Migrate to SPDX license expression</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.07.6-13" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.07.6-14" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.07.6-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.07.6-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5db9d737c9455ba2e226117129bcb69a0c9760e00147f47522132945995b0196" name="liberation-sans-fonts" arch="noarch">
  <version epoch="1" ver="2.1.5" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT fedoraproject DOT org&gt; - 1:2.1.5-6" date="1692619200">- Migrate to SPDX license expression</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.1.5-7" date="1695643200">- Add a rule to use Liberation Sans as a fallback of ArialMT.
  Resolves: rhbz#1490184</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.1.5-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.1.5-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bed8ef73f20e24459c91aab02bbb8d94658ad02e1f8dae9d17187a4dd8edc4ce" name="liberation-serif-fonts" arch="noarch">
  <version epoch="1" ver="2.1.5" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT fedoraproject DOT org&gt; - 1:2.1.5-6" date="1692619200">- Migrate to SPDX license expression</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 1:2.1.5-7" date="1695643200">- Add a rule to use Liberation Sans as a fallback of ArialMT.
  Resolves: rhbz#1490184</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.5-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.1.5-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.1.5-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="856de19b1e1f8d2a939b256ed696bf93a71ecbbd1a383594d90b50852bbfbfab" name="libertas-firmware" arch="noarch">
  <version epoch="0" ver="20260411" rel="19.5.el10_1"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-19.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128447)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128447</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-19.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-140094)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-140094</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-19.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145532)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145532</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260311-19.4" date="1773230400">- Update linux-firmware to latest upstream (RHEL-154362)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-154362</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260411-19.5" date="1775908800">- Update linux-firmware to latest upstream (RHEL-164389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
Resolves: RHEL-164389</changelog>
</package>
<package pkgid="b42435a723e67a51ddb205ecc79b90956e68d387df50865c2a7e80026a10cc74" name="libertas-firmware" arch="noarch">
  <version epoch="0" ver="20260609" rel="23.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250212-14" date="1740484800">- accel: ivpu: Update firmware for NPU (RHEL-38586)
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
</package>
<package pkgid="3f21909e5f7d2e19531093cd863ecb26e6a25149077bd84cf4e4daa563137882" name="libertas-firmware" arch="noarch">
  <version epoch="0" ver="20260707" rel="23.1.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream ()
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
</package>
<package pkgid="fe0785d90b2b6f09e48d3800a9a2e06e7c316afb9c0b9244e3326a3b6c53c8a6" name="libertas-firmware" arch="noarch">
  <version epoch="0" ver="20260804" rel="23.2.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream (RHEL-188389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260804-23.2" date="1785844800">- Update linux-firmware to latest upstream (RHEL-214057)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- linux-firmware: Add firmware binary files for new HP project (Messi)
- qcom: Add gpu firmwares for Eliza chipset
- cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
- rtw89: 8922d: add fw 0.35.113.2
- qcom: venus-5.4: fix vp9 decoder assertion failure
- qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
- qcom: Update qdsp6sw firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- intel_vpu: Update NPU firmware
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: Add firmware for new soundwire projects
- rtw88: add firmware v41.0.0 for RTL8723B
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add ADSP firmware for hawi platform
- powervr: add firmware for Imagination Technologies BXM-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform
Resolves: RHEL-214057</changelog>
</package>
<package pkgid="5d519167962ab77fea4a7648209a54eb8f807a60ce860bcecec6bfe29addfc4a" name="libestr" arch="x86_64">
  <version epoch="0" ver="0.1.11" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.11-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.1.11-6" date="1685534400">- Update License tag for SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.11-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.11-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.11-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.11-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.11-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0c6ed79a506fca464a3b8b453d1178eaf753dc2e94ce78eee827f58873565593" name="libestr-devel" arch="x86_64">
  <version epoch="0" ver="0.1.11" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.11-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.1.11-6" date="1685534400">- Update License tag for SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.11-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.11-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.11-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.11-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.11-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c6a3ee7629b7ad6290e25cb9b89fe17ecbfc4127bad396e73c83ba7752845694" name="libev" arch="x86_64">
  <version epoch="0" ver="4.33" rel="15.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.33-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.33-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.33-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.33-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 4.33-14" date="1737460800">- fixed OSH findings
- Resolves: RHEL-44360</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 4.33-15" date="1764763200">- version bump for -source to CRB PRP
- Resolves: RHEL-94337</changelog>
</package>
<package pkgid="c14df0e25cc36360e81296aac6818806fd06553f372782c792bf38f60f2aab4a" name="libev-devel" arch="x86_64">
  <version epoch="0" ver="4.33" rel="15.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.33-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.33-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.33-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.33-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 4.33-14" date="1737460800">- fixed OSH findings
- Resolves: RHEL-44360</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 4.33-15" date="1764763200">- version bump for -source to CRB PRP
- Resolves: RHEL-94337</changelog>
</package>
<package pkgid="883e28291d2744c50d400cd9be5844d6f878ab1beaa423d78829020395fbc256" name="libev-libevent-devel" arch="x86_64">
  <version epoch="0" ver="4.33" rel="15.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.33-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.33-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.33-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.33-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 4.33-14" date="1737460800">- fixed OSH findings
- Resolves: RHEL-44360</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 4.33-15" date="1764763200">- version bump for -source to CRB PRP
- Resolves: RHEL-94337</changelog>
</package>
<package pkgid="3bcaf5a193c800b417f3ee2312eea847df396bc41c1f2baddedd2ad20b56dd14" name="libev-source" arch="noarch">
  <version epoch="0" ver="4.33" rel="15.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.33-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.33-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.33-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.33-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 4.33-14" date="1737460800">- fixed OSH findings
- Resolves: RHEL-44360</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 4.33-15" date="1764763200">- version bump for -source to CRB PRP
- Resolves: RHEL-94337</changelog>
</package>
<package pkgid="65f6ce9313b7ae0c49ef87e708b8a5f5fea43e08f30a27bf5b2f07ddea1f17ee" name="libevdev" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.13.1-1" date="1683288000">- libevdev 1.13.1</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.13.1-2" date="1689854400">- BuildRequires python3-rpm-macros for pathfix.py and use the rpm macro</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt;" date="1693915200">- SPDX migration: licences is already SPDX compatible</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.13.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.13.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a789469fc29b2a68a5ae6d5acc8c4c25dbcec9c339a63c0ade1228e589ccd91c" name="libevdev-devel" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.13.1-1" date="1683288000">- libevdev 1.13.1</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.13.1-2" date="1689854400">- BuildRequires python3-rpm-macros for pathfix.py and use the rpm macro</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt;" date="1693915200">- SPDX migration: licences is already SPDX compatible</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.13.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.13.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d86cf36794d0d2e1efbf7c395f1128b19672a5e8989973314b47448bd41a14e8" name="libevdev-utils" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.13.1-1" date="1683288000">- libevdev 1.13.1</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.13.1-2" date="1689854400">- BuildRequires python3-rpm-macros for pathfix.py and use the rpm macro</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt;" date="1693915200">- SPDX migration: licences is already SPDX compatible</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.13.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.13.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4a8ccb9d13220d96f1f6c01d5beb43acf44ff4c543e0c48b6cb44c7373a5f743" name="libevent" arch="x86_64">
  <version epoch="0" ver="2.1.12" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.12-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.12-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.12-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.12-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.12-12" date="1707825600">- use autosetup
- SPDX migration (Miroslav Suchý)</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.1.12-13" date="1715256000">- Update license identifiers to SPDX in subpackages
- Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.12-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.1.12-15" date="1723550400">- Patch duplicate file descriptor manipulation
- Resolves: RHEL-35256</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.12-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9634f49224ee4714c0f634d1838814eeb11a10c9fc5a4dfe6b61dc8d99620d57" name="libevent-devel" arch="x86_64">
  <version epoch="0" ver="2.1.12" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.12-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.12-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.12-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.12-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.12-12" date="1707825600">- use autosetup
- SPDX migration (Miroslav Suchý)</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.1.12-13" date="1715256000">- Update license identifiers to SPDX in subpackages
- Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.12-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.1.12-15" date="1723550400">- Patch duplicate file descriptor manipulation
- Resolves: RHEL-35256</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.12-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8fe9e379ca3213d4a836b27678b036224bbf02eabafede4c328c93fcd53e40b3" name="libevent-doc" arch="noarch">
  <version epoch="0" ver="2.1.12" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.12-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.12-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.12-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.12-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.12-12" date="1707825600">- use autosetup
- SPDX migration (Miroslav Suchý)</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.1.12-13" date="1715256000">- Update license identifiers to SPDX in subpackages
- Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.12-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.1.12-15" date="1723550400">- Patch duplicate file descriptor manipulation
- Resolves: RHEL-35256</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.12-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c0cab2d16a2364bce241da299b3dbfe29c0fe19b4737354507226da25670eb3c" name="libexif" arch="x86_64">
  <version epoch="0" ver="0.6.24" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.24-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.24-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.24-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.24-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.24-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.24-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e1fd08d6c0cf0d8678dfc596acef2781e8317c5ee2573b79e72aef1b847143cb" name="libexif" arch="x86_64">
  <version epoch="0" ver="0.6.24" rel="9.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.24-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.24-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.6.24-9.1" date="1778155200">- Fix integer underflow in MakerNote decoding (CVE-2026-40386)
  Resolves: RHEL-170240</changelog>
</package>
<package pkgid="1abf93391de0bae79aba85a6fabeda7c1c37e194c6b07430364fb1a3befd5f92" name="libexif-devel" arch="x86_64">
  <version epoch="0" ver="0.6.24" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.24-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.24-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.24-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.24-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.24-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.24-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d6d3731c53fe10d7bf64ae9d8b579bfcce71f0ffa11092836f6660d6b0bf2d1a" name="libexif-devel" arch="x86_64">
  <version epoch="0" ver="0.6.24" rel="9.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.24-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.24-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.6.24-9.1" date="1778155200">- Fix integer underflow in MakerNote decoding (CVE-2026-40386)
  Resolves: RHEL-170240</changelog>
</package>
<package pkgid="f09b377225a98844463c13415ccfe6fcea0638f5d69765bf51001903d82575dd" name="libexif-doc" arch="x86_64">
  <version epoch="0" ver="0.6.24" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.24-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.24-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.24-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.24-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.24-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.24-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9b6969dfb2368efd61e8357f80fff260a31cf8f4932148ef8fe39424f928a232" name="libexif-doc" arch="x86_64">
  <version epoch="0" ver="0.6.24" rel="9.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.24-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.24-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.6.24-9.1" date="1778155200">- Fix integer underflow in MakerNote decoding (CVE-2026-40386)
  Resolves: RHEL-170240</changelog>
</package>
<package pkgid="f0a5ef2163e75f842bfdb32ec5bf39fb65cfa9c89e8e8aba3ed369547aa060de" name="libfabric" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="1.el10"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.20.1-1" date="1707480000">- Update to 1.20.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.20.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.20.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 1.22.0-1" date="1731931200">- Update to upstream release 1.22.0
- Resolves: RHEL-16844, RHEL-24119, RHEL-25795</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 2.1.0-1" date="1750334400">- Update to upstream release 2.1.0
- Resolves: RHEL-73065</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 2.3.1-1" date="1770206400">- Update to upstream release 2.3.1
- Resolves: RHEL-90255, RHEL-99199, RHEL-99208</changelog>
</package>
<package pkgid="41e56288dbe52e4cf33b8510fac63087347830f382166dd590640453260ecd8f" name="libfabric-devel" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="1.el10"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.20.1-1" date="1707480000">- Update to 1.20.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.20.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.20.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 1.22.0-1" date="1731931200">- Update to upstream release 1.22.0
- Resolves: RHEL-16844, RHEL-24119, RHEL-25795</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 2.1.0-1" date="1750334400">- Update to upstream release 2.1.0
- Resolves: RHEL-73065</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 2.3.1-1" date="1770206400">- Update to upstream release 2.3.1
- Resolves: RHEL-90255, RHEL-99199, RHEL-99208</changelog>
</package>
<package pkgid="6e118651c7cff3a2eb8ba6e749a53eb5545be0ab8cbebd6b2a642aebd3536cfe" name="libfaketime" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.10-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Pablo Greco &lt;pgreco@centosproject.org&gt; - 0.9.10-4" date="1676980800">- Also disable i686 in rhel&gt;=10 (ELN failures)</changelog>
  <changelog author="Pablo Greco &lt;pgreco@centosproject.org&gt; - 0.9.10-5" date="1677067200">- Fix tests in ELN builds (yselkowitz)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.10-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Wouters &lt;paul.wouters@aiven.io&gt; - 0.9.10-7" date="1704888000">- Fix for building for riscv64</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.10-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.10-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.10-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.10-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="85db56b022bfb0a2fe8a0086f0d7e0670cb36777609cc226a1e85b0d6594c803" name="libfastjson" arch="x86_64">
  <version epoch="0" ver="1.2304.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.99.9-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 1.2304.0-1" date="1684238400">- Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
Resolves: rhbz#2183193
- Address CVE-2020-12762
Resolves: rhbz#2203170</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2304.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2304.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2304.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2304.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2304.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5604032a6c61a6111669dc3f92ff5a87d06ec19a2f2ed6a7f6a5e69107f2342a" name="libfastjson-devel" arch="x86_64">
  <version epoch="0" ver="1.2304.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.99.9-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 1.2304.0-1" date="1684238400">- Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
Resolves: rhbz#2183193
- Address CVE-2020-12762
Resolves: rhbz#2203170</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2304.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2304.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2304.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2304.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2304.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3a248a77cc7be83eefcafbd565d4483d71909235cb091ee1fee8ae3df65ccaa6" name="libfdisk" arch="x86_64">
  <version epoch="0" ver="2.40.2" rel="18.el10"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-9" date="1736856000">- more(1): make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-10" date="1739448000">- blkid: allow up to 64k erofs block sizes</changelog>
  <changelog author="Frank Liang &lt;xiliang@redhat.com&gt; - 2.40.2-11" date="1745064000">- agetty: fix stdin conversion to tty name</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-12" date="1753790400">- coresched: backport new tool to RHEL-10</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-13" date="1753876800">- lscpu: update table with ARM IDs</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-14" date="1759147200">- lscpu: Add NVIDIA Olympus arm64 core
- libfdisk: improve collision reporting
- libfdisk: (dos) ignore incomplete EBR for non-wholedisk
- wall: always use utmp as fallback</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-15" date="1761220800">- mount: improve --all documentation
- libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
- libblkid: use snprintf() instead of sprintf()</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-16" date="1763553600">- libfdisk: fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-17" date="1765800000">- Fix heap buffer overread in setpwnam() [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-18" date="1768478400">- use sysuser setting for uuidd</changelog>
</package>
<package pkgid="75481f872ec16b67be7b5f8ce912b46684f3bcf075456bcc18e6aa475c453a5a" name="libfdisk-devel" arch="x86_64">
  <version epoch="0" ver="2.40.2" rel="18.el10"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-9" date="1736856000">- more(1): make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-10" date="1739448000">- blkid: allow up to 64k erofs block sizes</changelog>
  <changelog author="Frank Liang &lt;xiliang@redhat.com&gt; - 2.40.2-11" date="1745064000">- agetty: fix stdin conversion to tty name</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-12" date="1753790400">- coresched: backport new tool to RHEL-10</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-13" date="1753876800">- lscpu: update table with ARM IDs</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-14" date="1759147200">- lscpu: Add NVIDIA Olympus arm64 core
- libfdisk: improve collision reporting
- libfdisk: (dos) ignore incomplete EBR for non-wholedisk
- wall: always use utmp as fallback</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-15" date="1761220800">- mount: improve --all documentation
- libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
- libblkid: use snprintf() instead of sprintf()</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-16" date="1763553600">- libfdisk: fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-17" date="1765800000">- Fix heap buffer overread in setpwnam() [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-18" date="1768478400">- use sysuser setting for uuidd</changelog>
</package>
<package pkgid="17cb575506d4d6b167717223bc05df05c18697a80b5c95c6d61eca962a92c6ae" name="libfdt" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="12.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.7.0-3" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.7.0-5" date="1695816000">- Don't install a Python .egg</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.7.0-8" date="1716811200">- dtc-Properly-harden-built-packages.patch [RHEL-33493]
- Resolves: RHEL-33493
  (Annocheck FAIL: bind-now (dtc))</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.7.0-10" date="1719576000">- Fix missing dynamic tags for aarch64 python3 pylibfdt
- Resolves: RHEL-33493
  (Annocheck FAIL: bind-now (dtc))</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.7.0-12" date="1731412800">- dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
- dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
- Resolves: RHEL-64318
  ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
- Resolves: RHEL-65448
  ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)</changelog>
</package>
<package pkgid="53a36d7e5e40e9315fc53813042b574b3148bf11c455a29d4a8457b4541f56ab" name="libfdt-devel" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="12.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.7.0-3" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.7.0-5" date="1695816000">- Don't install a Python .egg</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.7.0-8" date="1716811200">- dtc-Properly-harden-built-packages.patch [RHEL-33493]
- Resolves: RHEL-33493
  (Annocheck FAIL: bind-now (dtc))</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.7.0-10" date="1719576000">- Fix missing dynamic tags for aarch64 python3 pylibfdt
- Resolves: RHEL-33493
  (Annocheck FAIL: bind-now (dtc))</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.7.0-12" date="1731412800">- dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
- dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
- Resolves: RHEL-64318
  ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
- Resolves: RHEL-65448
  ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)</changelog>
</package>
<package pkgid="4474a4d5fae897736d6b34a27da36b6bcaa9d1943e1bd04b6a42225b90af7d23" name="libfdt-static" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="12.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.7.0-3" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.7.0-5" date="1695816000">- Don't install a Python .egg</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.7.0-8" date="1716811200">- dtc-Properly-harden-built-packages.patch [RHEL-33493]
- Resolves: RHEL-33493
  (Annocheck FAIL: bind-now (dtc))</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.7.0-10" date="1719576000">- Fix missing dynamic tags for aarch64 python3 pylibfdt
- Resolves: RHEL-33493
  (Annocheck FAIL: bind-now (dtc))</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.7.0-12" date="1731412800">- dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
- dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
- Resolves: RHEL-64318
  ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
- Resolves: RHEL-65448
  ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)</changelog>
</package>
<package pkgid="5c4b928aca868c444edc206a16a94160e2201d031a4b996ba81445009ffb5497" name="libffi" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="10.el10"/>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 3.4.4-3" date="1683028800">- Enable static trampolines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 3.4.4-5" date="1704196800">- Add missing declaration of open_temp_exec_file</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.4-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.4-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 3.4.4-10" date="1743768000">- Fix riscv64 build
  Resolves: RHEL-86095</changelog>
</package>
<package pkgid="f6ff8a626dbdd3dd6b5b41f2eaada9a0399459ec0841691bd9e73c8c1b260845" name="libffi-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="10.el10"/>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 3.4.4-3" date="1683028800">- Enable static trampolines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 3.4.4-5" date="1704196800">- Add missing declaration of open_temp_exec_file</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.4-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.4-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 3.4.4-10" date="1743768000">- Fix riscv64 build
  Resolves: RHEL-86095</changelog>
</package>
<package pkgid="8cf917862ed3d650d2561d817ee1a0901b0796f5951de1bdd060a300d25d65d3" name="libfido2" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="7.el10"/>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 1.13.0-1" date="1676980800">- Update to 1.13.0 release ( resolves: rhbz#2172297 )
- Perform some deglobing of files per packaging guidelines</changelog>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 1.13.0-2" date="1678190400">- Rebuilt for libcbor 0.10.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 1.14.0-1" date="1699876800">- Update to 1.14.0 release ( resolves: rhbz#2249531 )</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 1.14.0-4" date="1707134400">- Rebuilt for libcbor 0.11.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.14.0-6" date="1729684800">- Fix memory leak in credman
  Resolves: RHEL-35253</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8696e827969f95a85916aa7f8100f7e26c6b79da6bf8c700000a260487291e91" name="libfido2-devel" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="7.el10"/>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 1.13.0-1" date="1676980800">- Update to 1.13.0 release ( resolves: rhbz#2172297 )
- Perform some deglobing of files per packaging guidelines</changelog>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 1.13.0-2" date="1678190400">- Rebuilt for libcbor 0.10.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 1.14.0-1" date="1699876800">- Update to 1.14.0 release ( resolves: rhbz#2249531 )</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Gary Buhrmaster &lt;gary.buhrmaster@gmail.com&gt; - 1.14.0-4" date="1707134400">- Rebuilt for libcbor 0.11.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.14.0-6" date="1729684800">- Fix memory leak in credman
  Resolves: RHEL-35253</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="60dce026180c9df8189d8b66692df80bc23ecb93c86e5a8192a09ea98334f618" name="libfl-devel" arch="x86_64">
  <version epoch="0" ver="2.6.4" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-13" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.6.4-14" date="1698667200">- Analyse flex sources for license information
- Migrate License field to SPDX identifiers for
  https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
  (#2222083)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-15" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.6.4-18" date="1719316800">- Provide flex-doc via the main flex package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b9f40cbc1ebd331a30b8272a7a4cd980f79d2399c25d282dba2f5da911a08d04" name="libfl-static" arch="x86_64">
  <version epoch="0" ver="2.6.4" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-13" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.6.4-14" date="1698667200">- Analyse flex sources for license information
- Migrate License field to SPDX identifiers for
  https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
  (#2222083)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-15" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.6.4-18" date="1719316800">- Provide flex-doc via the main flex package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fd19bebad3bd77bff4f3d39cf63c47cadd6b04919bf76d367dc863dd29ed3cb3" name="libfl2" arch="x86_64">
  <version epoch="0" ver="2.6.4" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-13" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.6.4-14" date="1698667200">- Analyse flex sources for license information
- Migrate License field to SPDX identifiers for
  https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
  (#2222083)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-15" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.6.4-18" date="1719316800">- Provide flex-doc via the main flex package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.6.4-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6233bf7c0397f6e18e242b0f74b562e6870f8cc3aded440ab1f6409192573bf6" name="libfoma" arch="x86_64">
  <version epoch="0" ver="0.10.0" rel="0.13.20210601gitdfe1ccb.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.0-0.5.20210601gitdfe1ccb" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.0-0.6.20210601gitdfe1ccb" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT fedoraproject DOT org&gt; - 0.10.0-0.7.20210601gitdfe1ccb" date="1692619200">- Migrate to SPDX license expression</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.10.0-0.8.20210601gitdfe1ccb" date="1704369600">- Fix C compatibility issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.0-0.9.20210601gitdfe1ccb" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.0-0.10.20210601gitdfe1ccb" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.10.0-0.11.20210601gitdfe1ccb" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.10.0-0.12.20210601gitdfe1ccb" date="1720699200">- Resolves: RHELMISC-6017 Add patch to avoid using deprecated inet_* functions.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.10.0-0.13.20210601gitdfe1ccb" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d6fe6d412c80faa7cae99c229e493f9f96930253308b77400ebf4fa7d893327a" name="libfoma-devel" arch="x86_64">
  <version epoch="0" ver="0.10.0" rel="0.13.20210601gitdfe1ccb.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.0-0.5.20210601gitdfe1ccb" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.0-0.6.20210601gitdfe1ccb" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT fedoraproject DOT org&gt; - 0.10.0-0.7.20210601gitdfe1ccb" date="1692619200">- Migrate to SPDX license expression</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.10.0-0.8.20210601gitdfe1ccb" date="1704369600">- Fix C compatibility issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.0-0.9.20210601gitdfe1ccb" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.0-0.10.20210601gitdfe1ccb" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.10.0-0.11.20210601gitdfe1ccb" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.10.0-0.12.20210601gitdfe1ccb" date="1720699200">- Resolves: RHELMISC-6017 Add patch to avoid using deprecated inet_* functions.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.10.0-0.13.20210601gitdfe1ccb" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e8e699766e7e44552ed5b6e79bea373bf8c305dc97da7afd9c550df7a4400245" name="libfontenc" arch="x86_64">
  <version epoch="0" ver="1.1.7" rel="5.el10"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.1.6-1" date="1667563200">- libfontenc 1.1.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.6-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.6-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.7-1" date="1696507200">- libfontenc 1.1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.7-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.7-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.7-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.7-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9993bb0276b5f6ff43456f582d11f451212e55430daea07354d886df20235556" name="libfontenc-devel" arch="x86_64">
  <version epoch="0" ver="1.1.7" rel="5.el10"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.1.6-1" date="1667563200">- libfontenc 1.1.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.6-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.6-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.7-1" date="1696507200">- libfontenc 1.1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.7-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.7-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.7-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.7-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="99bdfc7f8a86c6987ea6b9dae9af05c3be8fa11bb6dcf5323b73ee70cc92a20e" name="libfprint" arch="x86_64">
  <version epoch="0" ver="1.94.9" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.94.5-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.94.5-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.6-1" date="1706702400">- Update to 1.94.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.94.6-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.94.6-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.8-1" date="1732104000">- Update to upstream release 1.94.8</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.8-2" date="1739966400">- Add PID 0x107 and 0x108 for the Synaptics fingerprint sensor</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.9-1" date="1743163200">- Update to upstream version 1.94.9</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.9-2" date="1764763200">- Fix the goodixmoc crash in exiting callback</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.9-3" date="1768392000">- Goodixmoc: Fix use-after-free when receive an incorrect CRC</changelog>
</package>
<package pkgid="5b45cffb8e3cc64aedbce94d6df5def9f4e699053df9f1af095ecc7660baf9a3" name="libfprint-devel" arch="x86_64">
  <version epoch="0" ver="1.94.9" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.94.5-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.94.5-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.6-1" date="1706702400">- Update to 1.94.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.94.6-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.94.6-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.8-1" date="1732104000">- Update to upstream release 1.94.8</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.8-2" date="1739966400">- Add PID 0x107 and 0x108 for the Synaptics fingerprint sensor</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.9-1" date="1743163200">- Update to upstream version 1.94.9</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.9-2" date="1764763200">- Fix the goodixmoc crash in exiting callback</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.9-3" date="1768392000">- Goodixmoc: Fix use-after-free when receive an incorrect CRC</changelog>
</package>
<package pkgid="4ad78ca23e87bcb421abc27ebd2402f10fa20c09502635877012b64871c2d5b2" name="libfprint-tests" arch="x86_64">
  <version epoch="0" ver="1.94.9" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.94.5-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.94.5-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.6-1" date="1706702400">- Update to 1.94.6</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.94.6-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.94.6-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.8-1" date="1732104000">- Update to upstream release 1.94.8</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.8-2" date="1739966400">- Add PID 0x107 and 0x108 for the Synaptics fingerprint sensor</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.9-1" date="1743163200">- Update to upstream version 1.94.9</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.9-2" date="1764763200">- Fix the goodixmoc crash in exiting callback</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.94.9-3" date="1768392000">- Goodixmoc: Fix use-after-free when receive an incorrect CRC</changelog>
</package>
<package pkgid="f4426b56cb3d3d8e4d3f02dbaed6d2809110cc7e1e5b063018310bdb05e8c8b5" name="libgcab1" arch="x86_64">
  <version epoch="0" ver="1.6" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.6-1" date="1688990400">- new version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.6-3" date="1690977600">- Add MinGW packages.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7587a49c954ea8c8b78ba031c35e4bf553aa513bcf15af2163b7eecf999ea11f" name="libgcab1-devel" arch="x86_64">
  <version epoch="0" ver="1.6" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.6-1" date="1688990400">- new version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.6-3" date="1690977600">- Add MinGW packages.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6f484aebcfe08bc0218c800019e74b79b326d654a0207fd7f5862583e8aed399" name="libgcc" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="564012070b7714df2d4e729a45263548ef6aaedbba118f36591d0a354e4cdabf" name="libgccjit" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="b34e065f3d5122c31e485a2308c5008c6893c922d6212699764946f59e6d98da" name="libgccjit-devel" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="a8ae3976d24de6e99cd0ccc1be9747f0ebe66891f1552e9a1ea64bd9e40fa940" name="libgcrypt" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.3-1" date="1699963200">- New upstream release (#2249639)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.3-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.3-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.11.0-1" date="1720008000">- New upstream release (#2293064)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.11.0-2" date="1721908800">- Clean up flags to pass rpminspect checks
- Fix memory leaks reported by static analysis</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.11.0-3" date="1721995200">- Add CF protection on x86_64</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.11.0-4" date="1729166400">- Fix remaining protection flags on shared object for Aarch64
- Fix CVE-2024-2236 (RHEL-58736)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="82298e15c404ff7da4fdbe8f607be22f50bacb5c60e299a391bf81f4fe26cf0e" name="libgcrypt" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="7.el10_2"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.11.0-1" date="1720008000">- New upstream release (#2293064)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.11.0-2" date="1721908800">- Clean up flags to pass rpminspect checks
- Fix memory leaks reported by static analysis</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.11.0-3" date="1721995200">- Add CF protection on x86_64</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.11.0-4" date="1729166400">- Fix remaining protection flags on shared object for Aarch64
- Fix CVE-2024-2236 (RHEL-58736)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1.11.0-6" date="1745928000">- Disable annocheck on riscv64 (fixes build)
  Resolves: RHEL-88837</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.11.0-7" date="1782475200">- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext</changelog>
</package>
<package pkgid="279d2a58572250199c153b792953e6b0e1b854670e3349bb31609c4c49ec1fe1" name="libgcrypt-devel" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.10.3-1" date="1699963200">- New upstream release (#2249639)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.3-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.3-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.11.0-1" date="1720008000">- New upstream release (#2293064)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.11.0-2" date="1721908800">- Clean up flags to pass rpminspect checks
- Fix memory leaks reported by static analysis</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.11.0-3" date="1721995200">- Add CF protection on x86_64</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.11.0-4" date="1729166400">- Fix remaining protection flags on shared object for Aarch64
- Fix CVE-2024-2236 (RHEL-58736)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1fe5d418877783f407ef32d42a1081b148d3c96d9e908018491aee8b863a6623" name="libgcrypt-devel" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="7.el10_2"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.11.0-1" date="1720008000">- New upstream release (#2293064)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.11.0-2" date="1721908800">- Clean up flags to pass rpminspect checks
- Fix memory leaks reported by static analysis</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.11.0-3" date="1721995200">- Add CF protection on x86_64</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.11.0-4" date="1729166400">- Fix remaining protection flags on shared object for Aarch64
- Fix CVE-2024-2236 (RHEL-58736)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 1.11.0-6" date="1745928000">- Disable annocheck on riscv64 (fixes build)
  Resolves: RHEL-88837</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.11.0-7" date="1782475200">- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext</changelog>
</package>
<package pkgid="ace2e29a0d5eb7b04afe484a6ae9b072d526f4f23b5b06fc41e2b78af53c501f" name="libgee" arch="x86_64">
  <version epoch="0" ver="0.20.6" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.6-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.6-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.6-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.20.6-5" date="1705838401">- Trigger Vala compilation during build, for GCC 14 compatibility</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.6-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20.6-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20.6-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="68164dca51555859a442fd1c28fffa188edd15ea2e31553edb17584247c0ed25" name="libgee-devel" arch="x86_64">
  <version epoch="0" ver="0.20.6" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.6-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.6-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.6-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.20.6-5" date="1705838401">- Trigger Vala compilation during build, for GCC 14 compatibility</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.6-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20.6-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20.6-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f4b788b850b23c38910bda34695346deab30aa2b1f6582f94f70414132d15998" name="libgexiv2" arch="x86_64">
  <version epoch="0" ver="0.14.3" rel="3.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 0.14.1-2" date="1686830400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.14.2-1" date="1690200000">- Update to 0.14.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.14.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.14.2-5" date="1720526400">- Drop the python3 sub-package
Resolves: RHEL-45529</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.14.3-1" date="1720526401">- Update to 0.14.3
Resolves: RHEL-46522</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.14.3-2" date="1722945600">- Rebuild (exiv2)
Resolves: RHEL-52972</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.14.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9925b8c2a94e4b53cc72acdb38441d65a10d5dc05dcdaeedcc820ee121439b05" name="libgexiv2-devel" arch="x86_64">
  <version epoch="0" ver="0.14.3" rel="3.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 0.14.1-2" date="1686830400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.14.2-1" date="1690200000">- Update to 0.14.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.14.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.14.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.14.2-5" date="1720526400">- Drop the python3 sub-package
Resolves: RHEL-45529</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.14.3-1" date="1720526401">- Update to 0.14.3
Resolves: RHEL-46522</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.14.3-2" date="1722945600">- Rebuild (exiv2)
Resolves: RHEL-52972</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.14.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="55dfde94dc1a1012da43c71b916693d31a723dee85febca2ef9d63932197f3a5" name="libgfortran" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="525cb3cb90bf5e912d8edc148103133d33e11079d0255d18a48f04e94e13635e" name="libgfortran-static" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="7bdbb9a9294bb8ebbac41ea3428e35dc6f473ffd189051b4dce36c0ebba7a1f9" name="libgit2" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="5.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.7.1-1" date="1692014400">- Update to 1.7.1</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.7.1-2" date="1692273600">- Use krb5 GSSAPI</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.7.1-5" date="1707307200">- Skip 'pack' tests on F40+</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.7.2-1" date="1707307201">- Update to 1.7.2</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.7.2-2" date="1714132800">- Replace http-parser with llhttp</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 1.7.2-4" date="1729512000">- Rebuild due to updated llhttp</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="a5e3b5d76b025795bd4200ede1bb42803a7963dd9a743dac910558a2e2562494" name="libgit2-devel" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="5.el10"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.7.1-1" date="1692014400">- Update to 1.7.1</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.7.1-2" date="1692273600">- Use krb5 GSSAPI</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.7.1-5" date="1707307200">- Skip 'pack' tests on F40+</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.7.2-1" date="1707307201">- Update to 1.7.2</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.7.2-2" date="1714132800">- Replace http-parser with llhttp</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 1.7.2-4" date="1729512000">- Rebuild due to updated llhttp</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="7348ef87eadae994dd44debd1b36c65a51e98290da6654d44bba89e38cbd1378" name="libglvnd" arch="x86_64">
  <version epoch="1" ver="1.7.0" rel="7.el10"/>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 1:1.6.0-1" date="1669118400">- Update to 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 1:1.7.0-1" date="1694692800">- Update to 1.7.0</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1:1.7.0-2" date="1694779200">- SPDX license update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.7.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1:1.7.0-6" date="1723032000">- Move away from xvfb-run</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.7.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8a04d4cee0669f0546f8bbac4139e25a75044a0ca76b72f3863b073b3bf1fbf6" name="libglvnd-core-devel" arch="x86_64">
  <version epoch="1" ver="1.7.0" rel="7.el10"/>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 1:1.6.0-1" date="1669118400">- Update to 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 1:1.7.0-1" date="1694692800">- Update to 1.7.0</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1:1.7.0-2" date="1694779200">- SPDX license update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.7.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1:1.7.0-6" date="1723032000">- Move away from xvfb-run</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.7.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c08ccaabe00d0539ba15c8240509b523d01520e6edd30d075079008012a6e519" name="libglvnd-devel" arch="x86_64">
  <version epoch="1" ver="1.7.0" rel="7.el10"/>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 1:1.6.0-1" date="1669118400">- Update to 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 1:1.7.0-1" date="1694692800">- Update to 1.7.0</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1:1.7.0-2" date="1694779200">- SPDX license update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.7.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1:1.7.0-6" date="1723032000">- Move away from xvfb-run</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.7.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e47bb1e9804aa6af616fb60f1885297c82ab5fae02ea43fb26213f041273c530" name="libglvnd-egl" arch="x86_64">
  <version epoch="1" ver="1.7.0" rel="7.el10"/>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 1:1.6.0-1" date="1669118400">- Update to 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 1:1.7.0-1" date="1694692800">- Update to 1.7.0</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1:1.7.0-2" date="1694779200">- SPDX license update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.7.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1:1.7.0-6" date="1723032000">- Move away from xvfb-run</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.7.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7d2455617f2ae43b6d2c56ec610e333ea83db387cdb8dec78be552a40a64331d" name="libglvnd-gles" arch="x86_64">
  <version epoch="1" ver="1.7.0" rel="7.el10"/>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 1:1.6.0-1" date="1669118400">- Update to 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 1:1.7.0-1" date="1694692800">- Update to 1.7.0</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1:1.7.0-2" date="1694779200">- SPDX license update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.7.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1:1.7.0-6" date="1723032000">- Move away from xvfb-run</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.7.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="13e0249e24a7818d2552d4568ab250d8f8af8783bc06ab11af355e04e1ecbe81" name="libglvnd-glx" arch="x86_64">
  <version epoch="1" ver="1.7.0" rel="7.el10"/>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 1:1.6.0-1" date="1669118400">- Update to 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 1:1.7.0-1" date="1694692800">- Update to 1.7.0</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1:1.7.0-2" date="1694779200">- SPDX license update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.7.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1:1.7.0-6" date="1723032000">- Move away from xvfb-run</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.7.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7af7d573a57f20b40e97a8798fa63b6889466bdbede773b4c7f3fd7f687b0338" name="libglvnd-opengl" arch="x86_64">
  <version epoch="1" ver="1.7.0" rel="7.el10"/>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 1:1.6.0-1" date="1669118400">- Update to 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 1:1.7.0-1" date="1694692800">- Update to 1.7.0</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1:1.7.0-2" date="1694779200">- SPDX license update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.7.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1:1.7.0-6" date="1723032000">- Move away from xvfb-run</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.7.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="be132413d8a8105e69ef165cbb71075a9af050c09c498c510ba7f9fa94b9d8cf" name="libgomp" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="15683daefcd3213763538293b6f17afcca611964a33ed5bf6911c1582d585852" name="libgomp-offload-amdgcn" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="db7d6b1e832b0690b75048d56a233067c8f84c14deed0f0b97f93f4aaefb1aa1" name="libgomp-offload-nvptx" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="0e4465203825954d485ec128a55a7be33678ac72fa3d84c475ae01b86ec1f69f" name="libgpg-error" arch="x86_64">
  <version epoch="0" ver="1.50" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.46-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.47-1" date="1681214400">- New upstream release (#2184969)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.50-1" date="1719921600">- New upstream release (#2293052)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.50-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a86c9ccc489e51fd1d2caa22cc8ecab66d6ab23804d8f1ff4da2a6b4844ea0a1" name="libgpg-error-devel" arch="x86_64">
  <version epoch="0" ver="1.50" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.46-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.47-1" date="1681214400">- New upstream release (#2184969)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.50-1" date="1719921600">- New upstream release (#2293052)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.50-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fd4de4fafa8c5962cb7687b51a4ad701e8bf1ad4eac96268202315260c7a7390" name="libgphoto2" arch="x86_64">
  <version epoch="0" ver="2.5.30" rel="10.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.30-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.30-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2.5.30-10" date="1769515200">- fix bluetooth issue with libmtp (RHEL-141270)</changelog>
</package>
<package pkgid="6f71180f93ce7eb6befb338946448c302c1bd799c6f333d013eee00ba370cdf9" name="libgphoto2-devel" arch="x86_64">
  <version epoch="0" ver="2.5.30" rel="10.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.30-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.30-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2.5.30-10" date="1769515200">- fix bluetooth issue with libmtp (RHEL-141270)</changelog>
</package>
<package pkgid="98296dfcb10eee14209320a6b9125c3a7f5b56b228c9cfbabf7835789c33f569" name="libgpiod" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.0.1-5" date="1690459200">- migrated to SPDX license</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.0.2-1" date="1692964800">- Update to 2.02</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.1-1" date="1699012800">- Update to 2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-4" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2.1.3-1" date="1722513600">- Update to 2.1.3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8a05bcf1202a4c1c09180715748add46c32649e1609e852f2d75737997d0da6b" name="libgpiod-c++" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.0.1-5" date="1690459200">- migrated to SPDX license</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.0.2-1" date="1692964800">- Update to 2.02</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.1-1" date="1699012800">- Update to 2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-4" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2.1.3-1" date="1722513600">- Update to 2.1.3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1c5331fda886b06b18038844c3b8b2e4ca9993a5872ac430cddd9a475bf691df" name="libgpiod-devel" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.0.1-5" date="1690459200">- migrated to SPDX license</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.0.2-1" date="1692964800">- Update to 2.02</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.1-1" date="1699012800">- Update to 2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-4" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2.1.3-1" date="1722513600">- Update to 2.1.3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="32dde389f3aae1f98c66325215e35d5e36cb0fdcf88876b1b98738581a4fe4f5" name="libgpiod-utils" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.0.1-5" date="1690459200">- migrated to SPDX license</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.0.2-1" date="1692964800">- Update to 2.02</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.1-1" date="1699012800">- Update to 2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-4" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 2.1.3-1" date="1722513600">- Update to 2.1.3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="14e42def6c713f54bd548ca9760c2dd068f4255da1f09c4963b61850d11044e4" name="libgs" arch="x86_64">
  <version epoch="0" ver="10.02.1" rel="16.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.02.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-9" date="1718884800">- RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-10" date="1718971200">- RHEL-38835 run the package with correct tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.02.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-12" date="1720699200">- RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-12" date="1721131200">- RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
- RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
- RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
- RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
- RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-13" date="1721217600">- RHEL-46575 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.02.1-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-15" date="1744718400">- RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
- RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
- RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
- RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
- RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-16" date="1746619200">- RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow</changelog>
</package>
<package pkgid="bc7e5fdc6a92b48eeb54d5f12be8efaf5a65e9767adb580e3a10f7c5c1672258" name="libgs-devel" arch="x86_64">
  <version epoch="0" ver="10.02.1" rel="16.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.02.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-9" date="1718884800">- RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-10" date="1718971200">- RHEL-38835 run the package with correct tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.02.1-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-12" date="1720699200">- RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-12" date="1721131200">- RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
- RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
- RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
- RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
- RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-13" date="1721217600">- RHEL-46575 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.02.1-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-15" date="1744718400">- RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
- RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
- RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
- RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
- RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.02.1-16" date="1746619200">- RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow</changelog>
</package>
<package pkgid="cd5e72798eafe60159a5e9ea9026f8f2aa47dd3b1be5a5d5fafc2dd9ec01f425" name="libgsf" arch="x86_64">
  <version epoch="0" ver="1.14.53" rel="2.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.14.50-2" date="1682596800">- Port configure script to C99</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.50-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.14.50-4" date="1690977600">- Add MinGW packages</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 1.14.51-1" date="1700136000">- New upstream release 1.14.51
- Resolves: rhbz#2214335 rhbz#2249742 rhbz#2249979</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.14.51-2" date="1701345600">- Fix building against libxml 2.12.0
- Use pkgconfig for BuildRequires</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.51-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.51-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.51-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.51-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 1.14.53-2" date="1732104000">- Synchronize to packaging changes in Fedora 40:
  Resolves: RHEL-66920</changelog>
</package>
<package pkgid="142913d2e51e58f7b1a3bf93df07059ffd598f09ce92aec546796ed5dba6bf49" name="libgsf-devel" arch="x86_64">
  <version epoch="0" ver="1.14.53" rel="2.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.14.50-2" date="1682596800">- Port configure script to C99</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.50-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.14.50-4" date="1690977600">- Add MinGW packages</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 1.14.51-1" date="1700136000">- New upstream release 1.14.51
- Resolves: rhbz#2214335 rhbz#2249742 rhbz#2249979</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.14.51-2" date="1701345600">- Fix building against libxml 2.12.0
- Use pkgconfig for BuildRequires</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.51-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.51-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.51-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.51-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 1.14.53-2" date="1732104000">- Synchronize to packaging changes in Fedora 40:
  Resolves: RHEL-66920</changelog>
</package>
<package pkgid="fe85375e2cd59a8018ee94ffbb60bd3219237213de4e11f22185ebd0d0983ff3" name="libgtop2" arch="x86_64">
  <version epoch="0" ver="2.41.2" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.40.0-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.41.1-1" date="1675857600">- Update to 2.41.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.41.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.41.2-1" date="1697889600">- Update to 2.41.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.41.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.41.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.41.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.41.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1569d96eb05c718fb1882a95cd20a7333ef970c0854504b83864a7aa96baa0f4" name="libgtop2-devel" arch="x86_64">
  <version epoch="0" ver="2.41.2" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.40.0-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.41.1-1" date="1675857600">- Update to 2.41.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.41.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.41.2-1" date="1697889600">- Update to 2.41.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.41.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.41.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.41.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.41.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fffe5aba5c1bb7d031e8bafd9784ae1617b0187ed4ef678c4c85098d90f1412e" name="libgudev" arch="x86_64">
  <version epoch="0" ver="238" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 237-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 238-1" date="1688472000">- Update to 238</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 238-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 238-3" date="1690977600">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 238-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 238-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 238-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 238-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="01a57dc2b10b441d031e9cea81dab4273ae5558f8fe7a8ceef4bdebfc7bd6bd8" name="libgudev-devel" arch="x86_64">
  <version epoch="0" ver="238" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 237-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 238-1" date="1688472000">- Update to 238</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 238-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 238-3" date="1690977600">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 238-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 238-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 238-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 238-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c0ad68d2078894f8fa8904a0d2fd6e3c0983507a84d14d0f6fd7938ef3aca36e" name="libguestfs" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="5.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-4" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
</package>
<package pkgid="ec4d4d4e9e840ec9cccb74530f4d491012f2d74a766a2f1b737f1e705ba10339" name="libguestfs" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="6.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
</package>
<package pkgid="37513dbf93f8e897da571908d57e81e4a10cf5b86ac7666cd8620ff298be7a63" name="libguestfs" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="8.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
</package>
<package pkgid="f059c4704ae8cf1382190f49dd0eb12e613c6d122135d62b016b194704324124" name="libguestfs" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="9.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-9" date="1786622400">- Add setfiles optional excludes parameter to libguestfs
  resolves: RHEL-239808</changelog>
</package>
<package pkgid="a9222cc2b30dfe4f900d2cc549a2e794279041b3a31e2f6b0c42a8b17dd384a3" name="libguestfs-appliance" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="5.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-4" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
</package>
<package pkgid="282aa5aabfab04613c7039cd475eb333c29a70efbcb155caae78afbc39da8c5b" name="libguestfs-appliance" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="6.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
</package>
<package pkgid="d0aeff307e2bc8af7deb081ae09ebd0f2b3a3c10c288368ae3ea26ac947d421e" name="libguestfs-appliance" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="8.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
</package>
<package pkgid="91b65d45adbc01bd42a40325690f4b1d84974bf2cb59dffd13fbd2acbd2c5bc7" name="libguestfs-appliance" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="9.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-9" date="1786622400">- Add setfiles optional excludes parameter to libguestfs
  resolves: RHEL-239808</changelog>
</package>
<package pkgid="c269b2daa8a50faced8cb14a8e82fe252b924e7d3c9ed771524d89092aa67c00" name="libguestfs-bash-completion" arch="noarch">
  <version epoch="1" ver="1.58.1" rel="5.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-4" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
</package>
<package pkgid="97f6f69e18670d01c18b68fadce840d9de056a1b6da5442c83e6722b30a09ba6" name="libguestfs-bash-completion" arch="noarch">
  <version epoch="1" ver="1.58.1" rel="6.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
</package>
<package pkgid="8f5b7586f063f41beeb617f22f4e815d41090faf52dcc47d9879b1839e7c6da8" name="libguestfs-bash-completion" arch="noarch">
  <version epoch="1" ver="1.58.1" rel="8.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
</package>
<package pkgid="4a4b636cc0699cae97dbe90b5ad8ebdefb949ba69e4e5a68a04ecf5687e88288" name="libguestfs-bash-completion" arch="noarch">
  <version epoch="1" ver="1.58.1" rel="9.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-9" date="1786622400">- Add setfiles optional excludes parameter to libguestfs
  resolves: RHEL-239808</changelog>
</package>
<package pkgid="404e6513fa0703b06e19d9ed0b8c4fb9824d149d2294f90d0eefa886e054b3e1" name="libguestfs-devel" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="5.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-4" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
</package>
<package pkgid="6279a17b4c87b8166ab8a7403afdaadd5537e3a9758a515e124a56f2207d21c7" name="libguestfs-devel" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="6.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
</package>
<package pkgid="8e96e1edcf76337135e57c5b1d8a653a8bea70ec1fbd51e54d1e1faab88f9784" name="libguestfs-devel" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="8.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
</package>
<package pkgid="0485ccc46f7704ff0cb2e6b7b912f959f0cda99b3b180855b40d18fc9950da83" name="libguestfs-devel" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="9.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-9" date="1786622400">- Add setfiles optional excludes parameter to libguestfs
  resolves: RHEL-239808</changelog>
</package>
<package pkgid="c75993793ca7113a5ab3404ec1d77ed86cb3d288dbb0a056b70e4fdd98cab5d9" name="libguestfs-fssupport" arch="x86_64">
  <version epoch="0" ver="10.2" rel="2.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.0-1" date="1747310400">- Initial commit on c10s
  Resolves: RHEL-92064</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.1-1" date="1749124800">- Add null gating test.
  resolves: RHELPLAN-172214</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.1-2" date="1749211200">- Add provides of bundled things for prodsec.
  resolves: RHELPLAN-172218</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.1-3" date="1750075200">- Conflict if higher versioned kernel is also installed
  resolves: RHEL-96979</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.2-1" date="1764072000">- Rebuild against current RHEL 10.2 kernel
  resolves: RHEL-130682</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.2-2" date="1769774400">- Remove the kmod
  resolves: RHEL-145297</changelog>
</package>
<package pkgid="e0838a50121edbe223f8a415cfec22d26f5cfeb34bc9bb8d1d31a0699cbb0549" name="libguestfs-inspect-icons" arch="noarch">
  <version epoch="1" ver="1.58.1" rel="5.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-4" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
</package>
<package pkgid="f28a9c7d057e6b7d34fd67fc47bf4cf41141aa74dae4108fc6715af971823832" name="libguestfs-inspect-icons" arch="noarch">
  <version epoch="1" ver="1.58.1" rel="6.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
</package>
<package pkgid="3758aafdc0015a99948f92416e06c01ae1bb13a2bf1cbc638fca3bf19b954a3f" name="libguestfs-inspect-icons" arch="noarch">
  <version epoch="1" ver="1.58.1" rel="8.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
</package>
<package pkgid="d5f97c12ae413ac6b1767c50132182c0ae26463359f6a651d3918db25713334a" name="libguestfs-inspect-icons" arch="noarch">
  <version epoch="1" ver="1.58.1" rel="9.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-9" date="1786622400">- Add setfiles optional excludes parameter to libguestfs
  resolves: RHEL-239808</changelog>
</package>
<package pkgid="ce2f01fab7f6d39107dd1acec3dbf711c27412c8df0e84f70affded0c24091a1" name="libguestfs-man-pages-ja" arch="noarch">
  <version epoch="1" ver="1.58.1" rel="5.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-4" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
</package>
<package pkgid="aa76b3ef980a31e6faabb878595afed9661292140248f411c4a0bde57b1c30c5" name="libguestfs-man-pages-ja" arch="noarch">
  <version epoch="1" ver="1.58.1" rel="6.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
</package>
<package pkgid="7f458d5d2cdf4985218f99cdd71e0835ad5341d4207da933de8527389dd7625d" name="libguestfs-man-pages-ja" arch="noarch">
  <version epoch="1" ver="1.58.1" rel="8.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
</package>
<package pkgid="16b2de73286db63d6bdb9249915a31200bfc2558a1511d76def5953ca26bdc06" name="libguestfs-man-pages-ja" arch="noarch">
  <version epoch="1" ver="1.58.1" rel="9.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-9" date="1786622400">- Add setfiles optional excludes parameter to libguestfs
  resolves: RHEL-239808</changelog>
</package>
<package pkgid="bd63ded041db8b9748d2883e56e1b5dface7077b56d2e38c8daaf1790193954b" name="libguestfs-man-pages-uk" arch="noarch">
  <version epoch="1" ver="1.58.1" rel="5.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-4" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
</package>
<package pkgid="b2fd5e43baa7dde209f59d5972602b576f58c996e0a7eae1a84c8122a2ffb32d" name="libguestfs-man-pages-uk" arch="noarch">
  <version epoch="1" ver="1.58.1" rel="6.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
</package>
<package pkgid="2984a3576bb2fa3f0b0cc74526bdcaa82e3f948cacc8d79db22423b92008abec" name="libguestfs-man-pages-uk" arch="noarch">
  <version epoch="1" ver="1.58.1" rel="8.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
</package>
<package pkgid="80a75a6bde4033b437f8f1d861819548673de3cd3d388e7dc5b627aa3dcd9833" name="libguestfs-man-pages-uk" arch="noarch">
  <version epoch="1" ver="1.58.1" rel="9.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-9" date="1786622400">- Add setfiles optional excludes parameter to libguestfs
  resolves: RHEL-239808</changelog>
</package>
<package pkgid="7363adf8e2912c67b23d8e9b1a3e35a37eb5e0447d7fa9af77e445563f4f6da2" name="libguestfs-rescue" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="5.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-4" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
</package>
<package pkgid="09d85b56a07c5649f39b91ebe595861b20e14399193da011722a04a51e4e58b9" name="libguestfs-rescue" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="6.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
</package>
<package pkgid="f34562310e326a6fc088a36f49b26c4e907dab4a4b2add012a94176d3e85c1a8" name="libguestfs-rescue" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="8.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
</package>
<package pkgid="41d3fae23cce343b2e824aefc86af6c73ffad988643de49163f89c424ea0a050" name="libguestfs-rescue" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="9.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-9" date="1786622400">- Add setfiles optional excludes parameter to libguestfs
  resolves: RHEL-239808</changelog>
</package>
<package pkgid="59f761e76a166ec824b83ecbb881ac3126f7ee451100a4f803f03bff2743e6ed" name="libguestfs-rsync" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="5.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-4" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
</package>
<package pkgid="eeb3be98dd3bcef2ee7d94ea7b3e552d51af9eba1208f4acaf521f475507c6f1" name="libguestfs-rsync" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="6.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
</package>
<package pkgid="ebeb92c888ba16a04ffdad91ecbfa8deeaf4a79440e78b9851ae95866b0c3450" name="libguestfs-rsync" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="8.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
</package>
<package pkgid="f11d437205080897021598502d29fd4bc0fd87957f2604bde9aca68b9107add8" name="libguestfs-rsync" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="9.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-9" date="1786622400">- Add setfiles optional excludes parameter to libguestfs
  resolves: RHEL-239808</changelog>
</package>
<package pkgid="53372c0cd541d9e118106cf4598a22e21ccdd0c45426191c8bab3d845df358a2" name="libguestfs-winsupport" arch="x86_64">
  <version epoch="0" ver="10.0" rel="5.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 9.3-1" date="1693483200">- Rebase to ntfs-3g 2022.10.3
- Fixes: CVE-2022-40284
- resolves rhbz#2236376</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.0-2" date="1713787200">- Import package into CentOS Stream 10
- Remove resolves refs to work around check-gitbz bug (RHELBLD-14966)
- Add gating tests
- Set ExclusiveArch/ExcludeArch to the same as for libguestfs</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.0-4" date="1720440000">- Requires fuse-libs
  resolves: RHEL-46563
- Try to fix libvirt in the gating test.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 10.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5c723a09f10b4fdae47f95a75935bf758ec9432d0721c614ea9fe0b772b84682" name="libguestfs-xfs" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="5.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-4" date="1718798400">- OCaml 5.2.0 ppc64le fix</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
</package>
<package pkgid="3f607b0eeabf2448a292983379055b31bb165874c2513e14a2653e713ad83951" name="libguestfs-xfs" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="6.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.1-5" date="1719316800">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.1-6" date="1719576000">- Fix parsing in part_get_gpt_attributes
  resolves: RHEL-45465</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
</package>
<package pkgid="61d6f1b18dc2361426da0bc7bc0b19f54fa3cbae415effed6e5965049aa302b5" name="libguestfs-xfs" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="8.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-1" date="1721908800">- Rebase to libguestfs 1.52.2 (along the stable branch)
- Remove dependency on syslinux packages
  resolves: RHEL-50565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.52.2-2" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
</package>
<package pkgid="27721bb3899aa2414dfbcd127c9bbcbc61880cf067b6b9d3ec993b879f147202" name="libguestfs-xfs" arch="x86_64">
  <version epoch="1" ver="1.58.1" rel="9.el10_2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.52.2-4" date="1724846400">- Synchronize patches with RHEL 9.5
  resolves: RHEL-56325
- appliance/init: Don't set impossible "noop" disk scheduler
  resolves: RHEL-56157</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.54.0-5" date="1732622400">- Rebase to libguestfs 1.54.0
  resolves: RHEL-56810
- Fix osinfo for Windows Server 2025
  resolves: RHEL-62989
- Replace Jansson with json-c
  resolves: RHEL-65293
- Remove squashfs-tools on RHEL
  resolves: RHEL-68937
- Fix perl-Sys-Guestfs debuginfo
  resolves: RHEL-68973</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.56.1-3" date="1755172800">- Rebase to libguestfs 1.56.1
  resolves: RHEL-81733
- Include host kernel information in libguestfs debugging output
  resolves: RHEL-83026
- Fix virt-v2v conversion of split /usr Ubuntu 22+
  resolves: RHEL-87622
- Remove dependencies on oUnit, flex, bison, file-devel
- Remove zfs-fuse (not used in RHEL)
- Fix gating test
- Fix inspection with duplicated root mountpoint
  resolves: RHEL-90170
- Add btrfs-scrub-full API
  resolves: RHEL-91936
- Add e2fsck forceno flag
  resolves: RHEL-92599
- Capture and raise qemu-img stderr
  resolves: RHEL-92239
- Ignore btrfs snapshots of roots
  resolves: RHEL-93109
- Add /etc/fstab, lsblk and blkid to verbose output
  resolves: RHEL-106490
- Fix conversion of SLES15 with encrypted btrfs filesystem
  resolves: RHEL-93584
- Add guestfs_setfiles API
  resolves: RHEL-108832
- Ignore blank disks in Windows drive mapping
  resolves: RHEL-109258</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-2" date="1769428800">- Rebase to libguestfs 1.58.1
  resolves: RHEL-111240
- Synchronize spec file with Fedora
- Add new libguestfs ntfs_chmod API
  resolves: RHEL-113833
- Use setfiles -A option if available to reduce memory usage
  resolves: RHEL-114292
- Add -cpu max when testing for KVM via QMP
  resolves: RHEL-121076
- Require passt
  resolves: RHEL-122315
- Add AV and GPOs to inspection info
  resolves: RHEL-125846
- Add new xfs_info2 API
  resolves: RHEL-143673</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-5" date="1776427200">- Fix CHS geometry error for Veritas/Sun partitions
  resolves: RHEL-169225</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-6" date="1778500800">- Fix binary LUKS keys
  resolves: RHEL-174519
- Use git to apply patches, since there is an unsupported binary patch</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-8" date="1783684800">- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.58.1-9" date="1786622400">- Add setfiles optional excludes parameter to libguestfs
  resolves: RHEL-239808</changelog>
</package>
<package pkgid="0a896560a2d60e073c0b7d244abc94863fd71d9d2207194f81cf6996c0245514" name="libgusb" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="4.el10"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.4.6-1" date="1686225600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.6-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.4.7-1" date="1696852800">- New release</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.4.8-1" date="1699358400">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.8-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.8-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.4.9-1" date="1714996800">- RHEL-34651 Update to release 0.4.9</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.4.9-2" date="1714996801">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.9-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.9-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="de7e91cb3ac3fe59e21fe18787ef77f460d60c58418b8be04d99f5b1860cc7d3" name="libgusb-devel" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="4.el10"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.4.6-1" date="1686225600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.6-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.4.7-1" date="1696852800">- New release</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.4.8-1" date="1699358400">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.8-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.8-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.4.9-1" date="1714996800">- RHEL-34651 Update to release 0.4.9</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.4.9-2" date="1714996801">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.9-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.9-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="524dfc27e540986624e3f87b1886c489cddbe224b26ac1aa13b0ef99c0479c24" name="libgweather" arch="x86_64">
  <version epoch="1" ver="4.4.4" rel="3.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.4.0-1" date="1698408000">- Unretire libgweather package, rename libgweather4 back to libgweather</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 4.4.2-1" date="1718280000">- Resolves: RHEL-30234 (Update to 4.4.2 release)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 4.4.2-2" date="1718280001">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:4.4.4-1" date="1732622400">- Add epoch to fix upgrades and update to 4.4.4</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:4.4.4-2" date="1736164800">- Remove epoch from devel requirements</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:4.4.4-3" date="1736251200">- Epoch needs to be added to the devel package requirement</changelog>
</package>
<package pkgid="5ef7366fca6c064daba8a9c31b061d89ae2167c49db448d3a3c7d4fc2754491b" name="libgweather-devel" arch="x86_64">
  <version epoch="1" ver="4.4.4" rel="3.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.4.0-1" date="1698408000">- Unretire libgweather package, rename libgweather4 back to libgweather</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 4.4.2-1" date="1718280000">- Resolves: RHEL-30234 (Update to 4.4.2 release)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 4.4.2-2" date="1718280001">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:4.4.4-1" date="1732622400">- Add epoch to fix upgrades and update to 4.4.4</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:4.4.4-2" date="1736164800">- Remove epoch from devel requirements</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:4.4.4-3" date="1736251200">- Epoch needs to be added to the devel package requirement</changelog>
</package>
<package pkgid="d6338ff0ae87302a2b3571f2f5b2219cf801137d479af7c925f1a31ce57aaa72" name="libgweather-doc" arch="x86_64">
  <version epoch="1" ver="4.4.4" rel="3.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.4.0-1" date="1698408000">- Unretire libgweather package, rename libgweather4 back to libgweather</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 4.4.2-1" date="1718280000">- Resolves: RHEL-30234 (Update to 4.4.2 release)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 4.4.2-2" date="1718280001">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:4.4.4-1" date="1732622400">- Add epoch to fix upgrades and update to 4.4.4</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:4.4.4-2" date="1736164800">- Remove epoch from devel requirements</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:4.4.4-3" date="1736251200">- Epoch needs to be added to the devel package requirement</changelog>
</package>
<package pkgid="4f75bfa2931b79721e1e3c47f855d0f1370572498cfdfaf585ff6c1cfbd0f9c0" name="libgxps" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0be58dd0fc13c196825c222a6fdfdb342a78d6af1254e42cdb635b273bc6d12f" name="libgxps-devel" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4acc3d182ac38f53d6bf1baffdda5f097de2a57dfa37a2377e331123b2e52145" name="libgxps-tools" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ab06724ae7ae59b6fde983ac6cb1785bbe8294ffab81b06ce55d3d5f6ec80302" name="libhandy" arch="x86_64">
  <version epoch="0" ver="1.8.3" rel="4.el10"/>
  <changelog author="Yanko Kaneti &lt;yaneti@declera.com&gt; - 1.8.2-3" date="1698148800">- BR: rsvg-pixbuf-loader for svg support in tests</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.8.2-4" date="1698753600">- Disable glade catalog in RHEL builds</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.8.2-5" date="1702209600">- Backport an upstream patch to fix a write after free issue (rhbz#2253814)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.2-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.2-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.8.2-8" date="1707307200">- Migrate to SPDX license</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.8.3-1" date="1707480000">- Update to 1.8.3
- Re-enable tests on s390x</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.8.3-3" date="1721736000">- Move away from xvfb-run (done by nielsdg@redhat.com in Fedora)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2e3cc8570f1ec36edaa4e5d65b7f64c0ebddb00332751b87b6db8c8bc4dc5c22" name="libhandy-devel" arch="x86_64">
  <version epoch="0" ver="1.8.3" rel="4.el10"/>
  <changelog author="Yanko Kaneti &lt;yaneti@declera.com&gt; - 1.8.2-3" date="1698148800">- BR: rsvg-pixbuf-loader for svg support in tests</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.8.2-4" date="1698753600">- Disable glade catalog in RHEL builds</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.8.2-5" date="1702209600">- Backport an upstream patch to fix a write after free issue (rhbz#2253814)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.2-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.2-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.8.2-8" date="1707307200">- Migrate to SPDX license</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.8.3-1" date="1707480000">- Update to 1.8.3
- Re-enable tests on s390x</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.8.3-3" date="1721736000">- Move away from xvfb-run (done by nielsdg@redhat.com in Fedora)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.3-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2f2071945ccb4a951d493d2562880c4c78043a0e80b8adca93732f2c788e3d3d" name="libhangul" arch="x86_64">
  <version epoch="0" ver="0.1.0" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.0-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.1.0-28" date="1683547200">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.0-29" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.0-30" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.0-31" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.0-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.0-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d855e6b1c1af1da391b164a37934c22beab65b5b5b25709b38df54b8d9fdbc6d" name="libhangul-devel" arch="x86_64">
  <version epoch="0" ver="0.1.0" rel="33.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.0-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.1.0-28" date="1683547200">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.0-29" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.0-30" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.0-31" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.0-32" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.0-33" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6adf3949f4e4c43d0155d25031782f8d046bdb965d46af291d8fe21adb441ed5" name="libhwasan" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="640bf5c962865a611fc367c11b62b5d17d6884b0239e52d0cdf976bf0f729c39" name="libhwasan-static" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="a2f7a75daaa173c81d08ae29e563666f99f6de20368d067014d0ba307f25e40b" name="libi2c" arch="x86_64">
  <version epoch="0" ver="4.3" rel="14.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.3-6" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 4.3-8" date="1695988800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-9" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-10" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 4.3-11" date="1715256000">- Fix SPDX license identifiers</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 4.3-14" date="1739534400">- Do not run modprobe in %post if the system is not running
- Resolves: RHEL-78695</changelog>
</package>
<package pkgid="d6242a79f4ad66e3990700131c36da36c71bfc0e517ff32793a482e60a59ba9e" name="libi2c-devel" arch="x86_64">
  <version epoch="0" ver="4.3" rel="14.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.3-6" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 4.3-8" date="1695988800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-9" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-10" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 4.3-11" date="1715256000">- Fix SPDX license identifiers</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 4.3-14" date="1739534400">- Do not run modprobe in %post if the system is not running
- Resolves: RHEL-78695</changelog>
</package>
<package pkgid="db4691db368b8e3ba61440240d9de02f4ca88a4284bd937e4bec6cdeebe0350b" name="libi2cd" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.3-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.3-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7d2206645580fae820a79032ad16c3c96b9cba4a9d9ac0a98fad998366e3bddd" name="libi2cd-devel" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.3-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.3-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="85c7b7137afa125a34dc30bd153937ec1725e18b646193f1ddb780941ce80a4d" name="libibumad" arch="x86_64">
  <version epoch="0" ver="61.0" rel="1.el10"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1768478400">- Rebase to upstream release 61.0</changelog>
</package>
<package pkgid="7530a504b708ef0124c3d274f995c6edc103b92eed33cac0a83cfc402da01e88" name="libibverbs" arch="x86_64">
  <version epoch="0" ver="61.0" rel="1.el10"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1768478400">- Rebase to upstream release 61.0</changelog>
</package>
<package pkgid="7b599fcd14afaf3e87d787ff2271a9212ca2f840d200e1991389b9c6e2177e1b" name="libibverbs-utils" arch="x86_64">
  <version epoch="0" ver="61.0" rel="1.el10"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1768478400">- Rebase to upstream release 61.0</changelog>
</package>
<package pkgid="5854e78db35bd64c5a28059ec6252038d41bade7247817325dc39c953502a6a3" name="libical" arch="x86_64">
  <version epoch="0" ver="3.0.18" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.16-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 3.0.16-4" date="1689076800">- Rebuilt for ICU 73.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.16-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.0.17-1" date="1697457600">- Update to 3.0.17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.17-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.17-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 3.0.17-4" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.0.18-1" date="1712577600">- Resolves: RHEL-32074 (Update to 3.0.18)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.18-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.18-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="226182bd6e6f6d4de0446cbdfd1b2fc8e0af48ea77c70780db65b5273277a4a0" name="libical-devel" arch="x86_64">
  <version epoch="0" ver="3.0.18" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.16-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 3.0.16-4" date="1689076800">- Rebuilt for ICU 73.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.16-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.0.17-1" date="1697457600">- Update to 3.0.17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.17-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.17-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 3.0.17-4" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.0.18-1" date="1712577600">- Resolves: RHEL-32074 (Update to 3.0.18)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.18-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.18-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2b1f05aef60a0f9c913da793bf862eb6e49a614a7c2b9657265c9b4fe4d7e9cb" name="libical-glib" arch="x86_64">
  <version epoch="0" ver="3.0.18" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.16-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 3.0.16-4" date="1689076800">- Rebuilt for ICU 73.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.16-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.0.17-1" date="1697457600">- Update to 3.0.17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.17-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.17-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 3.0.17-4" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.0.18-1" date="1712577600">- Resolves: RHEL-32074 (Update to 3.0.18)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.18-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.18-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a6e804af8daaf77df3f950207cbd9f4a0725262418c9a9a387fbbb5d70b777b2" name="libical-glib-devel" arch="x86_64">
  <version epoch="0" ver="3.0.18" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.16-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 3.0.16-4" date="1689076800">- Rebuilt for ICU 73.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.16-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.0.17-1" date="1697457600">- Update to 3.0.17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.17-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.17-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 3.0.17-4" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.0.18-1" date="1712577600">- Resolves: RHEL-32074 (Update to 3.0.18)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.18-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.18-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cff1d577120554a2e5cd3057b1781ed57f2f369a13c4150fe7a10cf6c29e3925" name="libical-glib-doc" arch="noarch">
  <version epoch="0" ver="3.0.18" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.16-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 3.0.16-4" date="1689076800">- Rebuilt for ICU 73.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.16-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.0.17-1" date="1697457600">- Update to 3.0.17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.17-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.17-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 3.0.17-4" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.0.18-1" date="1712577600">- Resolves: RHEL-32074 (Update to 3.0.18)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.18-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.18-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9d7388c3630e3afc374666ad4c44082dd755cc05b7a31482be17981d08f26f50" name="libicu" arch="x86_64">
  <version epoch="0" ver="74.2" rel="5.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 73.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 73.2-3" date="1702468800">- Fix broken TestHebrewCalendarInTemporalLeapYear</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 73.2-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 73.2-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 74.1-1" date="1706529600">- Update to 74.1</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 74.2-1" date="1706702400">- Update to 74.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 74.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 74.2-3" date="1726833600">- Resolves: RHEL-59365 Fix coverity warnings</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 74.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 74.2-5" date="1751976000">- ICU-22973 Fix buffer overflow by using CharString
  Resolves: RHEL-96667</changelog>
</package>
<package pkgid="d2f5b279ec7cbd92d012e31c74f991f7316c3cdb084fee26b1ac4cf05890dc7a" name="libicu-devel" arch="x86_64">
  <version epoch="0" ver="74.2" rel="5.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 73.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 73.2-3" date="1702468800">- Fix broken TestHebrewCalendarInTemporalLeapYear</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 73.2-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 73.2-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 74.1-1" date="1706529600">- Update to 74.1</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 74.2-1" date="1706702400">- Update to 74.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 74.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 74.2-3" date="1726833600">- Resolves: RHEL-59365 Fix coverity warnings</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 74.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 74.2-5" date="1751976000">- ICU-22973 Fix buffer overflow by using CharString
  Resolves: RHEL-96667</changelog>
</package>
<package pkgid="86cf3c2bbfcff5bea8a3fbf1d887ab927a3b2c1f67aaa0651531d3fc93aee685" name="libicu-doc" arch="noarch">
  <version epoch="0" ver="74.2" rel="5.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 73.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 73.2-3" date="1702468800">- Fix broken TestHebrewCalendarInTemporalLeapYear</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 73.2-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 73.2-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 74.1-1" date="1706529600">- Update to 74.1</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 74.2-1" date="1706702400">- Update to 74.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 74.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 74.2-3" date="1726833600">- Resolves: RHEL-59365 Fix coverity warnings</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 74.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 74.2-5" date="1751976000">- ICU-22973 Fix buffer overflow by using CharString
  Resolves: RHEL-96667</changelog>
</package>
<package pkgid="ef86011a7b9b3327ae20dd526f33b5438838505caf2b55268093cd2509c10b9a" name="libidn2" arch="x86_64">
  <version epoch="0" ver="2.3.7" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.4-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.4-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.4-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 2.3.5-1" date="1706356800">- Upgrade to 2.3.5</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 2.3.6-1" date="1706356801">- Upgrade to 2.3.6</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 2.3.7-1" date="1706356802">- Upgrade to 2.3.7 (#2260623)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.7-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.7-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4e65d715e273d2e61283c1ef14ffffa10caa9ffb9c1433969b66b7b3492ba904" name="libidn2-devel" arch="x86_64">
  <version epoch="0" ver="2.3.7" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.4-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.4-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.4-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 2.3.5-1" date="1706356800">- Upgrade to 2.3.5</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 2.3.6-1" date="1706356801">- Upgrade to 2.3.6</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 2.3.7-1" date="1706356802">- Upgrade to 2.3.7 (#2260623)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.7-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.7-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9a4ea1575fdf9057af6ca74ec005b51ce463800a1fd08efaedf8bbc1c63658af" name="libieee1284" arch="x86_64">
  <version epoch="0" ver="0.2.11" rel="46.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.11-40" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.11-41" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.11-42" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.11-43" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.11-44" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.2.11-45" date="1722859200">- change license tag to SPDX format (RHEL-52832)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.11-46" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="15cdc15fe479079b988b7c16260b800fa5348c4c7658035e022e848d6e990153" name="libieee1284-devel" arch="x86_64">
  <version epoch="0" ver="0.2.11" rel="46.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.11-40" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.11-41" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.11-42" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.11-43" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.11-44" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.2.11-45" date="1722859200">- change license tag to SPDX format (RHEL-52832)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.11-46" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c8d0602b2d464bfed5b445dd299dc32744e2bd05de31477ae4b40dc77cc5fdf0" name="libijs" arch="x86_64">
  <version epoch="0" ver="0.35" rel="24.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-17" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Lescak &lt;rlescak@redhat.com&gt; - 0.35-18" date="1676548800">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-19" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.35-20" date="1704801600">- fix FTBFS with GCC 14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-21" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-22" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.35-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.35-24" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="cf8e313b7cab043f3e7562e6d87571b7cab7e91c70df1d82cd034f11b4de1448" name="libijs-devel" arch="x86_64">
  <version epoch="0" ver="0.35" rel="24.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-17" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Lescak &lt;rlescak@redhat.com&gt; - 0.35-18" date="1676548800">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-19" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.35-20" date="1704801600">- fix FTBFS with GCC 14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-21" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-22" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.35-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.35-24" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8646f9d9a0e5714a74e3f44835ab9e3e8ec054bfb8961a1a3699dca8c652e25e" name="libijs-doc" arch="noarch">
  <version epoch="0" ver="0.35" rel="24.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-17" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Richard Lescak &lt;rlescak@redhat.com&gt; - 0.35-18" date="1676548800">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-19" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.35-20" date="1704801600">- fix FTBFS with GCC 14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-21" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-22" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.35-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.35-24" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0755d711415b48ca67960edaae37bfc741630b84cbc53b1f1807804de67ea94e" name="libini_config" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="58.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-53" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-54" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-55" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-56" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-57" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-58" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1987eac170b949d98bf2464081aa86f4ed187de39d1334a46a717a50db6b8080" name="libini_config-devel" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="58.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-53" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-54" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-55" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-56" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-57" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-58" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5d90513577caf1b07a38976b22964587ffa91cdc4fbf9862d520a8fe9c095e94" name="libinput" arch="x86_64">
  <version epoch="0" ver="1.30.1" rel="1.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.25.0-5" date="1717156800">- Mark datadir/libinput as owned by us (#2283754)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.26.0-1" date="1717675200">- libinput 1.26.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-1" date="1719489600">- libinput 1.26.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-3" date="1753272000">- Support Wacom Intuos Pro 3rd by mapping the dial to a ring (RHEL-104952)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-4" date="1753444800">- Fix negative value range for the dial to ring-mapping (RHEL-104952)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-5" date="1754049600">- Add quirks for four Dell pressure pads (RHEL-106932)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.28.1-1" date="1762344000">- libinput 1.28.1
  Resolves: RHEL-126613</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.30.1-1" date="1765972800">- libinput 1.30.1
  Resolves: RHEL-136390</changelog>
</package>
<package pkgid="c6845bd0644ec2b40e5b0efe9b8c3c99219e81a1824462fbaa463f1530110135" name="libinput" arch="x86_64">
  <version epoch="0" ver="1.30.1" rel="2.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-1" date="1719489600">- libinput 1.26.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-3" date="1753272000">- Support Wacom Intuos Pro 3rd by mapping the dial to a ring (RHEL-104952)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-4" date="1753444800">- Fix negative value range for the dial to ring-mapping (RHEL-104952)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-5" date="1754049600">- Add quirks for four Dell pressure pads (RHEL-106932)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.28.1-1" date="1762344000">- libinput 1.28.1
  Resolves: RHEL-126613</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.30.1-1" date="1765972800">- libinput 1.30.1
  Resolves: RHEL-136390</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.30.1-2" date="1781265600">- CVE-2026-50292: sanitize phys before printing it in libinput-device-group
  Resolves: RHEL-182371</changelog>
</package>
<package pkgid="ac7448c5b78d6f5f335f5f93f085358f6d05eeda6666aa1c5f3f1bdbf9f298d4" name="libinput-devel" arch="x86_64">
  <version epoch="0" ver="1.30.1" rel="1.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.25.0-5" date="1717156800">- Mark datadir/libinput as owned by us (#2283754)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.26.0-1" date="1717675200">- libinput 1.26.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-1" date="1719489600">- libinput 1.26.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-3" date="1753272000">- Support Wacom Intuos Pro 3rd by mapping the dial to a ring (RHEL-104952)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-4" date="1753444800">- Fix negative value range for the dial to ring-mapping (RHEL-104952)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-5" date="1754049600">- Add quirks for four Dell pressure pads (RHEL-106932)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.28.1-1" date="1762344000">- libinput 1.28.1
  Resolves: RHEL-126613</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.30.1-1" date="1765972800">- libinput 1.30.1
  Resolves: RHEL-136390</changelog>
</package>
<package pkgid="e9efb96913d66a6bedf961e72b0ee4829fefe77eff6906921665a2cf4014a4a7" name="libinput-devel" arch="x86_64">
  <version epoch="0" ver="1.30.1" rel="2.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-1" date="1719489600">- libinput 1.26.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-3" date="1753272000">- Support Wacom Intuos Pro 3rd by mapping the dial to a ring (RHEL-104952)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-4" date="1753444800">- Fix negative value range for the dial to ring-mapping (RHEL-104952)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-5" date="1754049600">- Add quirks for four Dell pressure pads (RHEL-106932)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.28.1-1" date="1762344000">- libinput 1.28.1
  Resolves: RHEL-126613</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.30.1-1" date="1765972800">- libinput 1.30.1
  Resolves: RHEL-136390</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.30.1-2" date="1781265600">- CVE-2026-50292: sanitize phys before printing it in libinput-device-group
  Resolves: RHEL-182371</changelog>
</package>
<package pkgid="984ae805f1202cb008d229c667b9e7cb82f1699639ce00c07bdab159626d5041" name="libinput-test" arch="x86_64">
  <version epoch="0" ver="1.30.1" rel="1.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.25.0-5" date="1717156800">- Mark datadir/libinput as owned by us (#2283754)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.26.0-1" date="1717675200">- libinput 1.26.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-1" date="1719489600">- libinput 1.26.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-3" date="1753272000">- Support Wacom Intuos Pro 3rd by mapping the dial to a ring (RHEL-104952)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-4" date="1753444800">- Fix negative value range for the dial to ring-mapping (RHEL-104952)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-5" date="1754049600">- Add quirks for four Dell pressure pads (RHEL-106932)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.28.1-1" date="1762344000">- libinput 1.28.1
  Resolves: RHEL-126613</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.30.1-1" date="1765972800">- libinput 1.30.1
  Resolves: RHEL-136390</changelog>
</package>
<package pkgid="9eb09f4268d1b3583fd8164a012925704b94d679b956fbb9245c7209f6c2b034" name="libinput-test" arch="x86_64">
  <version epoch="0" ver="1.30.1" rel="2.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-1" date="1719489600">- libinput 1.26.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-3" date="1753272000">- Support Wacom Intuos Pro 3rd by mapping the dial to a ring (RHEL-104952)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-4" date="1753444800">- Fix negative value range for the dial to ring-mapping (RHEL-104952)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-5" date="1754049600">- Add quirks for four Dell pressure pads (RHEL-106932)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.28.1-1" date="1762344000">- libinput 1.28.1
  Resolves: RHEL-126613</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.30.1-1" date="1765972800">- libinput 1.30.1
  Resolves: RHEL-136390</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.30.1-2" date="1781265600">- CVE-2026-50292: sanitize phys before printing it in libinput-device-group
  Resolves: RHEL-182371</changelog>
</package>
<package pkgid="bb9dccc892f30de25dececfd7e92ff8801d31b31ff93bccd75a66f62503a7fbc" name="libinput-utils" arch="x86_64">
  <version epoch="0" ver="1.30.1" rel="1.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.25.0-5" date="1717156800">- Mark datadir/libinput as owned by us (#2283754)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.26.0-1" date="1717675200">- libinput 1.26.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-1" date="1719489600">- libinput 1.26.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-3" date="1753272000">- Support Wacom Intuos Pro 3rd by mapping the dial to a ring (RHEL-104952)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-4" date="1753444800">- Fix negative value range for the dial to ring-mapping (RHEL-104952)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-5" date="1754049600">- Add quirks for four Dell pressure pads (RHEL-106932)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.28.1-1" date="1762344000">- libinput 1.28.1
  Resolves: RHEL-126613</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.30.1-1" date="1765972800">- libinput 1.30.1
  Resolves: RHEL-136390</changelog>
</package>
<package pkgid="cc7b69d5ea3789ea3f9340ed84a42bc9270e2b4486a86fa40aecd782c2720283" name="libinput-utils" arch="x86_64">
  <version epoch="0" ver="1.30.1" rel="2.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-1" date="1719489600">- libinput 1.26.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-3" date="1753272000">- Support Wacom Intuos Pro 3rd by mapping the dial to a ring (RHEL-104952)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-4" date="1753444800">- Fix negative value range for the dial to ring-mapping (RHEL-104952)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.26.1-5" date="1754049600">- Add quirks for four Dell pressure pads (RHEL-106932)</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.28.1-1" date="1762344000">- libinput 1.28.1
  Resolves: RHEL-126613</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.30.1-1" date="1765972800">- libinput 1.30.1
  Resolves: RHEL-136390</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.30.1-2" date="1781265600">- CVE-2026-50292: sanitize phys before printing it in libinput-device-group
  Resolves: RHEL-182371</changelog>
</package>
<package pkgid="f26df7609b1c99c8e82485939fbc73da33a5048843cd9d4ffa04d526d6ec2f08" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="- Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3.1" date="1783512000">- Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole
- Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass</changelog>
</package>
<package pkgid="b83d44ffadb960f35b955cd3c16bd03153012cc6a46bed70cdf54a0647fb8487" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2"/>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 2.10.2-4" date="1746187200">- Resolves: RHEL-89474 - Fails to build on riscv64</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
</package>
<package pkgid="6a249d572f7fa96ac93dd786c74e769f05e243c2953dd4da2cac1623d4921953" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="- Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3.1" date="1783512000">- Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole
- Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass</changelog>
</package>
<package pkgid="ef48b64bb27111f9ed2f1364e6b1a8ed9cbb05aa9966b87b9696f340f56f4270" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2"/>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 2.10.2-4" date="1746187200">- Resolves: RHEL-89474 - Fails to build on riscv64</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
</package>
<package pkgid="1811b0414f4aec52aeeac9797144830b754b5cf2d5600d6743d9515d6ff5ba8c" name="libipt" arch="x86_64">
  <version epoch="0" ver="2.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt;" date="1678190400">- migrated to SPDX license</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 2.0.6-1" date="1688644800">- Import v2.0.6 and regenerate documentation.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 2.1-1" date="1697630400">- Update to v2.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="34937cceece84bcdb3b9bec190a4a913d87b6aa20d7599bef980910616754526" name="libipt-devel" arch="x86_64">
  <version epoch="0" ver="2.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt;" date="1678190400">- migrated to SPDX license</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 2.0.6-1" date="1688644800">- Import v2.0.6 and regenerate documentation.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 2.1-1" date="1697630400">- Update to v2.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3ee7942b0ea6542c71ed776e2101653c9f76f2d578d949949fc726b1efbed2b5" name="libiptcdata" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="20.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-13" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.0.5-14" date="1686744000">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-15" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-16" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-17" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-18" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.0.5-19" date="1722859200">- Disable python support. This package is only in RHEL 10, because
  tracker-miners requires it and it doesn't need the Python bits.
- Resolves: RHEL-52843</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-20" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="af59e273f7d6350d6be6812abe0313ba488bafd09512fdc02f31b2743e818f72" name="libiptcdata-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="20.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-13" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.0.5-14" date="1686744000">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-15" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-16" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-17" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-18" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.0.5-19" date="1722859200">- Disable python support. This package is only in RHEL 10, because
  tracker-miners requires it and it doesn't need the Python bits.
- Resolves: RHEL-52843</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-20" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bd1e3f078c525f987afe95dca87283efff0d7643e278a12366abbef03866bc1a" name="libisoburn" arch="x86_64">
  <version epoch="0" ver="1.5.6" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.4-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.5.6-1" date="1687262400">- Upgrade to 1.5.6 (#2216134)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="81a11f626ac52e7bb993b262f52096e5324f77b3a4d41df42839f9e3039684ad" name="libisoburn-devel" arch="x86_64">
  <version epoch="0" ver="1.5.6" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.4-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.5.6-1" date="1687262400">- Upgrade to 1.5.6 (#2216134)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="90176715849fe24d797fd12363ca09517369ae563498b305f332603709d80f79" name="libisoburn-doc" arch="noarch">
  <version epoch="0" ver="1.5.6" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.4-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.5.6-1" date="1687262400">- Upgrade to 1.5.6 (#2216134)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="86ef33a7d71c9b4d9a3f65c6d54a9034e1c481a1342524e715b69c170385d746" name="libisofs" arch="x86_64">
  <version epoch="0" ver="1.5.6" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.4-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.5.6-1" date="1687262400">- Upgrade to 1.5.6 (#2216133)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0f024548ced67b92078c6b5833e98922cd7ef1ac544cbaa4b6b24b346ddfe53a" name="libisofs-devel" arch="x86_64">
  <version epoch="0" ver="1.5.6" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.4-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.5.6-1" date="1687262400">- Upgrade to 1.5.6 (#2216133)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ac9539ded932f51d0c96d47e67dbf6f8a5a8ab53769646f6fb0bcdb227226bbd" name="libisofs-doc" arch="noarch">
  <version epoch="0" ver="1.5.6" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.4-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.5.6-1" date="1687262400">- Upgrade to 1.5.6 (#2216133)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.6-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.6-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="728104521eebbcd386479efab83ef07615fb2c737b24718baa2d39d378020949" name="libitm" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="227700e2665551a3b77406461b417129b5ab304a3ac510002ef5c7573b7c4c04" name="libitm-devel" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="a04beaffaf937af9f06557e14e4b9d2f649e1ad5a67a3c24486faaf29b79f036" name="libitm-static" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="89084298b421bd384652470320847436ac7f75f04a705ee6bedd56c2f66375e7" name="libjcat" arch="x86_64">
  <version epoch="0" ver="0.2.5" rel="1.el10"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.2.0-1" date="1704196800">- New upstream release</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.2.1-1" date="1705752000">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.1-2" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.2.2-1" date="1728907200">- New upstream release</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.2-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.2.2-3" date="1733832000">- gating enabled</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.2.2-4" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.2.5-1" date="1759752000">- New upstream release</changelog>
</package>
<package pkgid="20ecab5b8e70399f58e5d398e195d1473c967490b5c28a0b88716a55cd9ba932" name="libjcat-devel" arch="x86_64">
  <version epoch="0" ver="0.2.5" rel="1.el10"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.2.0-1" date="1704196800">- New upstream release</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.2.1-1" date="1705752000">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.1-2" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.2.2-1" date="1728907200">- New upstream release</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.2-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.2.2-3" date="1733832000">- gating enabled</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.2.2-4" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.2.5-1" date="1759752000">- New upstream release</changelog>
</package>
<package pkgid="cb40dffcd6aa3bed2b32924bf759a40405fe0939d38ccd967117fe43e0e5f558" name="libjcat-tests" arch="x86_64">
  <version epoch="0" ver="0.2.5" rel="1.el10"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.2.0-1" date="1704196800">- New upstream release</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.2.1-1" date="1705752000">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.1-2" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.2.2-1" date="1728907200">- New upstream release</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.2-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.2.2-3" date="1733832000">- gating enabled</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.2.2-4" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.2.5-1" date="1759752000">- New upstream release</changelog>
</package>
<package pkgid="0078d010aec6ef33e415e7601059edad41b4db76a43d7cda889c867133055173" name="libjose" arch="x86_64">
  <version epoch="0" ver="14" rel="102.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11-8" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11-9" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11-10" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tulio Magno Quites Machado Filho &lt;tuliom@redhat.com&gt; - 11-11" date="1706616000">- Fix test when using zlib-ng</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 12-1" date="1706875200">- Update to release v12</changelog>
  <changelog author="koncpa &lt;pkoncity@redhat.com&gt; - 12-2" date="1716465600">- Enable RHEL gating for jose</changelog>
  <changelog author="koncpa &lt;pkoncity@redhat.com&gt; - 12-3" date="1716811200">- Enable fmf metadata format for jose</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 14-100" date="1716984000">- Rebase jose-14 upstream version to c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 14-101" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 14-102" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="b1d9637c34102be242d23dccc5da4c5838855ff73885c86b6eafa4571111766d" name="libjose-devel" arch="x86_64">
  <version epoch="0" ver="14" rel="102.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11-8" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11-9" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11-10" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tulio Magno Quites Machado Filho &lt;tuliom@redhat.com&gt; - 11-11" date="1706616000">- Fix test when using zlib-ng</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 12-1" date="1706875200">- Update to release v12</changelog>
  <changelog author="koncpa &lt;pkoncity@redhat.com&gt; - 12-2" date="1716465600">- Enable RHEL gating for jose</changelog>
  <changelog author="koncpa &lt;pkoncity@redhat.com&gt; - 12-3" date="1716811200">- Enable fmf metadata format for jose</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 14-100" date="1716984000">- Rebase jose-14 upstream version to c10s</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 14-101" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 14-102" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="1af6139861227734cf2e47133b3fe828fc9062c65981f730a617ee184d3589ec" name="libjpeg-turbo" arch="x86_64">
  <version epoch="0" ver="3.0.2" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.4-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.4-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.4-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 2.1.4-6" date="1706529600">- migrated to SPDX license</changelog>
  <changelog author="Frantisek Zatloukal &lt;fzatlouk@redhat.com&gt; - 3.0.2-1" date="1707134400">- New upstream release 3.0.2 (Fixes RHBZ#2256228 and RHBZ#2166459 and RHBZ#2208448)</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 3.0.2-2" date="1709726400">- Set fp-contract for riscv64</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="99d68a79d5a294d1b777dbf5c9c6774648281d9ec0ff0bdbe08bb3e9e971e34d" name="libjpeg-turbo-devel" arch="x86_64">
  <version epoch="0" ver="3.0.2" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.4-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.4-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.4-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 2.1.4-6" date="1706529600">- migrated to SPDX license</changelog>
  <changelog author="Frantisek Zatloukal &lt;fzatlouk@redhat.com&gt; - 3.0.2-1" date="1707134400">- New upstream release 3.0.2 (Fixes RHBZ#2256228 and RHBZ#2166459 and RHBZ#2208448)</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 3.0.2-2" date="1709726400">- Set fp-contract for riscv64</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9bdc3086212205dd227848647378ffbe99a79bc2dd9562eb99f00ed5ff0cb62c" name="libjpeg-turbo-utils" arch="x86_64">
  <version epoch="0" ver="3.0.2" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.4-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.4-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.4-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 2.1.4-6" date="1706529600">- migrated to SPDX license</changelog>
  <changelog author="Frantisek Zatloukal &lt;fzatlouk@redhat.com&gt; - 3.0.2-1" date="1707134400">- New upstream release 3.0.2 (Fixes RHBZ#2256228 and RHBZ#2166459 and RHBZ#2208448)</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 3.0.2-2" date="1709726400">- Set fp-contract for riscv64</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.0.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ef97d529d51fcb0b61bbaa0c4bf0492ecb834a6ac6d232028770c3641b2c38ca" name="libkadm5" arch="x86_64">
  <version epoch="0" ver="1.21.3" rel="10.el10_2"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-1" date="1720785600">- New upstream version (1.21.3)
- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45387 RHEL-45378
- Fix memory leak in GSSAPI interface
  Resolves: RHEL-47284
- Fix memory leak in PMAP RPC interface
  Resolves: RHEL-47287
- Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
  Resolves: RHEL-47285
- Make TCP waiting time configurable
  Resolves: RHEL-47278</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-2" date="1720785601">- Do not include files with "~" termination in krb5-tests
  Resolves: RHEL-45995</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.21.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-4" date="1730289600">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55427
- Fix various issues detected by static analysis
  Resolves: RHEL-45165
- Remove RSA protocol for PKINIT
  Resolves: RHEL-56070</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-5" date="1730721600">- Make test dependencies optional if not part of CentOS/RHEL 10
  Resolves: RHEL-65724</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-6" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74373
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56058
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-71881</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-7" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76758</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-8" date="1745841600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88705
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88047
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-74295</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145356
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-145358
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145397</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.3-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171588 RHEL-171597</changelog>
</package>
<package pkgid="27c82aeffbf86b6a4fcf54e1e1ffd8c9838317d868b676e8f92f76ae24933643" name="libkcapi" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-9" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-10" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-11" date="1716897600">- Backport fixes from c9s</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-12" date="1716897601">- Remove tests from repo</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-13" date="1716897602">- Bring back usage of /usr/lib64 instead of /lib64</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 1.4.0-15" date="1720526400">- Enable RHEL-10 CI and gating</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.5.0-1" date="1721995200">- Rebase to 1.5.0</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.5.0-2" date="1723118400">- Fixup 1.5.0 rebase</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="b14eaac01c7e536e92dacb1fdc0207b53efc5a402cac71cb10226e36b6b9983b" name="libkcapi-devel" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-9" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-10" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-11" date="1716897600">- Backport fixes from c9s</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-12" date="1716897601">- Remove tests from repo</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-13" date="1716897602">- Bring back usage of /usr/lib64 instead of /lib64</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 1.4.0-15" date="1720526400">- Enable RHEL-10 CI and gating</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.5.0-1" date="1721995200">- Rebase to 1.5.0</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.5.0-2" date="1723118400">- Fixup 1.5.0 rebase</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="d6863ce470b78a3079e7a76c6e09bc5065acdbbc8adee0d27ea7ef5a6bf0a250" name="libkcapi-doc" arch="noarch">
  <version epoch="0" ver="1.5.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-9" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-10" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-11" date="1716897600">- Backport fixes from c9s</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-12" date="1716897601">- Remove tests from repo</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-13" date="1716897602">- Bring back usage of /usr/lib64 instead of /lib64</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 1.4.0-15" date="1720526400">- Enable RHEL-10 CI and gating</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.5.0-1" date="1721995200">- Rebase to 1.5.0</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.5.0-2" date="1723118400">- Fixup 1.5.0 rebase</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="b64b53bfab13b553bc2aa4dc1d009587381e8bbf5a7738d14cb0df184360f5fc" name="libkcapi-fipscheck" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-9" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-10" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-11" date="1716897600">- Backport fixes from c9s</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-12" date="1716897601">- Remove tests from repo</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-13" date="1716897602">- Bring back usage of /usr/lib64 instead of /lib64</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 1.4.0-15" date="1720526400">- Enable RHEL-10 CI and gating</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.5.0-1" date="1721995200">- Rebase to 1.5.0</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.5.0-2" date="1723118400">- Fixup 1.5.0 rebase</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="05bcbfac86912db73f3e77f3477db8ac4e7ccf058f85fe7a27ae0e8e967935f7" name="libkcapi-hasher" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-9" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-10" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-11" date="1716897600">- Backport fixes from c9s</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-12" date="1716897601">- Remove tests from repo</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-13" date="1716897602">- Bring back usage of /usr/lib64 instead of /lib64</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 1.4.0-15" date="1720526400">- Enable RHEL-10 CI and gating</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.5.0-1" date="1721995200">- Rebase to 1.5.0</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.5.0-2" date="1723118400">- Fixup 1.5.0 rebase</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="6ec33027112af24271014edeb50b633a66c6248a4b70b2ffc67ec3ad33b19b04" name="libkcapi-hmaccalc" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-9" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-10" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-11" date="1716897600">- Backport fixes from c9s</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-12" date="1716897601">- Remove tests from repo</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-13" date="1716897602">- Bring back usage of /usr/lib64 instead of /lib64</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 1.4.0-15" date="1720526400">- Enable RHEL-10 CI and gating</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.5.0-1" date="1721995200">- Rebase to 1.5.0</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.5.0-2" date="1723118400">- Fixup 1.5.0 rebase</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="307f1f6a5cc7c0e9a1132b4ed45ea3b30d99a8fa229e2c734c1f3507253215cc" name="libkcapi-static" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-9" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-10" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-11" date="1716897600">- Backport fixes from c9s</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-12" date="1716897601">- Remove tests from repo</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-13" date="1716897602">- Bring back usage of /usr/lib64 instead of /lib64</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 1.4.0-15" date="1720526400">- Enable RHEL-10 CI and gating</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.5.0-1" date="1721995200">- Rebase to 1.5.0</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.5.0-2" date="1723118400">- Fixup 1.5.0 rebase</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="1d52e266cfaf44830766a9995d2b263c1c80c7f5c6ba9f28fae2c4e17d412e2c" name="libkcapi-tests" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-9" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-10" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-11" date="1716897600">- Backport fixes from c9s</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-12" date="1716897601">- Remove tests from repo</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-13" date="1716897602">- Bring back usage of /usr/lib64 instead of /lib64</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 1.4.0-15" date="1720526400">- Enable RHEL-10 CI and gating</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.5.0-1" date="1721995200">- Rebase to 1.5.0</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.5.0-2" date="1723118400">- Fixup 1.5.0 rebase</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="32b01309ef3e89003b58212789861d2f78152050ec9a452a660ad343bc37f3ef" name="libkcapi-tools" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-9" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-10" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-11" date="1716897600">- Backport fixes from c9s</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-12" date="1716897601">- Remove tests from repo</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-13" date="1716897602">- Bring back usage of /usr/lib64 instead of /lib64</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.0-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 1.4.0-15" date="1720526400">- Enable RHEL-10 CI and gating</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.5.0-1" date="1721995200">- Rebase to 1.5.0</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.5.0-2" date="1723118400">- Fixup 1.5.0 rebase</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="fef4c72bf04284a7ae90efd568c0d9b01b157ca9095310396a50b142a8ba079e" name="libkdumpfile" arch="x86_64">
  <version epoch="0" ver="0.5.5" rel="1.el10"/>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.5.3-1" date="1699617600">- Update to 0.5.3</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.5.4-1" date="1701172800">- Update to 0.5.4</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.5.4-2" date="1704369600">- More complete Python 3 port for improved C compatibility</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.4-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.4-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.5.4-5" date="1714651200">- Add gating.yaml to RHEL10 libkdumpfile</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 0.5.4-6" date="1715774400">- Add tests/ directory</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.4-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.4-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.5.5-1" date="1748260800">- Rebase to upstream 0.5.5</changelog>
</package>
<package pkgid="baf4686f1a756b2c76ec5e12f31b5b1d1d43fc06e148bf3e0524548731099f48" name="libkdumpfile-devel" arch="x86_64">
  <version epoch="0" ver="0.5.5" rel="1.el10"/>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.5.3-1" date="1699617600">- Update to 0.5.3</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.5.4-1" date="1701172800">- Update to 0.5.4</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.5.4-2" date="1704369600">- More complete Python 3 port for improved C compatibility</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.4-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.4-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.5.4-5" date="1714651200">- Add gating.yaml to RHEL10 libkdumpfile</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 0.5.4-6" date="1715774400">- Add tests/ directory</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.4-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.4-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.5.5-1" date="1748260800">- Rebase to upstream 0.5.5</changelog>
</package>
<package pkgid="2f0e592c504979b5d780d8e7ebf30526d8ecb2c3a2e9d81d63597dd9e5ab9f22" name="libkdumpfile-doc" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="1.el10"/>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.5.3-1" date="1699617600">- Update to 0.5.3</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.5.4-1" date="1701172800">- Update to 0.5.4</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.5.4-2" date="1704369600">- More complete Python 3 port for improved C compatibility</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.4-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.4-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.5.4-5" date="1714651200">- Add gating.yaml to RHEL10 libkdumpfile</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 0.5.4-6" date="1715774400">- Add tests/ directory</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.4-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.4-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.5.5-1" date="1748260800">- Rebase to upstream 0.5.5</changelog>
</package>
<package pkgid="5acd5002cd458359a6d782fe42934765aef857ebb473c685a27ef1c305d04b50" name="libkdumpfile-util" arch="x86_64">
  <version epoch="0" ver="0.5.5" rel="1.el10"/>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.5.3-1" date="1699617600">- Update to 0.5.3</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.5.4-1" date="1701172800">- Update to 0.5.4</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.5.4-2" date="1704369600">- More complete Python 3 port for improved C compatibility</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.4-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.4-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.5.4-5" date="1714651200">- Add gating.yaml to RHEL10 libkdumpfile</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 0.5.4-6" date="1715774400">- Add tests/ directory</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.4-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.4-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.5.5-1" date="1748260800">- Rebase to upstream 0.5.5</changelog>
</package>
<package pkgid="bf5b3778c339a8cd70bd3ad93d17dffd41540ba92609d2f54522bd1fc2b1bf7e" name="libkeepalive" arch="x86_64">
  <version epoch="0" ver="0.3" rel="24.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-18" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-19" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 0.3-20" date="1698408000">- License review: SPDX migration not necessary</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-21" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-22" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3-23" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3-24" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="95cc73f6143b65bda21b1c09ed292a1019b9c83599c83beac7675b4e20450831" name="libknet1" arch="x86_64">
  <version epoch="0" ver="1.30" rel="1.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.25-3" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.26-1" date="1688990400">- New upstream release
- Improve TX performance and use less CPU
- minor other improvements
- Build system update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.27-1" date="1695729600">- New upstream release
- Fix potential startup race condition (corosync use case)
- Fix crypto config check
- Minor API cleanup
- Test suite fixes</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.28-1" date="1695816000">- New upstream release
- Fix build on i686 machines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.30-1" date="1733140800">- Rebase to 1.30
  Resolves: RHEL-69636</changelog>
</package>
<package pkgid="d40ffd28bbf5597d1c7b44dd6b426615dd7fa38397345dbcab5f87f97a1fa76b" name="libknet1-compress-bzip2-plugin" arch="x86_64">
  <version epoch="0" ver="1.30" rel="1.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.25-3" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.26-1" date="1688990400">- New upstream release
- Improve TX performance and use less CPU
- minor other improvements
- Build system update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.27-1" date="1695729600">- New upstream release
- Fix potential startup race condition (corosync use case)
- Fix crypto config check
- Minor API cleanup
- Test suite fixes</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.28-1" date="1695816000">- New upstream release
- Fix build on i686 machines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.30-1" date="1733140800">- Rebase to 1.30
  Resolves: RHEL-69636</changelog>
</package>
<package pkgid="ab1baf221d1348de3e17a907e95ee5b6438698c88f9a1334339a6ce4a729c0cf" name="libknet1-compress-lz4-plugin" arch="x86_64">
  <version epoch="0" ver="1.30" rel="1.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.25-3" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.26-1" date="1688990400">- New upstream release
- Improve TX performance and use less CPU
- minor other improvements
- Build system update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.27-1" date="1695729600">- New upstream release
- Fix potential startup race condition (corosync use case)
- Fix crypto config check
- Minor API cleanup
- Test suite fixes</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.28-1" date="1695816000">- New upstream release
- Fix build on i686 machines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.30-1" date="1733140800">- Rebase to 1.30
  Resolves: RHEL-69636</changelog>
</package>
<package pkgid="1e8d2eba7f0cca8518783fa54aae8b1dbcfb3b4b71688fff278d43ff12860d76" name="libknet1-compress-lzma-plugin" arch="x86_64">
  <version epoch="0" ver="1.30" rel="1.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.25-3" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.26-1" date="1688990400">- New upstream release
- Improve TX performance and use less CPU
- minor other improvements
- Build system update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.27-1" date="1695729600">- New upstream release
- Fix potential startup race condition (corosync use case)
- Fix crypto config check
- Minor API cleanup
- Test suite fixes</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.28-1" date="1695816000">- New upstream release
- Fix build on i686 machines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.30-1" date="1733140800">- Rebase to 1.30
  Resolves: RHEL-69636</changelog>
</package>
<package pkgid="2c087ca6b977549acacbe04c6e6f11c9d64267003b6f56e990576578a10ed158" name="libknet1-compress-lzo2-plugin" arch="x86_64">
  <version epoch="0" ver="1.30" rel="1.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.25-3" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.26-1" date="1688990400">- New upstream release
- Improve TX performance and use less CPU
- minor other improvements
- Build system update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.27-1" date="1695729600">- New upstream release
- Fix potential startup race condition (corosync use case)
- Fix crypto config check
- Minor API cleanup
- Test suite fixes</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.28-1" date="1695816000">- New upstream release
- Fix build on i686 machines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.30-1" date="1733140800">- Rebase to 1.30
  Resolves: RHEL-69636</changelog>
</package>
<package pkgid="a9c8ca99320733b3ce49dcddc334168fff020963cffeb9aa0efc6e530ed32298" name="libknet1-compress-plugins-all" arch="x86_64">
  <version epoch="0" ver="1.30" rel="1.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.25-3" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.26-1" date="1688990400">- New upstream release
- Improve TX performance and use less CPU
- minor other improvements
- Build system update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.27-1" date="1695729600">- New upstream release
- Fix potential startup race condition (corosync use case)
- Fix crypto config check
- Minor API cleanup
- Test suite fixes</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.28-1" date="1695816000">- New upstream release
- Fix build on i686 machines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.30-1" date="1733140800">- Rebase to 1.30
  Resolves: RHEL-69636</changelog>
</package>
<package pkgid="d16461c969378345d57dca1a5a710664a8e31056438e3b53ebbe9318f086c771" name="libknet1-compress-zlib-plugin" arch="x86_64">
  <version epoch="0" ver="1.30" rel="1.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.25-3" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.26-1" date="1688990400">- New upstream release
- Improve TX performance and use less CPU
- minor other improvements
- Build system update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.27-1" date="1695729600">- New upstream release
- Fix potential startup race condition (corosync use case)
- Fix crypto config check
- Minor API cleanup
- Test suite fixes</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.28-1" date="1695816000">- New upstream release
- Fix build on i686 machines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.30-1" date="1733140800">- Rebase to 1.30
  Resolves: RHEL-69636</changelog>
</package>
<package pkgid="5ea16a70c6250d9a6d7a7676046266051625cfb498ea38163d7240aa04533c66" name="libknet1-compress-zstd-plugin" arch="x86_64">
  <version epoch="0" ver="1.30" rel="1.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.25-3" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.26-1" date="1688990400">- New upstream release
- Improve TX performance and use less CPU
- minor other improvements
- Build system update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.27-1" date="1695729600">- New upstream release
- Fix potential startup race condition (corosync use case)
- Fix crypto config check
- Minor API cleanup
- Test suite fixes</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.28-1" date="1695816000">- New upstream release
- Fix build on i686 machines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.30-1" date="1733140800">- Rebase to 1.30
  Resolves: RHEL-69636</changelog>
</package>
<package pkgid="21c2fe9433e01b0ce6f4ac357a6ecd96a31692286cba0a76521da38bc044137a" name="libknet1-crypto-nss-plugin" arch="x86_64">
  <version epoch="0" ver="1.30" rel="1.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.25-3" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.26-1" date="1688990400">- New upstream release
- Improve TX performance and use less CPU
- minor other improvements
- Build system update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.27-1" date="1695729600">- New upstream release
- Fix potential startup race condition (corosync use case)
- Fix crypto config check
- Minor API cleanup
- Test suite fixes</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.28-1" date="1695816000">- New upstream release
- Fix build on i686 machines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.30-1" date="1733140800">- Rebase to 1.30
  Resolves: RHEL-69636</changelog>
</package>
<package pkgid="d1803303af3d1d0e6d14718a3432b7552d804f48ef2d63ae7e5ccef2b15b3228" name="libknet1-crypto-openssl-plugin" arch="x86_64">
  <version epoch="0" ver="1.30" rel="1.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.25-3" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.26-1" date="1688990400">- New upstream release
- Improve TX performance and use less CPU
- minor other improvements
- Build system update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.27-1" date="1695729600">- New upstream release
- Fix potential startup race condition (corosync use case)
- Fix crypto config check
- Minor API cleanup
- Test suite fixes</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.28-1" date="1695816000">- New upstream release
- Fix build on i686 machines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.30-1" date="1733140800">- Rebase to 1.30
  Resolves: RHEL-69636</changelog>
</package>
<package pkgid="daeaa25451e498b94b0e11b7a5efa15c64f1fdeb26aeef51e8541b792a89b746" name="libknet1-crypto-plugins-all" arch="x86_64">
  <version epoch="0" ver="1.30" rel="1.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.25-3" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.26-1" date="1688990400">- New upstream release
- Improve TX performance and use less CPU
- minor other improvements
- Build system update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.27-1" date="1695729600">- New upstream release
- Fix potential startup race condition (corosync use case)
- Fix crypto config check
- Minor API cleanup
- Test suite fixes</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.28-1" date="1695816000">- New upstream release
- Fix build on i686 machines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.30-1" date="1733140800">- Rebase to 1.30
  Resolves: RHEL-69636</changelog>
</package>
<package pkgid="48c074d06ffd53735509621293fe3dca538b16351a9e36e122fb7dab10e82a48" name="libknet1-devel" arch="x86_64">
  <version epoch="0" ver="1.30" rel="1.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.25-3" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.26-1" date="1688990400">- New upstream release
- Improve TX performance and use less CPU
- minor other improvements
- Build system update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.27-1" date="1695729600">- New upstream release
- Fix potential startup race condition (corosync use case)
- Fix crypto config check
- Minor API cleanup
- Test suite fixes</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.28-1" date="1695816000">- New upstream release
- Fix build on i686 machines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.30-1" date="1733140800">- Rebase to 1.30
  Resolves: RHEL-69636</changelog>
</package>
<package pkgid="5c0440d70638ed4d943040d03b3d78f0164f4138df77a4a1724b5457ba923f8b" name="libknet1-plugins-all" arch="x86_64">
  <version epoch="0" ver="1.30" rel="1.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.25-3" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.26-1" date="1688990400">- New upstream release
- Improve TX performance and use less CPU
- minor other improvements
- Build system update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.27-1" date="1695729600">- New upstream release
- Fix potential startup race condition (corosync use case)
- Fix crypto config check
- Minor API cleanup
- Test suite fixes</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.28-1" date="1695816000">- New upstream release
- Fix build on i686 machines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.30-1" date="1733140800">- Rebase to 1.30
  Resolves: RHEL-69636</changelog>
</package>
<package pkgid="ad5258b5f8c467aae0e217d57d098fc2a20efcd6dfd4e704dd2ad5e3b15c35e8" name="libkrun" arch="x86_64">
  <version epoch="0" ver="1.17.4" rel="1.el10"/>
  <changelog author="Jake Correnti &lt;jcorrent@redhat.com&gt; - 1.17.4-1" date="1771848000">- Initial commit on c10s
- Resolves: RHEL-139928</changelog>
</package>
<package pkgid="abd4d1f1e6d12bcb9919cba6580b113860973a5ea284cb75bb0b88818eef92f7" name="libkrun-devel" arch="x86_64">
  <version epoch="0" ver="1.17.4" rel="1.el10"/>
  <changelog author="Jake Correnti &lt;jcorrent@redhat.com&gt; - 1.17.4-1" date="1771848000">- Initial commit on c10s
- Resolves: RHEL-139928</changelog>
</package>
<package pkgid="4293768f002c5ce98361bc57ffc932628d139bd34524156af996766c34af6a84" name="libksba" arch="x86_64">
  <version epoch="0" ver="1.6.7" rel="2.el10"/>
  <changelog author="Todd Zullinger &lt;tmz@pobox.com&gt; - 1.6.3-1" date="1671537600">- New upstream release (#2155172)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.6.4-1" date="1687176000">- New upstream release (#2215873)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.6.5-1" date="1700136000">- New upstream release (#2250046)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.5-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.5-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.5-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.6.7-1" date="1719921600">- New upstream release (#2265627)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.7-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f93aa0511c8afd1f54370682f59d37d81e06b784edbbc241ce8eeb6b7bf3fa44" name="libksba-devel" arch="x86_64">
  <version epoch="0" ver="1.6.7" rel="2.el10"/>
  <changelog author="Todd Zullinger &lt;tmz@pobox.com&gt; - 1.6.3-1" date="1671537600">- New upstream release (#2155172)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.3-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.6.4-1" date="1687176000">- New upstream release (#2215873)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.6.5-1" date="1700136000">- New upstream release (#2250046)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.5-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.5-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.5-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.6.7-1" date="1719921600">- New upstream release (#2265627)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.7-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2fe8c2119031db99af0c8797dfda4521d37f54b8311cc934363a8481df056227" name="liblc3" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="1.el10"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.0.4-2" date="1699876800">- Review fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.4-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.4-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.4-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.0.4-7" date="1750161600">- Bump release for CRB inclusion
  Resolves: RHEL-96893</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 1.1.3-1" date="1762689600">- Rebase to 1.1.3
  Resolves: RHEL-127169</changelog>
</package>
<package pkgid="51680eae5584c548b28c67e8863441afbd458db4121a57d0e3e9f491aada25df" name="liblc3-devel" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="1.el10"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.0.4-2" date="1699876800">- Review fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.4-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.4-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.4-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.0.4-7" date="1750161600">- Bump release for CRB inclusion
  Resolves: RHEL-96893</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 1.1.3-1" date="1762689600">- Rebase to 1.1.3
  Resolves: RHEL-127169</changelog>
</package>
<package pkgid="cc3dd75836054765365f1ad1e9fb6f73b943fc1ede01774234176768787a896f" name="liblc3-utils" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="1.el10"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.0.4-2" date="1699876800">- Review fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.4-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.4-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.4-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.0.4-7" date="1750161600">- Bump release for CRB inclusion
  Resolves: RHEL-96893</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 1.1.3-1" date="1762689600">- Rebase to 1.1.3
  Resolves: RHEL-127169</changelog>
</package>
<package pkgid="6961e4610570e92e2210318193cb84ac11c8b6ef5603e82cd287d7f57da85f24" name="libldac" arch="x86_64">
  <version epoch="0" ver="2.0.2.3" rel="17.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2.3-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2.3-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2.3-14" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2.3-15" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.2.3-16" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.2.3-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="364960edca60c9d781ec5e95e9ca6ba90676e4e59a486d25019be1f51b5a82a0" name="libldac-devel" arch="x86_64">
  <version epoch="0" ver="2.0.2.3" rel="17.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2.3-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2.3-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2.3-14" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2.3-15" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.2.3-16" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.2.3-17" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d7a9926bafa03954c3c5552cc328c17a783e80bfe8a63e15831b425074557154" name="libldb" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="107.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-100" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114545 - Update to version 4.23.4
- resolves: RHEL-132338 - Fix Time Machine backup
- resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-101" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-132975</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
</package>
<package pkgid="97ac9fcb84d7202788974ee41cbed00de80cd54a4711789082b2fbd170c283c1" name="libldb" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="109.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-108" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-109" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="91db219181ddc3d8015760ada166a203145d02b6cc10437ade90a44f212d7da2" name="libldb-devel" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="107.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-100" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114545 - Update to version 4.23.4
- resolves: RHEL-132338 - Fix Time Machine backup
- resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-101" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-132975</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
</package>
<package pkgid="e0a2aad45c8575ccf9196af6a0e051752fd9147e9428e8857d11daaa26827da0" name="libldb-devel" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="109.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-108" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-109" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="4ed1fa47677f293ba71b02172c169ed02f9f60d47004c369e12e343f0679cc09" name="liblerc" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5420ff8dda46c82f0915f5f84c1a628aa7b4d76c59fa35a46a4a76e95076cb5f" name="liblerc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.0.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="740f32ccd58431745b6d2e8df954eea316abf83cdf6141dd1fe8e5f7d0a6a80e" name="liblognorm" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="15.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.0.6-6" date="1668686400">- Fix configure.ac/configure glitch (#2141801)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.0.6-8" date="1685534400">- Update License tag for SPDX
- Apache 2.0 was missing according to upstream sources</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.0.6-9" date="1686225600">- Port pcre dependency to pcre2
  resolves: rhbz#2128320</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-11" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-12" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.0.6-14" date="1722945600">- Allow dropping empty json objects
  Resolves: RHEL-39979</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="7b5fd256c1dd5dc218fdef58d62812e308ce46a3f0d98582912a54568ced122c" name="liblognorm-devel" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="15.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.0.6-6" date="1668686400">- Fix configure.ac/configure glitch (#2141801)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.0.6-8" date="1685534400">- Update License tag for SPDX
- Apache 2.0 was missing according to upstream sources</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.0.6-9" date="1686225600">- Port pcre dependency to pcre2
  resolves: rhbz#2128320</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-11" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-12" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.0.6-14" date="1722945600">- Allow dropping empty json objects
  Resolves: RHEL-39979</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1ac710d09405cfb43f6c5f243dabd9ec09a96bb6047502c5d4e351f88e20e3bc" name="liblognorm-doc" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="15.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.0.6-6" date="1668686400">- Fix configure.ac/configure glitch (#2141801)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.0.6-8" date="1685534400">- Update License tag for SPDX
- Apache 2.0 was missing according to upstream sources</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.0.6-9" date="1686225600">- Port pcre dependency to pcre2
  resolves: rhbz#2128320</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-11" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-12" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.0.6-14" date="1722945600">- Allow dropping empty json objects
  Resolves: RHEL-39979</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b6aab54b25629f4f0892fb424ff63b33153659974caeb0075772ce1b5a34f61f" name="liblognorm-utils" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="15.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.0.6-6" date="1668686400">- Fix configure.ac/configure glitch (#2141801)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.0.6-8" date="1685534400">- Update License tag for SPDX
- Apache 2.0 was missing according to upstream sources</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.0.6-9" date="1686225600">- Port pcre dependency to pcre2
  resolves: rhbz#2128320</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-11" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-12" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.0.6-14" date="1722945600">- Allow dropping empty json objects
  Resolves: RHEL-39979</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.6-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="96e051a68b27be9783df4fabffb504ca98ee001fe4a8e1b13edd4935728ee247" name="liblouis" arch="x86_64">
  <version epoch="0" ver="3.28.0" rel="7.el10"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; - 3.25.0-1" date="1678190400">- Update to 3.25.0</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 3.25.0-2" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.28.0-1" date="1704283200">- Update to 3.28.0
- Install internal.h for MuseScore
- Drop ancient obsoletes
- Build the python package with dist-info
- Add tables subpackage for the noarch data
- Complete and correct SPDX migration
- Remove need for chrpath
- Minor spec file cleanups</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.28.0-4" date="1707739200">- Fix RHEL build after RPATH removal</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.28.0-5" date="1707739201">- Hardlink, rather than symlink, duplicate table files</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="66be54e032b8b4af596483a50f80a9783205ce18906d7944b8454f39009b9737" name="liblouis-devel" arch="x86_64">
  <version epoch="0" ver="3.28.0" rel="7.el10"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; - 3.25.0-1" date="1678190400">- Update to 3.25.0</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 3.25.0-2" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.28.0-1" date="1704283200">- Update to 3.28.0
- Install internal.h for MuseScore
- Drop ancient obsoletes
- Build the python package with dist-info
- Add tables subpackage for the noarch data
- Complete and correct SPDX migration
- Remove need for chrpath
- Minor spec file cleanups</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.28.0-4" date="1707739200">- Fix RHEL build after RPATH removal</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.28.0-5" date="1707739201">- Hardlink, rather than symlink, duplicate table files</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b90bd72f2e7a6f846cc8e656ad57a5fae8ebb4288309cf285ffd51f014a2d059" name="liblouis-doc" arch="noarch">
  <version epoch="0" ver="3.28.0" rel="7.el10"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; - 3.25.0-1" date="1678190400">- Update to 3.25.0</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 3.25.0-2" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.28.0-1" date="1704283200">- Update to 3.28.0
- Install internal.h for MuseScore
- Drop ancient obsoletes
- Build the python package with dist-info
- Add tables subpackage for the noarch data
- Complete and correct SPDX migration
- Remove need for chrpath
- Minor spec file cleanups</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.28.0-4" date="1707739200">- Fix RHEL build after RPATH removal</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.28.0-5" date="1707739201">- Hardlink, rather than symlink, duplicate table files</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="83fe59d4e854815224f2b9e5a45789ab377d2673ac2044cfff8c748a7f400db9" name="liblouis-tables" arch="noarch">
  <version epoch="0" ver="3.28.0" rel="7.el10"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; - 3.25.0-1" date="1678190400">- Update to 3.25.0</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 3.25.0-2" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.28.0-1" date="1704283200">- Update to 3.28.0
- Install internal.h for MuseScore
- Drop ancient obsoletes
- Build the python package with dist-info
- Add tables subpackage for the noarch data
- Complete and correct SPDX migration
- Remove need for chrpath
- Minor spec file cleanups</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.28.0-4" date="1707739200">- Fix RHEL build after RPATH removal</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.28.0-5" date="1707739201">- Hardlink, rather than symlink, duplicate table files</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ade8ef9ac2fb224fd70af8e19aa3ef1bf2902567ed4c16bb4b6a0e103a1be917" name="liblouis-utils" arch="x86_64">
  <version epoch="0" ver="3.28.0" rel="7.el10"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; - 3.25.0-1" date="1678190400">- Update to 3.25.0</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 3.25.0-2" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.28.0-1" date="1704283200">- Update to 3.28.0
- Install internal.h for MuseScore
- Drop ancient obsoletes
- Build the python package with dist-info
- Add tables subpackage for the noarch data
- Complete and correct SPDX migration
- Remove need for chrpath
- Minor spec file cleanups</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.28.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.28.0-4" date="1707739200">- Fix RHEL build after RPATH removal</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.28.0-5" date="1707739201">- Hardlink, rather than symlink, duplicate table files</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.28.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="724212cc9cb517200ef4a8b14b0b34cd4310ef96d6f15841cff52c6851c393e6" name="liblsan" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="40dd59b3e89050c3035248f1a5789a874f923e846803f6c6c624aa7b68fef88b" name="liblsan-static" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="6d44adb3f4966ad86f5058044dee7464418a993797c07a535ddc4322c094da4a" name="libluksmeta" arch="x86_64">
  <version epoch="0" ver="10" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9-17" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9-18" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="koncpa &lt;pkoncity@redhat.com&gt; - 9-23" date="1716465600">- Enable RHEL gating for jose</changelog>
  <changelog author="koncpa &lt;pkoncity@redhat.com&gt; - 9-24" date="1716811200">- Enable fmf init for luksmeta</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9-25" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9-26" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 10-1" date="1764072000">- Align to upstream release 10</changelog>
</package>
<package pkgid="c0e6ca2bc96114ade4c4e3367e68e86e78819311fd7387a31da1d17393168a21" name="libluksmeta-devel" arch="x86_64">
  <version epoch="0" ver="10" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9-17" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9-18" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="koncpa &lt;pkoncity@redhat.com&gt; - 9-23" date="1716465600">- Enable RHEL gating for jose</changelog>
  <changelog author="koncpa &lt;pkoncity@redhat.com&gt; - 9-24" date="1716811200">- Enable fmf init for luksmeta</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9-25" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9-26" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Sergio Arroutbi &lt;sarroutb@redhat.com&gt; - 10-1" date="1764072000">- Align to upstream release 10</changelog>
</package>
<package pkgid="03c3a5c4987d3c0ce4d4628464f5a706a41889adc4fe66a437fa7138e0b3c8c0" name="libmad" arch="x86_64">
  <version epoch="0" ver="0.16.4" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.1b-35" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.1b-36" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 0.16.3-1" date="1693569600">- Update to 0.16.3</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 0.16.3-2" date="1693569601">- copy libmad.pc to mad.pc for compatibility</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 0.16.4-1" date="1705320000">- Update libmad to 0.16.4
- Drop Add_unversioned_so.patch, upstream fixed it
- mad.pc is back</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16.4-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16.4-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.16.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.16.4-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c36d404a2153b83897a79deea9d6a8b253dec35df393a56e675875607eb7b4c6" name="libmad-devel" arch="x86_64">
  <version epoch="0" ver="0.16.4" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.1b-35" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.1b-36" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 0.16.3-1" date="1693569600">- Update to 0.16.3</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 0.16.3-2" date="1693569601">- copy libmad.pc to mad.pc for compatibility</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 0.16.4-1" date="1705320000">- Update libmad to 0.16.4
- Drop Add_unversioned_so.patch, upstream fixed it
- mad.pc is back</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16.4-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16.4-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.16.4-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.16.4-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ef45b2361476a0b03a801f5857a3095f85260bca2aee9d82880617548249ffa6" name="libmandoc-devel" arch="x86_64">
  <version epoch="0" ver="1.14.6" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.6-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 1.14.6-6" date="1695297600">- Convert License tag to SPDX expression</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.6-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.6-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.6-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.6-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 1.14.6-11" date="1734436800">- Ensure correct LDFLAGS are used for linking</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 1.14.6-12" date="1734436801">- Bump the release number because I added a non-packaged file
  (gating.yaml) and need to trigger a gating run again with a new NVR</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 1.14.6-13" date="1734436802">- Modify gating.yaml based on gating system feedback</changelog>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 1.14.6-14" date="1734523200">- Add empty rules list to gating.yaml</changelog>
</package>
<package pkgid="5cc24024873510deeb64c0e576a2fd5e3442ddd1f855df8eaf1746653c6b3a7d" name="libmaxminddb" arch="x86_64">
  <version epoch="0" ver="1.9.1" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.8.0-1" date="1700049600">- Upgrade to 1.8.0 (#2248696)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.9.1-1" date="1705838401">- Upgrade to 1.9.1 (#2257602)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-2" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="249a8b6b3bb86cec38bead59ef18ef55f503b3a5f752cece7a8ceedde9ff8915" name="libmaxminddb-devel" arch="x86_64">
  <version epoch="0" ver="1.9.1" rel="4.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.8.0-1" date="1700049600">- Upgrade to 1.8.0 (#2248696)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.9.1-1" date="1705838401">- Upgrade to 1.9.1 (#2257602)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-2" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0a14b57125e48dedeba10d5c4281db124adf0a755c55ecfc391cc8d76f0ec8d4" name="libmbim" arch="x86_64">
  <version epoch="0" ver="1.32.0" rel="1.el10"/>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1.28.4-3" date="1698926400">- migrate to SPDX license</changelog>
  <changelog author="Dennis Gilmore &lt;dennis@ausil.us&gt; - 1.30.0-1" date="1704801600">- update to 1.30.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.30.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.30.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.30.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.30.0-5" date="1719316800">- Add patches for a pair of bugs that make static analysis unhappy (RHEL-38475)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.30.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.32.0-1" date="1755086400">- Update to 1.32 (RHEL-101710)</changelog>
</package>
<package pkgid="a7e09f1b576f0107120b449b84e32415d5fc76ba2541df00a9d33161b889266f" name="libmbim-devel" arch="x86_64">
  <version epoch="0" ver="1.32.0" rel="1.el10"/>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1.28.4-3" date="1698926400">- migrate to SPDX license</changelog>
  <changelog author="Dennis Gilmore &lt;dennis@ausil.us&gt; - 1.30.0-1" date="1704801600">- update to 1.30.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.30.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.30.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.30.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.30.0-5" date="1719316800">- Add patches for a pair of bugs that make static analysis unhappy (RHEL-38475)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.30.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.32.0-1" date="1755086400">- Update to 1.32 (RHEL-101710)</changelog>
</package>
<package pkgid="7ba2b8a67b1b4151772bbe9f4ae5c82ea82fd70cf7c7ab3a5ab6e4c8e73f458d" name="libmbim-utils" arch="x86_64">
  <version epoch="0" ver="1.32.0" rel="1.el10"/>
  <changelog author="&#xCD;&#xF1;igo Huguet &lt;ihuguet@redhat.com&gt; - 1.28.4-3" date="1698926400">- migrate to SPDX license</changelog>
  <changelog author="Dennis Gilmore &lt;dennis@ausil.us&gt; - 1.30.0-1" date="1704801600">- update to 1.30.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.30.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.30.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.30.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.30.0-5" date="1719316800">- Add patches for a pair of bugs that make static analysis unhappy (RHEL-38475)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.30.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.32.0-1" date="1755086400">- Update to 1.32 (RHEL-101710)</changelog>
</package>
<package pkgid="65a0d04c1f76493263c6768446c733aa00da2ee8585349fd42de652586cf7115" name="libmicrohttpd" arch="x86_64">
  <version epoch="1" ver="1.0.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.75-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Martin Gansser &lt;martinkg@fedoraproject.org&gt; - 1:0.9.76-1" date="1677585600">- Update to 1:0.9.76</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.76-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Martin Gansser &lt;martinkg@fedoraproject.org&gt; - 1:0.9.77-1" date="1690545600">- Update to 1:0.9.77</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:0.9.77-2" date="1691409600">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.77-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.77-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Martin Gansser &lt;martinkg@fedoraproject.org&gt; - 1:1.0.0-1" date="1706875200">- Update to 1:1.0.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5611ddfb96efc95239d829c0dca46b5a9deb859e504098502c5c6ec364466453" name="libmicrohttpd-devel" arch="x86_64">
  <version epoch="1" ver="1.0.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.75-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Martin Gansser &lt;martinkg@fedoraproject.org&gt; - 1:0.9.76-1" date="1677585600">- Update to 1:0.9.76</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.76-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Martin Gansser &lt;martinkg@fedoraproject.org&gt; - 1:0.9.77-1" date="1690545600">- Update to 1:0.9.77</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:0.9.77-2" date="1691409600">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.77-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.77-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Martin Gansser &lt;martinkg@fedoraproject.org&gt; - 1:1.0.0-1" date="1706875200">- Update to 1:1.0.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a451ea62480b1b72892cf2e3ea9d2311d2eb67c415a4220162481cd01180803b" name="libmicrohttpd-doc" arch="noarch">
  <version epoch="1" ver="1.0.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.75-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Martin Gansser &lt;martinkg@fedoraproject.org&gt; - 1:0.9.76-1" date="1677585600">- Update to 1:0.9.76</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.76-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Martin Gansser &lt;martinkg@fedoraproject.org&gt; - 1:0.9.77-1" date="1690545600">- Update to 1:0.9.77</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:0.9.77-2" date="1691409600">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.77-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.77-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Martin Gansser &lt;martinkg@fedoraproject.org&gt; - 1:1.0.0-1" date="1706875200">- Update to 1:1.0.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.0.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6e3b33269537a0f5d365b869d056e80f0e9798f31caaf5fb598e9cad1d818236" name="libmng" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="23.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-17" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 2.0.3-18" date="1677585600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-19" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-20" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-21" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.3-22" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.3-23" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1016dc2c7c008c247f118110ddee3b4a805ea021fd93953c6c8654e06a16b0d8" name="libmng-devel" arch="x86_64">
  <version epoch="0" ver="2.0.3" rel="23.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-17" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 2.0.3-18" date="1677585600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-19" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-20" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-21" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.3-22" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.3-23" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="35eb8910c7649bb781bb8419616935792d529587a80864c9000cfd8b4e53957c" name="libmnl" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2c502d694b0928e683ad8bc7356af44852dbe998bae0284e5e35240d4c362b10" name="libmnl-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="726c45c6b1c823de66c8edffb0c2f509c952814e0cccaa607ab39a8a3fc3289d" name="libmnl-static" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3e91a1b7eeb937e37d11c16d8399e00622e2539aa1554ad98e6be91d369487d7" name="libmodulemd" arch="x86_64">
  <version epoch="0" ver="2.15.0" rel="12.el10"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt;  - 2.15.0-3" date="1683720000">- Rebuild for rpm-4.18.90</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.15.0-4" date="1686830400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15.0-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15.0-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.15.0-8" date="1706529600">- Fix building with glib2-doc 2.79.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.15.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.15.0-10" date="1719403200">- Fix building with glib2-doc 2.80.1 (RHEL-45188)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.15.0-11" date="1719576000">- Rebuild without STI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.15.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2597a11ceff8b79208f7b3cd183b750d102bb54947e73903e30919697cea69cf" name="libmodulemd-devel" arch="x86_64">
  <version epoch="0" ver="2.15.0" rel="12.el10"/>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt;  - 2.15.0-3" date="1683720000">- Rebuild for rpm-4.18.90</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.15.0-4" date="1686830400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15.0-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15.0-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.15.0-8" date="1706529600">- Fix building with glib2-doc 2.79.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.15.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.15.0-10" date="1719403200">- Fix building with glib2-doc 2.80.1 (RHEL-45188)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.15.0-11" date="1719576000">- Rebuild without STI tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.15.0-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="83995f31b5690335b88a859824ad6dcd3bef68f13f64b88d72859ae10f535541" name="libmount" arch="x86_64">
  <version epoch="0" ver="2.40.2" rel="18.el10"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-9" date="1736856000">- more(1): make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-10" date="1739448000">- blkid: allow up to 64k erofs block sizes</changelog>
  <changelog author="Frank Liang &lt;xiliang@redhat.com&gt; - 2.40.2-11" date="1745064000">- agetty: fix stdin conversion to tty name</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-12" date="1753790400">- coresched: backport new tool to RHEL-10</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-13" date="1753876800">- lscpu: update table with ARM IDs</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-14" date="1759147200">- lscpu: Add NVIDIA Olympus arm64 core
- libfdisk: improve collision reporting
- libfdisk: (dos) ignore incomplete EBR for non-wholedisk
- wall: always use utmp as fallback</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-15" date="1761220800">- mount: improve --all documentation
- libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
- libblkid: use snprintf() instead of sprintf()</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-16" date="1763553600">- libfdisk: fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-17" date="1765800000">- Fix heap buffer overread in setpwnam() [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-18" date="1768478400">- use sysuser setting for uuidd</changelog>
</package>
<package pkgid="aabd75e8dc20f6c3019cfd3da6e0722f8b992ede4999e1ca8783d242a6cdd806" name="libmount-devel" arch="x86_64">
  <version epoch="0" ver="2.40.2" rel="18.el10"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-9" date="1736856000">- more(1): make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-10" date="1739448000">- blkid: allow up to 64k erofs block sizes</changelog>
  <changelog author="Frank Liang &lt;xiliang@redhat.com&gt; - 2.40.2-11" date="1745064000">- agetty: fix stdin conversion to tty name</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-12" date="1753790400">- coresched: backport new tool to RHEL-10</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-13" date="1753876800">- lscpu: update table with ARM IDs</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-14" date="1759147200">- lscpu: Add NVIDIA Olympus arm64 core
- libfdisk: improve collision reporting
- libfdisk: (dos) ignore incomplete EBR for non-wholedisk
- wall: always use utmp as fallback</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-15" date="1761220800">- mount: improve --all documentation
- libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
- libblkid: use snprintf() instead of sprintf()</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-16" date="1763553600">- libfdisk: fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-17" date="1765800000">- Fix heap buffer overread in setpwnam() [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-18" date="1768478400">- use sysuser setting for uuidd</changelog>
</package>
<package pkgid="d268295b5bfaceb99e5047c7fa2d2e83825b9ca7200e18cee2c07ce68fd4e6d6" name="libmpc" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="7.el10"/>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1.3.0-1" date="1670587200">- Upgrade to libmpc version 1.3.0 (rhbz#2152180)
- Convert License tags to SPDX</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1.3.1-1" date="1671192000">- Upgrade to libmpc version 1.3.1 (rhbz#2154360)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="968b9d88aacee44a0780bf1f057db17d000af81444b05508a77648fa4972dad1" name="libmpc-devel" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="7.el10"/>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1.3.0-1" date="1670587200">- Upgrade to libmpc version 1.3.0 (rhbz#2152180)
- Convert License tags to SPDX</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1.3.1-1" date="1671192000">- Upgrade to libmpc version 1.3.1 (rhbz#2154360)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c30bcb623ed61ed580cf767d7ea58d35a49942dc235e1efae239c70fc421c8fa" name="libmpc-doc" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="7.el10"/>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1.3.0-1" date="1670587200">- Upgrade to libmpc version 1.3.0 (rhbz#2152180)
- Convert License tags to SPDX</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1.3.1-1" date="1671192000">- Upgrade to libmpc version 1.3.1 (rhbz#2154360)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.1-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="51bbd6d724860390880adf4f7690d584ff01501bb3b922979e73466f06820d10" name="libmpeg2" arch="x86_64">
  <version epoch="0" ver="0.5.1" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.1-26" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.1-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.1-28" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.1-29" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.1-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.1-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="29205a7f97dd2960e192c6cfb5b2a47a1b6f3b16cd78847e7d895f15a7cf8745" name="libmpeg2-devel" arch="x86_64">
  <version epoch="0" ver="0.5.1" rel="31.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.1-26" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.1-27" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.1-28" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.1-29" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.1-30" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.1-31" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="36a54a0aa73229d5ae56a06b20733fddb93f58ddad510c484018377e82253df0" name="libmsi1" arch="x86_64">
  <version epoch="0" ver="0.103" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101.32-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.102-1" date="1687262400">- New release v0.102</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.102-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0.102-3" date="1694692800">- Fix build on s390x
- More SPDX migration</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.103-1" date="1695124800">- new version v0.103
- Rename libmsi.so -&gt; libmsi-1.0.so</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.103-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.103-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 0.103-4" date="1719748800">- Bump release
- RHEL-45477 - Update gating.yaml for RHEL10</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 0.103-5" date="1719748801">- RHEL-45477 - Fix gating error for RHEL10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.103-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="20304ed7a40548fd5e8542914206678d6bff35b0d74d39d94210f385d824e860" name="libmsi1-devel" arch="x86_64">
  <version epoch="0" ver="0.103" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101.32-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.102-1" date="1687262400">- New release v0.102</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.102-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0.102-3" date="1694692800">- Fix build on s390x
- More SPDX migration</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.103-1" date="1695124800">- new version v0.103
- Rename libmsi.so -&gt; libmsi-1.0.so</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.103-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.103-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 0.103-4" date="1719748800">- Bump release
- RHEL-45477 - Update gating.yaml for RHEL10</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 0.103-5" date="1719748801">- RHEL-45477 - Fix gating error for RHEL10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.103-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9d0b40bf59468542f763c3f47e36ada8098e50744ca7b407bf5220b63950490a" name="libmspack" arch="x86_64">
  <version epoch="0" ver="0.10.1" rel="0.14.alpha.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.1-0.9.alpha" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.1-0.10.alpha" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.1-0.11.alpha" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.1-0.12.alpha" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.10.1-0.13.alpha" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.10.1-0.14.alpha" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fdceb47bb11827f2d1d7597e508d1fe632f06862e0754d60b47ed096a2356feb" name="libmspack-devel" arch="x86_64">
  <version epoch="0" ver="0.10.1" rel="0.14.alpha.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.1-0.9.alpha" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.1-0.10.alpha" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.1-0.11.alpha" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.1-0.12.alpha" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.10.1-0.13.alpha" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.10.1-0.14.alpha" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ad840f4056b4f4e5cafd9331ae9f820c6d25ea628491744720cc9895fcd6d5c5" name="libmtp" arch="x86_64">
  <version epoch="0" ver="1.1.19" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.19-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.19-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.19-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.19-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.1.19-10" date="1768305600">- Disable player match that breaks Bluetooth on Mediatek MT7925 adapters (RHEL-116829)</changelog>
</package>
<package pkgid="3b94c75e823cb773d3012cfd6866d62ea3a65f15bf244d322cef8daf90864245" name="libmtp-devel" arch="x86_64">
  <version epoch="0" ver="1.1.19" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.19-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.19-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.19-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.19-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.1.19-10" date="1768305600">- Disable player match that breaks Bluetooth on Mediatek MT7925 adapters (RHEL-116829)</changelog>
</package>
<package pkgid="fc0eceda7c47e61e2636d42d39c8aaf8c3c851256e8951eea71a340024586980" name="libmtp-examples" arch="x86_64">
  <version epoch="0" ver="1.1.19" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.19-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.19-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.19-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.19-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.1.19-10" date="1768305600">- Disable player match that breaks Bluetooth on Mediatek MT7925 adapters (RHEL-116829)</changelog>
</package>
<package pkgid="278f2d8dd96f30f2c214df286cc365800da0fb05e80320955a546652aa3b6a95" name="libnbd" arch="x86_64">
  <version epoch="0" ver="1.24.1" rel="1.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.24.1-1" date="1739793600">- Rebase to libnbd 1.24.1
  resolves: RHEL-111243
- Synch spec file with Fedora
- Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
  resolves: RHEL-129296
- Implement Post-Quantum Cryptography (PQC)
  resolves: RHEL-101267</changelog>
</package>
<package pkgid="672970471b0b710438138da407297b89a54660c0793e7c94f714532a4e53b1b2" name="libnbd-bash-completion" arch="noarch">
  <version epoch="0" ver="1.24.1" rel="1.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.24.1-1" date="1739793600">- Rebase to libnbd 1.24.1
  resolves: RHEL-111243
- Synch spec file with Fedora
- Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
  resolves: RHEL-129296
- Implement Post-Quantum Cryptography (PQC)
  resolves: RHEL-101267</changelog>
</package>
<package pkgid="766d555d1b3bf7689c5f152f9a7a2404d849b379b5a456603ec7e8c08153641d" name="libnbd-devel" arch="x86_64">
  <version epoch="0" ver="1.24.1" rel="1.el10"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.24.1-1" date="1739793600">- Rebase to libnbd 1.24.1
  resolves: RHEL-111243
- Synch spec file with Fedora
- Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
  resolves: RHEL-129296
- Implement Post-Quantum Cryptography (PQC)
  resolves: RHEL-101267</changelog>
</package>
<package pkgid="fd3fdae1fadec0fe6ec35b97b56b261b8f2a10b7c276cbfd6ef67854c4469269" name="libndp" arch="x86_64">
  <version epoch="0" ver="1.9" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Eric Garver &lt;eric@garver.life&gt; - 1.8-7" date="1696852800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Felix Maurer &lt;fmaurer@redhat.com&gt; - 1.9-1" date="1720612800">- Update to libndp 1.9</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2253bd2ed2a01276bcd4f359ede7d7017096a89d347b974a504fc7b805b6069a" name="libndp-devel" arch="x86_64">
  <version epoch="0" ver="1.9" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Eric Garver &lt;eric@garver.life&gt; - 1.8-7" date="1696852800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Felix Maurer &lt;fmaurer@redhat.com&gt; - 1.9-1" date="1720612800">- Update to libndp 1.9</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4a9eba5d33f7b5748f6765589046721adbd66da88590ab69f2672d828f3c7281" name="libnet" arch="x86_64">
  <version epoch="0" ver="1.3" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 1.2-8" date="1686916800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.3-1" date="1696334400">- 1.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3-5" date="1722945600">- copy gating.yaml from c9s</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3-6" date="1723032000">- applied patch to fix static analysis errors
  https://github.com/libnet/libnet/pull/170</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="113792c0fcac8184aee9909727e73af4716a369b1ebc91dc4062c8642b56c9ab" name="libnet-devel" arch="x86_64">
  <version epoch="0" ver="1.3" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 1.2-8" date="1686916800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.3-1" date="1696334400">- 1.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3-5" date="1722945600">- copy gating.yaml from c9s</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3-6" date="1723032000">- applied patch to fix static analysis errors
  https://github.com/libnet/libnet/pull/170</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a0a9e6271aa67186c72c2d427d32efd2d97ad4fd42b2b7d3470750ca6cab8bb2" name="libnet-doc" arch="noarch">
  <version epoch="0" ver="1.3" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 1.2-8" date="1686916800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.3-1" date="1696334400">- 1.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3-5" date="1722945600">- copy gating.yaml from c9s</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.3-6" date="1723032000">- applied patch to fix static analysis errors
  https://github.com/libnet/libnet/pull/170</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3e1c33e713baccd135407f76f10401cfb31cd89c912c84f8a41fdbe733f062d9" name="libnetapi" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="107.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-100" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114545 - Update to version 4.23.4
- resolves: RHEL-132338 - Fix Time Machine backup
- resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-101" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-132975</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
</package>
<package pkgid="2b4313c87c6c4e6cb6a40d7ec5ccb0effe4cfcafed7b5cfee8f9baca4fad6419" name="libnetapi" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="109.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-108" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-109" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="dc132f7530979d2aa5ff170fa8e677093bfff0a0a8d5051a8993a4097e39473d" name="libnetapi-devel" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="107.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-100" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114545 - Update to version 4.23.4
- resolves: RHEL-132338 - Fix Time Machine backup
- resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-101" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-132975</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
</package>
<package pkgid="7c1355ab16ca510f235d03dc9ac8cc16e89da4e5b9f61220022538b73bf0611c" name="libnetapi-devel" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="109.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-108" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-109" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="9e140f6d83a04a555aabee619ded1b2f2952f70fd8763b28e8a9367c64e2829d" name="libnetfilter_conntrack" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="12.el10"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.9-3" date="1692100800">- Convert license to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.9-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.9-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.9-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.9-7" date="1719316800">- Bump release to trigger CI</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.9-8" date="1722600000">- conntrack: bsf: Do not return -1 on failure</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.9-9" date="1725364800">- Bump release to trigger CI</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.9-10" date="1726056000">- Bump release to trigger CI</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.9-11" date="1726833600">- Bump release for beta</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.9-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b1861ff4c1d546fc7c49dba6cb28c92a8d22266da9920d771ebf0e7ee2fc743c" name="libnetfilter_conntrack-devel" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="12.el10"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.9-3" date="1692100800">- Convert license to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.9-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.9-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.9-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.9-7" date="1719316800">- Bump release to trigger CI</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.9-8" date="1722600000">- conntrack: bsf: Do not return -1 on failure</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.9-9" date="1725364800">- Bump release to trigger CI</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.9-10" date="1726056000">- Bump release to trigger CI</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.9-11" date="1726833600">- Bump release for beta</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.9-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2d012beb56538f88096726984ab0933f2024f6dae3775f4cd8d57d8c6604e8f9" name="libnetfilter_cthelper" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-24" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-25" date="1692100800">- Convert license to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-26" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-27" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.0-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.0-29" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.1-1" date="1731672000">- new version</changelog>
</package>
<package pkgid="8f06619dfb699b2c3703bc31adf2c31b0802b0ca2620452557e5ca804ddbf8f3" name="libnetfilter_cthelper-devel" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-24" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-25" date="1692100800">- Convert license to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-26" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-27" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.0-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.0-29" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.1-1" date="1731672000">- new version</changelog>
</package>
<package pkgid="cccb18ed6bab165b04b904177d071e8bb2d23637016701a9185f7e613259ad7b" name="libnetfilter_cttimeout" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="27.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-21" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-22" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-23" date="1692100800">- Convert license to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-24" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-25" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.0-26" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.0-27" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3f58439dfa4e45db991ae1172b0c2e23e0daae7576a316619359e21f46c475db" name="libnetfilter_cttimeout-devel" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="27.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-21" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-22" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-23" date="1692100800">- Convert license to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-24" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-25" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.0-26" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.0-27" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2365a5af29849633069dcd4ac0f3b8e5a3e489e45af66c517b1520f2fe6abeea" name="libnetfilter_queue" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.5-6" date="1692100800">- Convert license to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="551c6864283e79cde33b1d564b04bc0bdb6a8b14263b0942db294624bfdf5b9d" name="libnetfilter_queue-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.5-6" date="1692100800">- Convert license to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="387ac350c7e6a14accf30e1d8bcb9a71b2804737583cd46fc073766f04c609da" name="libnfnetlink" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-24" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.1-25" date="1691755200">- Convert license to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-26" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-27" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.1-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.2-1" date="1719316800">- Rebase to version 1.0.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.2-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.2-3" date="1731672000">- Bump release for gating CI</changelog>
</package>
<package pkgid="5b98219de4b5d14e32c407a2494bab511d512cdc9487438627e6d10f67e5bb8d" name="libnfnetlink-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-24" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.1-25" date="1691755200">- Convert license to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-26" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-27" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.1-28" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.2-1" date="1719316800">- Rebase to version 1.0.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.2-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.2-3" date="1731672000">- Bump release for gating CI</changelog>
</package>
<package pkgid="26f8dd7bcee630c0fabb439bbd2a9e9330f2c864ea5937132c126c2d2d9fdf59" name="libnfsidmap" arch="x86_64">
  <version epoch="1" ver="2.8.3" rel="5.el10"/>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.8.2-0" date="1733832000">- Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
  Resolves: RHEL-65826
  Resolves: RHEL-67041
  Resolves: RHEL-67168
  Resolves: RHEL-67786
  Resolves: RHEL-68575</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.8.2-1" date="1737028800">- nfsdcltrack related manpage and configure file cleanup (RHEL-73500)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.8.2-2" date="1738670400">- version handling fixes for nfsdctl and rpc.nfsd (RHEL-72477)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.8.2-3" date="1738756800">- fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
- /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.8.3-0" date="1745928000">- Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
  Resolves: RHEL-71286
  Resolves: RHEL-82418
  Resolves: RHEL-82557
  Resolves: RHEL-85409
  Resolves: RHEL-85413
  Resolves: RHEL-88768</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.8.3-1" date="1758196800">- Fix dependency definition in rpc-statd.service (RHEL-96937)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.8.3-2" date="1758628800">- nfsrahead: modify get_device_info logic (RHEL-115964)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.8.3-3" date="1767960000">- gssd: protect kerberos ticket cache access (RHEL-138461)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.8.3-4" date="1770292800">- nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
- Remove /var/lib/nfs/v4recovery (RHEL-137935)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.8.3-5" date="1772798400">- mountd: Minor refactor of get_rootfh() (RHEL-127093)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
- Add requires for selinux-policy (RHEL-127093)
  Resolves: CVE-2025-12801</changelog>
</package>
<package pkgid="a3a7e05f6c71d872e0119a9a3f0009c108e004a17b2cfa3e2322fba6d90c1145" name="libnfsidmap-devel" arch="x86_64">
  <version epoch="1" ver="2.8.3" rel="5.el10"/>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.8.2-0" date="1733832000">- Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
  Resolves: RHEL-65826
  Resolves: RHEL-67041
  Resolves: RHEL-67168
  Resolves: RHEL-67786
  Resolves: RHEL-68575</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.8.2-1" date="1737028800">- nfsdcltrack related manpage and configure file cleanup (RHEL-73500)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.8.2-2" date="1738670400">- version handling fixes for nfsdctl and rpc.nfsd (RHEL-72477)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.8.2-3" date="1738756800">- fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
- /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.8.3-0" date="1745928000">- Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
  Resolves: RHEL-71286
  Resolves: RHEL-82418
  Resolves: RHEL-82557
  Resolves: RHEL-85409
  Resolves: RHEL-85413
  Resolves: RHEL-88768</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.8.3-1" date="1758196800">- Fix dependency definition in rpc-statd.service (RHEL-96937)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.8.3-2" date="1758628800">- nfsrahead: modify get_device_info logic (RHEL-115964)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.8.3-3" date="1767960000">- gssd: protect kerberos ticket cache access (RHEL-138461)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.8.3-4" date="1770292800">- nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
- Remove /var/lib/nfs/v4recovery (RHEL-137935)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.8.3-5" date="1772798400">- mountd: Minor refactor of get_rootfh() (RHEL-127093)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
- Add requires for selinux-policy (RHEL-127093)
  Resolves: CVE-2025-12801</changelog>
</package>
<package pkgid="92c24cc6b58ef3850ba28c55626e46e2a500d4c9c4cafdff24a6495c6fe1f20e" name="libnftnl" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="3.el10"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.7-4.el10]" date="1725969600">- Bump release to trigger CI (Phil Sutter)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7-4.1" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.8-1.el10]" date="1730980800">- Rebase onto version 1.2.8 (Phil Sutter) [RHEL-66276]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.8-2.el10]" date="1733313600">- set: Fix for array overrun when setting NFTNL_SET_DESC_CONCAT (Phil Sutter) [RHEL-34697]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.8-3.el10]" date="1752580800">- trace: add support for TRACE_CT information (Phil Sutter) [RHEL-103864]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.8-4.el10]" date="1757505600">- udata: Introduce NFTNL_UDATA_TABLE_NFT{VER,BLD} (Phil Sutter) [RHEL-113823]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.8-5.el10]" date="1761825600">- Bump release for a side-tag build (Phil Sutter) [RHEL-125122]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.3.0-1.el10]" date="1763640000">- Rebase onto version 1.3.0 (Phil Sutter) [RHEL-121193]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.3.0-2.el10]" date="1764244800">- utils: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108860]
- utils: Add helpers for interface name wildcards (Phil Sutter) [RHEL-108860]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.3.0-3.el10]" date="1771934400">- src: Do not include userdata content in debug output (Phil Sutter) [RHEL-119650]
- Revert "udata: Store u32 udata values in Big Endian" (Phil Sutter) [RHEL-119650]
- udata: Store u32 udata values in Big Endian (Phil Sutter) [RHEL-119650]
- data_reg: Support concatenated data (Phil Sutter) [RHEL-119650]
- data_reg: Respect data byteorder when printing (Phil Sutter) [RHEL-119650]
- Introduce nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-119650]
- data_reg: Introduce struct nftnl_data_reg::sizes array (Phil Sutter) [RHEL-119650]
- data_reg: Introduce struct nftnl_data_reg::byteorder field (Phil Sutter) [RHEL-119650]
- expr: Pass byteorder to struct expr_ops::set callback (Phil Sutter) [RHEL-119650]
- expr: data_reg: Avoid extra whitespace (Phil Sutter) [RHEL-119650]
- set_elem: Review debug output (Phil Sutter) [RHEL-119650]</changelog>
</package>
<package pkgid="c79e7eaed5518ec9a7ecda89030947c8d7fa58131720bb0d81fcb6911f11db21" name="libnftnl-devel" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="3.el10"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.7-4.el10]" date="1725969600">- Bump release to trigger CI (Phil Sutter)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.7-4.1" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.8-1.el10]" date="1730980800">- Rebase onto version 1.2.8 (Phil Sutter) [RHEL-66276]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.8-2.el10]" date="1733313600">- set: Fix for array overrun when setting NFTNL_SET_DESC_CONCAT (Phil Sutter) [RHEL-34697]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.8-3.el10]" date="1752580800">- trace: add support for TRACE_CT information (Phil Sutter) [RHEL-103864]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.8-4.el10]" date="1757505600">- udata: Introduce NFTNL_UDATA_TABLE_NFT{VER,BLD} (Phil Sutter) [RHEL-113823]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.2.8-5.el10]" date="1761825600">- Bump release for a side-tag build (Phil Sutter) [RHEL-125122]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.3.0-1.el10]" date="1763640000">- Rebase onto version 1.3.0 (Phil Sutter) [RHEL-121193]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.3.0-2.el10]" date="1764244800">- utils: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108860]
- utils: Add helpers for interface name wildcards (Phil Sutter) [RHEL-108860]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [1.3.0-3.el10]" date="1771934400">- src: Do not include userdata content in debug output (Phil Sutter) [RHEL-119650]
- Revert "udata: Store u32 udata values in Big Endian" (Phil Sutter) [RHEL-119650]
- udata: Store u32 udata values in Big Endian (Phil Sutter) [RHEL-119650]
- data_reg: Support concatenated data (Phil Sutter) [RHEL-119650]
- data_reg: Respect data byteorder when printing (Phil Sutter) [RHEL-119650]
- Introduce nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-119650]
- data_reg: Introduce struct nftnl_data_reg::sizes array (Phil Sutter) [RHEL-119650]
- data_reg: Introduce struct nftnl_data_reg::byteorder field (Phil Sutter) [RHEL-119650]
- expr: Pass byteorder to struct expr_ops::set callback (Phil Sutter) [RHEL-119650]
- expr: data_reg: Avoid extra whitespace (Phil Sutter) [RHEL-119650]
- set_elem: Review debug output (Phil Sutter) [RHEL-119650]</changelog>
</package>
<package pkgid="ea1288026c29d04605daf13ce97e19fa5338e9e41caf7ae0ad4a42dbe20ecd56" name="libnghttp2" arch="x86_64">
  <version epoch="0" ver="1.68.0" rel="3.el10_2.1"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.61.0-1" date="1712232000">- update to the latest upstream release
- fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.61.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.62.1-1" date="1722945600">- update to the latest upstream release</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.63.0-1" date="1727697600">- update to the latest upstream release</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.64.0-1" date="1729598400">- update to the latest upstream release</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.64.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.68.0-1" date="1770638400">- update to the latest upstream release (RHEL-143723)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.68.0-2" date="1770638401">- PQC: make X25519MLKEM768 the default TLS key exchange group in nghttpd and nghttpx (RHEL-103655)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.68.0-3" date="1770811200">- Spec bump (RHEL-103655)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.68.0-3.1" date="1774958400">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
</package>
<package pkgid="0d6776f251407130c67611f447008a9989701943063a428426ebeeeca625173a" name="libnghttp2" arch="x86_64">
  <version epoch="0" ver="1.68.0" rel="3.el10_2.2"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.63.0-1" date="1727697600">- update to the latest upstream release</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.64.0-1" date="1729598400">- update to the latest upstream release</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.64.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.68.0-1" date="1770638400">- update to the latest upstream release (RHEL-143723)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.68.0-2" date="1770638401">- PQC: make X25519MLKEM768 the default TLS key exchange group in nghttpd and nghttpx (RHEL-103655)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.68.0-3" date="1770811200">- Spec bump (RHEL-103655)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.68.0-3.1" date="1774958400">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.68.0-3.2" date="1786363200">- fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)</changelog>
</package>
<package pkgid="edce7c3d3cfd110b31b7bbef47fa0804a502128f72f440ec434c96ea828f5061" name="libnghttp2-devel" arch="x86_64">
  <version epoch="0" ver="1.68.0" rel="3.el10_2.1"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.61.0-1" date="1712232000">- update to the latest upstream release
- fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.61.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.62.1-1" date="1722945600">- update to the latest upstream release</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.63.0-1" date="1727697600">- update to the latest upstream release</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.64.0-1" date="1729598400">- update to the latest upstream release</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.64.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.68.0-1" date="1770638400">- update to the latest upstream release (RHEL-143723)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.68.0-2" date="1770638401">- PQC: make X25519MLKEM768 the default TLS key exchange group in nghttpd and nghttpx (RHEL-103655)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.68.0-3" date="1770811200">- Spec bump (RHEL-103655)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.68.0-3.1" date="1774958400">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
</package>
<package pkgid="08ba055db843445d66b7c164c1237ed39152eb8f0d2ae3dd5ad2bab0dc0be829" name="libnghttp2-devel" arch="x86_64">
  <version epoch="0" ver="1.68.0" rel="3.el10_2.2"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.63.0-1" date="1727697600">- update to the latest upstream release</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.64.0-1" date="1729598400">- update to the latest upstream release</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.64.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.68.0-1" date="1770638400">- update to the latest upstream release (RHEL-143723)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.68.0-2" date="1770638401">- PQC: make X25519MLKEM768 the default TLS key exchange group in nghttpd and nghttpx (RHEL-103655)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.68.0-3" date="1770811200">- Spec bump (RHEL-103655)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.68.0-3.1" date="1774958400">- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; 1.68.0-3.2" date="1786363200">- fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)</changelog>
</package>
<package pkgid="b6200034cd9551b0ae2d89d34582ab1213a7b99526a39709a32ba8b7a4461968" name="libnl3" arch="x86_64">
  <version epoch="0" ver="3.11.0" rel="1.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 3.7.0-4" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.8.0-1" date="1693310400">- Update to 3.8.0 release</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.8.0-2" date="1698667200">- Use SPDX license identifier in package</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.9.0-1" date="1701691200">- Update to 3.9.0 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.9.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.9.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.11.0-1" date="1731412800">- Update to 3.11.0 release</changelog>
</package>
<package pkgid="382b3859f171bfd14067ee4d2352954e105e875a24c03200e597daaef0e5c6ca" name="libnl3-cli" arch="x86_64">
  <version epoch="0" ver="3.11.0" rel="1.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 3.7.0-4" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.8.0-1" date="1693310400">- Update to 3.8.0 release</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.8.0-2" date="1698667200">- Use SPDX license identifier in package</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.9.0-1" date="1701691200">- Update to 3.9.0 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.9.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.9.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.11.0-1" date="1731412800">- Update to 3.11.0 release</changelog>
</package>
<package pkgid="2507d64b264fa4f42666f852704c04422dad54848a39a0b23e8f599946326086" name="libnl3-devel" arch="x86_64">
  <version epoch="0" ver="3.11.0" rel="1.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 3.7.0-4" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.8.0-1" date="1693310400">- Update to 3.8.0 release</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.8.0-2" date="1698667200">- Use SPDX license identifier in package</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.9.0-1" date="1701691200">- Update to 3.9.0 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.9.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.9.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.11.0-1" date="1731412800">- Update to 3.11.0 release</changelog>
</package>
<package pkgid="1c12a83647e024c9ac8dcf305331c624d684260e095adeb34a69c5d169938274" name="libnl3-doc" arch="x86_64">
  <version epoch="0" ver="3.11.0" rel="1.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 3.7.0-4" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.8.0-1" date="1693310400">- Update to 3.8.0 release</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.8.0-2" date="1698667200">- Use SPDX license identifier in package</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.9.0-1" date="1701691200">- Update to 3.9.0 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.9.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.9.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.11.0-1" date="1731412800">- Update to 3.11.0 release</changelog>
</package>
<package pkgid="417ff5dab63057b2a6c4501244d365d7845bf4a1b0a69fe5a2e7ca6e3dc6b3d2" name="libnma" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="9.el10"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.10.4-1" date="1667822400">- Update to 1.10.4 release</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.10.6-1" date="1673179200">- Update to 1.10.6 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.10.6-3" date="1687176000">- Rebuilt for gcr soname bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.10.6-5" date="1698667200">- Use SPDX license identifier in package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.6-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.6-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e93b33c5dbae078df172fd5ca4b357ba5a81641f4f75031253eb461a1b95f310" name="libnma-devel" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="9.el10"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.10.4-1" date="1667822400">- Update to 1.10.4 release</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.10.6-1" date="1673179200">- Update to 1.10.6 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.10.6-3" date="1687176000">- Rebuilt for gcr soname bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.10.6-5" date="1698667200">- Use SPDX license identifier in package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.6-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.6-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="201d67c0c34df48998491fc97b1532defa5eecaed3ebf7b3aa96592451ab5ede" name="libnma-gtk4" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="9.el10"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.10.4-1" date="1667822400">- Update to 1.10.4 release</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.10.6-1" date="1673179200">- Update to 1.10.6 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.10.6-3" date="1687176000">- Rebuilt for gcr soname bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.10.6-5" date="1698667200">- Use SPDX license identifier in package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.6-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.6-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0ad20267db9e006674001615ded16197e46461ad9004001fca1269ae4a189db3" name="libnma-gtk4-devel" arch="x86_64">
  <version epoch="0" ver="1.10.6" rel="9.el10"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.10.4-1" date="1667822400">- Update to 1.10.4 release</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.10.6-1" date="1673179200">- Update to 1.10.6 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.10.6-3" date="1687176000">- Rebuilt for gcr soname bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.10.6-5" date="1698667200">- Use SPDX license identifier in package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.6-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.6-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.6-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="58d2fa7e710fe00af9406bfa585f729bca5858708ab904af6802cc10f7306fd6" name="libnotify" arch="x86_64">
  <version epoch="0" ver="0.8.6" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-1" date="1697889600">- Update to 0.8.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.3-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.3-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8.3-5" date="1721217600">- Drop the requirement on docbook5-style-xsl as it will be removed from RHEL.
  As it was used to build the man page, add the man page in the native format.
- Resolves: RHEL-45565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.3-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 0.8.6-6" date="1746446400">- Update to 0.8.6
  Resolves: RHEL-88017</changelog>
</package>
<package pkgid="aefd3ab3e2dc2c894844cc4bde1f469b0f4186d8bf1e339531b818c15dd9733b" name="libnotify-devel" arch="x86_64">
  <version epoch="0" ver="0.8.6" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-1" date="1697889600">- Update to 0.8.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.3-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.3-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.3-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.8.3-5" date="1721217600">- Drop the requirement on docbook5-style-xsl as it will be removed from RHEL.
  As it was used to build the man page, add the man page in the native format.
- Resolves: RHEL-45565</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.3-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 0.8.6-6" date="1746446400">- Update to 0.8.6
  Resolves: RHEL-88017</changelog>
</package>
<package pkgid="762f1adeca6814e411342a85b81ab36c0c569964778549f9ad6be829f765c5b6" name="libnozzle1" arch="x86_64">
  <version epoch="0" ver="1.30" rel="1.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.25-3" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.26-1" date="1688990400">- New upstream release
- Improve TX performance and use less CPU
- minor other improvements
- Build system update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.27-1" date="1695729600">- New upstream release
- Fix potential startup race condition (corosync use case)
- Fix crypto config check
- Minor API cleanup
- Test suite fixes</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.28-1" date="1695816000">- New upstream release
- Fix build on i686 machines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.30-1" date="1733140800">- Rebase to 1.30
  Resolves: RHEL-69636</changelog>
</package>
<package pkgid="a184038c4a253c1a2db058f02f23b352644236816f901f17dd0e2bec5b5d2e9d" name="libnozzle1-devel" arch="x86_64">
  <version epoch="0" ver="1.30" rel="1.el10"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 1.25-3" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.26-1" date="1688990400">- New upstream release
- Improve TX performance and use less CPU
- minor other improvements
- Build system update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.27-1" date="1695729600">- New upstream release
- Fix potential startup race condition (corosync use case)
- Fix crypto config check
- Minor API cleanup
- Test suite fixes</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.28-1" date="1695816000">- New upstream release
- Fix build on i686 machines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.28-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.30-1" date="1733140800">- Rebase to 1.30
  Resolves: RHEL-69636</changelog>
</package>
<package pkgid="88fdfd009bb19e80a60b47942d787985f8d6956261c25d62dd1337cf668a1e00" name="libnsl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="121.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-112" date="1770638400">- Set the currency symbol in Bulgarian locale to euro (RHEL-137184)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-113" date="1770724800">- Update locales for Croatia to use EUR as currency symbol (RHEL-140103)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-114" date="1771243200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142193)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
</package>
<package pkgid="504b65b9bf5fda70e90c7bfd052ab45b4c1fe2207bb21940ecadda31a657083e" name="libnsl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="124.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-115" date="1772107200">- Fix race condition in io/tst-stat (RHEL-151711)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-116" date="1772539200">- Remove unneeded ld-linux .debug files (RHEL-136312)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
</package>
<package pkgid="107872f0043c0290b0d759aedb5b1688c71609c099b5dee18300f8ff425cfe04" name="libnsl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="126.el10_2"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.39-117" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-118" date="1774267200">- patch-git: Avoid trailing tabs in changelog (RHEL-140226)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
</package>
<package pkgid="cf6b196687ff4fff409aec043360404d250867b7e28c080fab3a3608e9e4bdb8" name="libnsl" arch="x86_64">
  <version epoch="0" ver="2.39" rel="128.el10_2"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-119" date="1774872000">- Fix NULL pointer dereference in __nss_database_get and
  __nss_configure_lookup (RHEL-150270)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.39-120" date="1775044800">- Sync with upstream branch release/2.39/master (RHEL-151554)
- Upstream commit: 0dc95ae10929aba1cc660e97cfc94903c2568efa
- resolv: Check hostname for validity (CVE-2026-4438)
- resolv: Count records correctly (CVE-2026-4437)
- iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-121" date="1775563200">- Avoid duplicate DNS queries when search path contains "." (RHEL-142675)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-122" date="1777982400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-149709)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-123" date="1778328000">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162885)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-124" date="1778500800">- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
  (RHEL-159427)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-125" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.39-126" date="1782216000">- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
  (RHEL-174869)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.39-127" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180654)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.39-128" date="1783425600">- CVE-2026-5425: Fix out-of-bounds write via TSIG record processing
  (RHEL-180652, RHEL-185612)</changelog>
</package>
<package pkgid="1854f174b6d690cdcd7cce74745675986a7a8199c0a5be9834f0fd7325f4a757" name="libnvme" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.el10_2"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.9-4" date="1721995200">- Fix RHEL-37611</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.10-1" date="1729512000">- Update to version 1.10 (RHEL-63282)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.11.1-1" date="1732104000">- Update to the latest version v1.11.1 (RHEL-68304)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.13-1" date="1747051200">- Update to version 1.13 (RHEL-90418)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.15-1" date="1756987200">- Update to version 1.15 (RHEL-113070)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.15-2" date="1757332800">- bump version because the side-tag didn't propagate</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.15-3" date="1758888000">- Add a fix for a NULL pointer dereference regression</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-1" date="1762948800">- Rebase to version 1.16.1 (RHEL-127740)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-2" date="1763553600">- Fix gating tests for RHEL-127740</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-3" date="1774612800">- Fix linked list corruption (RHEL-156539)</changelog>
</package>
<package pkgid="00669640cdcaf00957e952053c5ae8b892446480bac3cde3ebd6c0b179b822c4" name="libnvme-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.el10_2"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.9-4" date="1721995200">- Fix RHEL-37611</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.10-1" date="1729512000">- Update to version 1.10 (RHEL-63282)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.11.1-1" date="1732104000">- Update to the latest version v1.11.1 (RHEL-68304)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.13-1" date="1747051200">- Update to version 1.13 (RHEL-90418)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.15-1" date="1756987200">- Update to version 1.15 (RHEL-113070)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.15-2" date="1757332800">- bump version because the side-tag didn't propagate</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.15-3" date="1758888000">- Add a fix for a NULL pointer dereference regression</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-1" date="1762948800">- Rebase to version 1.16.1 (RHEL-127740)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-2" date="1763553600">- Fix gating tests for RHEL-127740</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-3" date="1774612800">- Fix linked list corruption (RHEL-156539)</changelog>
</package>
<package pkgid="0976c13205612ee9d66eba32939f2f5842a5d72fcf9f104984845328d52da34c" name="libnvme-doc" arch="noarch">
  <version epoch="0" ver="1.16.1" rel="3.el10_2"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.9-4" date="1721995200">- Fix RHEL-37611</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.10-1" date="1729512000">- Update to version 1.10 (RHEL-63282)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.11.1-1" date="1732104000">- Update to the latest version v1.11.1 (RHEL-68304)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.13-1" date="1747051200">- Update to version 1.13 (RHEL-90418)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.15-1" date="1756987200">- Update to version 1.15 (RHEL-113070)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.15-2" date="1757332800">- bump version because the side-tag didn't propagate</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.15-3" date="1758888000">- Add a fix for a NULL pointer dereference regression</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-1" date="1762948800">- Rebase to version 1.16.1 (RHEL-127740)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-2" date="1763553600">- Fix gating tests for RHEL-127740</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-3" date="1774612800">- Fix linked list corruption (RHEL-156539)</changelog>
</package>
<package pkgid="87988fae804d1e455381ea41074a6842f2477fbd9d8cf2fb3b2827dfedeb3022" name="libocxl-docs" arch="noarch">
  <version epoch="0" ver="1.2.1" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 1.2.1-10" date="1719921600">- update for recent doxygen</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-11" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="93afdab1ab5bf4a7bba7ce617985021fc03d3612147117667d6f0e0e9538f481" name="liboeffis" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="1.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.0-1" date="1701864000">- libei 1.2.0</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.0-2" date="1702468800">- Handle OEFFIS_DEVICE_ALL_DEVICES correctly</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.1-1" date="1707134400">- libei 1.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 1.3.0-1" date="1736424000">- Update to version 1.3.0
  Resolves: RHEL-73468</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.5.0-1" date="1762344000">- Update to 1.5.0</changelog>
</package>
<package pkgid="3d6853ee6dc839f5b79a9baedecf71d30bdb41beb5e002092084104391439e4c" name="liboeffis-devel" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="1.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.0-1" date="1701864000">- libei 1.2.0</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.0-2" date="1702468800">- Handle OEFFIS_DEVICE_ALL_DEVICES correctly</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.1-1" date="1707134400">- libei 1.2.1</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 1.3.0-1" date="1736424000">- Update to version 1.3.0
  Resolves: RHEL-73468</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.5.0-1" date="1762344000">- Update to 1.5.0</changelog>
</package>
<package pkgid="2177cc6d5c2e87b5cb861e55a1a39f7888218ce13ad1e5aa0c617c9b7c5a4ff8" name="libogg" arch="x86_64">
  <version epoch="2" ver="1.3.5" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.3.5-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.3.5-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.3.5-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.3.5-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.3.5-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.3.5-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6464d020b5c00a3e8c0a9a7803ec82b5111af680459094c02f7652f828631be8" name="libogg-devel" arch="x86_64">
  <version epoch="2" ver="1.3.5" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.3.5-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.3.5-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.3.5-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.3.5-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.3.5-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.3.5-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="534b5904012dc13c4f02617bf965689bbcb37a9d02f2c32ae75b2686feb65256" name="libogg-devel-docs" arch="noarch">
  <version epoch="2" ver="1.3.5" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.3.5-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.3.5-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.3.5-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.3.5-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.3.5-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.3.5-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="76d91554c583876de8c266b1112b0ecf7be0f87ccefde9628550224ff387b1ec" name="libomp" arch="x86_64">
  <version epoch="0" ver="21.1.8" rel="1.el10"/>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-8" date="1749556800">- Invert symlink direction
- Fix i686 multilib installation (rhbz#2365079)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-9" date="1750075200">- Use libdir suffix in versioned prefix</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-10" date="1750161600">- Fix llvm-config alternatives handling (rhbz#2361779)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.7-1" date="1750334400">- Update to LLVM 20.1.7</changelog>
  <changelog author="Kashyap Chamarthy &lt;kchamart@redhat.com&gt; - 20.1.7-2" date="1750420800">- Add riscv64 enablement bits; thanks: Songsong Zhang
   (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.8-1" date="1752062400">- Update to LLVM 20.1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20.1.8-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 20.1.8-3" date="1753704000">- Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
- Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
- Backport fix for build of highway package on ppc64le (rhbz#2383182)</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; - 21.1.8-1" date="1771502400">- Update to 21.1.8</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 21.1.8-1" date="1771934400">- Ensure riscv64 has reduced debuginfo
- Ensure riscv64 dwz is ok</changelog>
</package>
<package pkgid="da8535aa33d907c8892f260d4f7cd8788bd9435c06b3a44ef7577b4781ff7911" name="libomp-devel" arch="x86_64">
  <version epoch="0" ver="21.1.8" rel="1.el10"/>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-8" date="1749556800">- Invert symlink direction
- Fix i686 multilib installation (rhbz#2365079)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-9" date="1750075200">- Use libdir suffix in versioned prefix</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-10" date="1750161600">- Fix llvm-config alternatives handling (rhbz#2361779)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.7-1" date="1750334400">- Update to LLVM 20.1.7</changelog>
  <changelog author="Kashyap Chamarthy &lt;kchamart@redhat.com&gt; - 20.1.7-2" date="1750420800">- Add riscv64 enablement bits; thanks: Songsong Zhang
   (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.8-1" date="1752062400">- Update to LLVM 20.1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20.1.8-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 20.1.8-3" date="1753704000">- Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
- Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
- Backport fix for build of highway package on ppc64le (rhbz#2383182)</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; - 21.1.8-1" date="1771502400">- Update to 21.1.8</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 21.1.8-1" date="1771934400">- Ensure riscv64 has reduced debuginfo
- Ensure riscv64 dwz is ok</changelog>
</package>
<package pkgid="48b95366f49ca9db486e86da006bbf529d4fa3d6de66502759c8c13c59438809" name="libopenraw" arch="x86_64">
  <version epoch="0" ver="0.1.3" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-13" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-15" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-16" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.3-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.1.3-18" date="1719403200">- Remove outdated Requires: gtk2 for the pixbuf-loader (RHEL-45169)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.3-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1068decaa3a87fd48085a5ec5beefb4f7df2d29202fb630eb1ebfa1fd18578ad" name="libopenraw-devel" arch="x86_64">
  <version epoch="0" ver="0.1.3" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-13" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-15" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-16" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.3-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.1.3-18" date="1719403200">- Remove outdated Requires: gtk2 for the pixbuf-loader (RHEL-45169)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.3-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bea243a8698133dac762ef56ff7bb68d315c805121294f61208b36fc9888a178" name="libopenraw-gnome" arch="x86_64">
  <version epoch="0" ver="0.1.3" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-13" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-15" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-16" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.3-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.1.3-18" date="1719403200">- Remove outdated Requires: gtk2 for the pixbuf-loader (RHEL-45169)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.3-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4635055ecbd99e94ed6c029e9b6ebd09e8b422b38f236a79abfcf533414a3fe0" name="libopenraw-gnome-devel" arch="x86_64">
  <version epoch="0" ver="0.1.3" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-13" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-15" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-16" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.3-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.1.3-18" date="1719403200">- Remove outdated Requires: gtk2 for the pixbuf-loader (RHEL-45169)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.3-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1715fe486919813d990a15594de0af2bc087c61df520f4363987856efd63473b" name="libopenraw-pixbuf-loader" arch="x86_64">
  <version epoch="0" ver="0.1.3" rel="19.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-13" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-15" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-16" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.3-17" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.1.3-18" date="1719403200">- Remove outdated Requires: gtk2 for the pixbuf-loader (RHEL-45169)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.3-19" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4ae799c45afee53d4bf9beceef174ad1e6d00c69a6b6121f74b6ddf28844e734" name="liboqs" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 0.9.2-1" date="1706788800">- Update to 0.9.2 version</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Dmitry Belyavskiy - 0.10.1-1" date="1720440000">- Rebase to 0.10.1 version (CVE-2024-36405)
  Resolves: RHEL-40699
- Use dlopen for OpenSSL algos implementation
  Resolves: RHEL-46598
- Correct license naming
  Resolves: RHEL-45265</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 0.11.0-1" date="1727697600">- Update to 0.11.0 version
  Resolves: RHEL-56152</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 0.11.0-2" date="1728043200">- Removing Falcon from supported algorithms
  Related: RHEL-56152</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 0.11.0-3" date="1729771200">- Restoring ML-KEM-512 built out by accident
  Resolves: RHEL-64284</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.11.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 0.12.0-1" date="1735819200">- Rebasing to liboqs-0.12.0
  Resolves: RHEL-65426</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 0.12.0-2" date="1736942400">- Avoid unresolved symbols when compiled with OQS_DLOPEN_OPENSSL
  Resolves: RHEL-75157</changelog>
</package>
<package pkgid="60a3cdb83e61dd9c925412dda48edac179648b8964b1f79463dff94b26e43f88" name="liboqs-devel" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="2.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 0.9.2-1" date="1706788800">- Update to 0.9.2 version</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Dmitry Belyavskiy - 0.10.1-1" date="1720440000">- Rebase to 0.10.1 version (CVE-2024-36405)
  Resolves: RHEL-40699
- Use dlopen for OpenSSL algos implementation
  Resolves: RHEL-46598
- Correct license naming
  Resolves: RHEL-45265</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 0.11.0-1" date="1727697600">- Update to 0.11.0 version
  Resolves: RHEL-56152</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 0.11.0-2" date="1728043200">- Removing Falcon from supported algorithms
  Related: RHEL-56152</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 0.11.0-3" date="1729771200">- Restoring ML-KEM-512 built out by accident
  Resolves: RHEL-64284</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.11.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 0.12.0-1" date="1735819200">- Rebasing to liboqs-0.12.0
  Resolves: RHEL-65426</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 0.12.0-2" date="1736942400">- Avoid unresolved symbols when compiled with OQS_DLOPEN_OPENSSL
  Resolves: RHEL-75157</changelog>
</package>
<package pkgid="b6863e608b367db06e8b75fcb6aae0eafbe75ac4e04d524986c30e40bf3e3e6d" name="libosinfo" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="8.el10"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 1.10.0-6" date="1675944000">- Use libsoup 3 in ELN</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.0-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 1.11.0-1" date="1698408000">- Update to release v1.11.0</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.11.0-2" date="1702468800">- Fix rpmautospec changelog</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.11.0-3" date="1702468801">- Fix build with libxml2-2.12.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.11.0-7" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="c7332538f0cb521ffc8d32130b438cb648b5cd93329822134575f11f27cec290" name="libosinfo-devel" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="8.el10"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 1.10.0-6" date="1675944000">- Use libsoup 3 in ELN</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.0-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 1.11.0-1" date="1698408000">- Update to release v1.11.0</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.11.0-2" date="1702468800">- Fix rpmautospec changelog</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.11.0-3" date="1702468801">- Fix build with libxml2-2.12.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.11.0-7" date="1719316800">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="4a0b711edd3e3a1d8a8c72961bc23a70f9761512f5a77222c5a239f8a9988d77" name="libotf" arch="x86_64">
  <version epoch="0" ver="0.9.16" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.13-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.13-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.9.16-1" date="1690286400">- Update to 0.9.16</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.9.16-2" date="1691064000">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.16-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.16-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.16-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.16-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3e93f08eba8928a1809d3b05fe4b0ed7a99ccdac78baaab182132643eac6fe64" name="libotf-devel" arch="x86_64">
  <version epoch="0" ver="0.9.16" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.13-22" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.13-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 0.9.16-1" date="1690286400">- Update to 0.9.16</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.9.16-2" date="1691064000">- migrate to SPDX license format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.16-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.16-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.16-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.16-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ef726b6546a3a2e8dfd1f1586f022e32c7e542c7eb03ca6f2b85e1dabc026119" name="libpamtest" arch="x86_64">
  <version epoch="0" ver="1.1.4" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.4-6" date="1677499200">- Fix building with cmocka &gt;= 1.1.6</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.4-7" date="1678104000">- Update License to SPDX expression</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.1.4-8" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.4-10" date="1700827200">- Fix description of python3-libpamtest</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-11" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-12" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.4-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.4-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="178dc16f16a62d6b7b82fd29fde77fd398f9cfdbb759edb35c3a777833b383a2" name="libpamtest-devel" arch="x86_64">
  <version epoch="0" ver="1.1.4" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.4-6" date="1677499200">- Fix building with cmocka &gt;= 1.1.6</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.4-7" date="1678104000">- Update License to SPDX expression</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.1.4-8" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.4-10" date="1700827200">- Fix description of python3-libpamtest</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-11" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-12" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.4-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.4-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9434679a879d382b6324f3403f105d26490e65a1f401aaa29fa705bc117cfd02" name="libpamtest-doc" arch="x86_64">
  <version epoch="0" ver="1.1.4" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.4-6" date="1677499200">- Fix building with cmocka &gt;= 1.1.6</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.4-7" date="1678104000">- Update License to SPDX expression</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.1.4-8" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.4-10" date="1700827200">- Fix description of python3-libpamtest</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-11" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-12" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.4-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.4-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8329f1ee10f14cc923f6067e0481f24ca92f4b2a92930e5078e65712eeb94d3d" name="libpanel" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="1.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.3.0-1" date="1691582400">- Update to 1.3.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.3.1-1" date="1693915200">- Update to 1.3.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.4.0-1" date="1695038400">- Update to 1.4.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.4.1-1" date="1704974400">- Update to 1.4.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.4.1-4" date="1714132800">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.8.1-1" date="1730721600">- Update to 1.8.1</changelog>
</package>
<package pkgid="3d049e8a98267fd83934e2e6e0d5fe7f2c0b3a3d7efe632336feb48a172c9c80" name="libpanel-devel" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="1.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.3.0-1" date="1691582400">- Update to 1.3.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.3.1-1" date="1693915200">- Update to 1.3.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.4.0-1" date="1695038400">- Update to 1.4.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.4.1-1" date="1704974400">- Update to 1.4.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.4.1-4" date="1714132800">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 1.8.1-1" date="1730721600">- Update to 1.8.1</changelog>
</package>
<package pkgid="8d7d9f97191f13e3294d9c28fe8d2c08cf046f9e43eb17601a447097e604f27c" name="libpaper" arch="x86_64">
  <version epoch="1" ver="2.1.1" rel="7.el10"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 1:2.0.10-1" date="1677844800">- update to 2.0.10</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 1:2.1.0-1" date="1681473600">- update to 2.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.1.1-1" date="1690286400">- 2.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.1.1-4" date="1713873600">- RHEL-33500 - apply hardening ldflags for localepaper</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.1.1-5" date="1715601600">- remove gnulib dependency and use bundled one</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.1.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.1.1-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8ba3b1c55a9cf6e494f5321e401bfcef0dc55be7b34a8c332eac46177f20f5fa" name="libpaper-devel" arch="x86_64">
  <version epoch="1" ver="2.1.1" rel="7.el10"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 1:2.0.10-1" date="1677844800">- update to 2.0.10</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 1:2.1.0-1" date="1681473600">- update to 2.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.1.1-1" date="1690286400">- 2.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.1.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.1.1-4" date="1713873600">- RHEL-33500 - apply hardening ldflags for localepaper</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.1.1-5" date="1715601600">- remove gnulib dependency and use bundled one</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.1.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.1.1-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ad39fbfa2c1b35eab817bb0c36d554ecd398f6ce56b3ed2837daeba5ab23796d" name="libpath_utils" arch="x86_64">
  <version epoch="0" ver="0.2.1" rel="58.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-53" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-54" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-55" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-56" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-57" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-58" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2f46ab22a1e524eb9b48f8fffdf1d3d28f1396b0d64d8f40cc9036d0d7a5c68e" name="libpath_utils-devel" arch="x86_64">
  <version epoch="0" ver="0.2.1" rel="58.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-53" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-54" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-55" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-56" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-57" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-58" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="461ddf52c843a4673212fbef3fd11502f4acbac673c0402629159957871293d3" name="libpcap" arch="x86_64">
  <version epoch="14" ver="1.10.4" rel="7.el10"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.10.3-1" date="1673956800">- New version 1.10.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.10.3-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.10.3-3" date="1679400000">- SPDX migration</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.10.4-1" date="1681300800">- New version 1.10.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.10.4-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.10.4-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.10.4-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 14:1.10.4-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 14:1.10.4-6" date="1719921600">- Fix broken gating</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 14:1.10.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b58560a75f500a69b5de2671fb23c23e93ad05b883dc986e8fed39caa9c901c5" name="libpcap-devel" arch="x86_64">
  <version epoch="14" ver="1.10.4" rel="7.el10"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.10.3-1" date="1673956800">- New version 1.10.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.10.3-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.10.3-3" date="1679400000">- SPDX migration</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.10.4-1" date="1681300800">- New version 1.10.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.10.4-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.10.4-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14:1.10.4-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 14:1.10.4-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 14:1.10.4-6" date="1719921600">- Fix broken gating</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 14:1.10.4-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="895711d2825cf585a10a25542f9619c120af2de9ff05ff88e28ca145d5ea6d95" name="libpciaccess" arch="x86_64">
  <version epoch="0" ver="0.16" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 0.16-10" date="1694779200">- migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-11" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-12" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 0.16-13" date="1710936000">- Fix findings from static application security testing (SAST)
  Resolves: https://issues.redhat.com/browse/RHEL-29742</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 0.16-14" date="1710936001">- Add gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.16-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.16-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f5035a5913cbc431aab25b131511882173264e07c41471d6f6ea0561fe91d1e4" name="libpciaccess-devel" arch="x86_64">
  <version epoch="0" ver="0.16" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 0.16-10" date="1694779200">- migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-11" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16-12" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 0.16-13" date="1710936000">- Fix findings from static application security testing (SAST)
  Resolves: https://issues.redhat.com/browse/RHEL-29742</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 0.16-14" date="1710936001">- Add gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.16-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.16-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="28ec1c2de3c8d08b19c66f9eea81f1d2640d8b582f0b5d7149c385b714debc65" name="libpeas1" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="8.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.36.0-1" date="1692705600">- Initial version</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.0-2" date="1698148800">- Fix obsoletes and provides</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.36.0-3" date="1698753600">- Disable glade catalog in RHEL builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.36.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.36.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.36.0-6" date="1714046400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.36.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.36.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="d50d2ae527f8e6e6b9ce11a78e48d72c676277bebc0c529635f58ab8e92a170f" name="libpeas1-devel" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="8.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.36.0-1" date="1692705600">- Initial version</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.0-2" date="1698148800">- Fix obsoletes and provides</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.36.0-3" date="1698753600">- Disable glade catalog in RHEL builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.36.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.36.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.36.0-6" date="1714046400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.36.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.36.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="caf1ac91f6550afdf18b4b64c835220af2a95e08069517948fbfe23128776500" name="libpeas1-gtk" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="8.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.36.0-1" date="1692705600">- Initial version</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.0-2" date="1698148800">- Fix obsoletes and provides</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.36.0-3" date="1698753600">- Disable glade catalog in RHEL builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.36.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.36.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.36.0-6" date="1714046400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.36.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.36.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="1e122be71785539e2e8c4fa307db7bcba51fe098cf1b1a677ec8466497426f3a" name="libpeas1-loader-python3" arch="x86_64">
  <version epoch="0" ver="1.36.0" rel="8.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.36.0-1" date="1692705600">- Initial version</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.0-2" date="1698148800">- Fix obsoletes and provides</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.36.0-3" date="1698753600">- Disable glade catalog in RHEL builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.36.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.36.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.36.0-6" date="1714046400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.36.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.36.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="a2bedfc9f699389b4545a03f3ad0afef306997926350d5b444f52f9de41390ca" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="9daa8b8818e756e0f9500af7c4d5ebf21e00f6c18cc667e922f786ac08fbd2f5" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d9984db705633df7789669c502fa5b32f8a1f2535e6eb2a392429d68ada8690c" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="f332f3a49597fc3df4baeef03a2b864f540e3164cf9022bed354ce7e4443b7f6" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="04e095b7c008c70deb26976387df9b122c2efc52fae8c7e4e4c68188983a5719" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="0ff5454a95e31eed9cb27b912a10dfd8cf0aaf5cd0ed4851be29091213fae4e7" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="954bb4570eb13d28861beb8b9a84aa03a169c4beefa0c202900f33193b58c0c9" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="64ab38f416c99be30ea6b8f05605015730ab1e2006ab103a2869c4828cae22c2" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d4cb3858c7a775e5fb66565229b6e2aed3d1458ff9f04a206e0de33536ef4237" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="8a7b20a9c03a1525af1c76356034d354b202aa9e72a23dcad741d9cc84ece62e" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="168514ab16b88629cc4d8275a8b26f4b8eb298c0f48dda1942d54d8b841d1475" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="34ac91490bfbdbbf2fd8e91773b683055bda9684105ee84f96877e98ea57ae6e" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="3974b0fd4d32ba01d93de135d252dbfdf1bec17d2bdf6363f5156e3b35f44e1b" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5264560d55edea98ce8f0e1eed8ed8cb22f726c9da0d8bb708b83722be898f84" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="36b8ae814b4f1e7ed55ec1201f917e93c54c0400220634aa2289bdf53fb8a83f" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="11b3ade26afe30f22cfff5772a972ccc3ad3bf0a8271767ebed2dec9c978b826" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="51d7fa4cf10275d1ef3c224a01028b9edf2910af3a71adda46349d35ed68bcfb" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d43fa1f7ed27c5dbda719add3cef560bfdb9a706dc8404dea3431dea11ddafc7" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="2b819d200684875b1c9bc188012cb690404d4e5bb4b1934c35fb565c43cbbf05" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="a496a30149a55be1849fe514861298ba368c98ca3ef8c050762688a782b26931" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.16.1.el10_2.0.1"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.9.1.el10_2]" date="1776686400">- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157855]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.16.1" date="1779278400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@resf.org&gt; - 6.12.0-211.16.1.0.1" date="1779537600">- Bump release for updated rocky-sb-certs</changelog>
</package>
<package pkgid="fcbea0bbeed68bd7e8751b115b85b0c00b6e77b02b6422a8410298d51bd85405" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.18.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.10.1.el10_2]" date="1776945600">- ASoC: soc_sdw_utils: remove index from sdca codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: soc_sdw_utils: partial match the codec name (Jaroslav Kysela) [RHEL-163717]
- ASoC: add snd_soc_lookup_component_by_name helper (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Update counting of SU/GE DAPM routes (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Handle CONFIG_PM_SLEEP not being set (Jaroslav Kysela) [RHEL-163717]
- ASoC: SDCA: Tidy up some memory allocations (Jaroslav Kysela) [RHEL-163717]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157332] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.11.1.el10_2]" date="1776945601">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-168569] {CVE-2026-31402}
- KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153716] {CVE-2026-23401}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.12.1.el10_2]" date="1777291200">- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-169354]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-169354]
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166932] {CVE-2025-68724}
- net: af_can: do not leave a dangling sk pointer in can_create() (CKI Backport Bot) [RHEL-162253] {CVE-2024-56603}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.13.1.el10_2]" date="1777550400">- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171531]
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-170974] {CVE-2026-31408}</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.18.1" date="1779969600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="d6307bc863de94aa520f5ffad3054a14663936486f95bc01d591c4a214702b52" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1.el10_2"/>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.14.1.el10_2]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172213]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172213]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172213]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172213] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172213]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172213] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172213] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172213]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [6.12.0-211.15.1.el10_2]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (CKI Backport Bot) [RHEL-174546] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="143f740bc71f5aa624506af6b29eb4a8a88742b13c4419be885c8fb85505b958" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5c6c0fa064d2008561f6623fb8ad82de03d582889e5aa2c3e51f34d4bdf7e7b4" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.28.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.28.1" date="1782475200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b2da7a5dd618bea2b43f51e016a4573b204494229a841f9fec723d18e34aa6a1" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="95776d6a2d9c2108d23c00b1cefc0e60a78a5fac9f4f2951f759acf354c2aab1" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.33.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.33.1" date="1783944000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c1acba409b2f5410ee1dca5c289e5bce59a12011b260da2d73cdf01e13c56a76" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.34.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1783944000">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.34.1" date="1784030400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="5f61071dbf7834cb7dbb5d7627eb13b49f6cd9ccba5a472668d7045857486815" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.37.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.37.1" date="1784635201">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="555d924c0ad629f7deddc8c7bcd32ea5ee2338db2615681dd259be6b3582c177" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.39.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.39.1" date="1784894400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="12670b08fe0f60c7cd9525f1b86d0ca7c15fb553845b7e99aa2c49e472757778" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.40.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.33.1.el10_2]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.40.1" date="1785240000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="718c44e8f66e31bfb495d099ade3791ea69de123d60766ca2eac03d36a7ccd9e" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.42.1.el10_2"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-211.34.1.el10_2]" date="1784030400">- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.42.1" date="1785499200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="6358d88d18bc963309c2e8a0517265b99447a85086a20631ddf38eec02867173" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.43.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.35.1.el10_2]" date="1784203200">- drm/xe/dma-buf: fix UAF with retry loop (Karol Herbst) [RHEL-192232] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Karol Herbst) [RHEL-192232]
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Karol Herbst) [RHEL-192232]
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Karol Herbst) [RHEL-192232]
- nfsd: cancel async COPY operations when admin revokes filesystem state (Olga Kornievskaia) [RHEL-173103]
- nfsd: use correct loop termination in nfsd4_revoke_states() (Olga Kornievskaia) [RHEL-173103]
- nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [RHEL-173103]
- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179887]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179887]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179887]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179887] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179887]
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180697] {CVE-2026-31530}
- flex_proportions: make fprop_new_period() hardirq safe (CKI Backport Bot) [RHEL-189658] {CVE-2026-23168}
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188331] {CVE-2026-53071}
- redhat/configs: disable CONFIG_PT_RECLAIM (Luiz Capitulino) [RHEL-186311]
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183975]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.43.1" date="1785844800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="94560ef6bfcddb91f7af9ecc7c293387970fee558579eb094955d548115f5615" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.44.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.36.1.el10_2]" date="1784548800">- ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-191324 RHEL-192200] {CVE-2026-53009}
- ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-46162}
- ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-191324]
- ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-191324]
- ice: use bitmap_weighted_xor() in ice_find_free_recp_res_idx() (Jakub Ramaseuski) [RHEL-191324]
- ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-191324]
- ice: fix PTP timestamping broken by SyncE code on E825C (Jakub Ramaseuski) [RHEL-191324]
- ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-43346}
- ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-191324]
- ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-191324]
- drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-191324]
- ice: fix rxq info registering in mbuf packets (Jakub Ramaseuski) [RHEL-191324]
- ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-191324]
- ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-191324]
- ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-191324]
- ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-191324]
- ice: fix missing TX timestamps interrupts on E825 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-191324]
- ice: reshuffle and group Rx and Tx queue fields by cachelines (Jakub Ramaseuski) [RHEL-191324]
- ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-191324]
- ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-191324]
- ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-191324]
- ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-191324]
- ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-191324]
- ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-191324]
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (Jakub Ramaseuski) [RHEL-191324] {CVE-2026-23166}
- bitmap: introduce bitmap_weighted_xor() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add test_zero_nbits() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: exclude nbits == 0 cases from bitmap test (Jakub Ramaseuski) [RHEL-191324]
- bitmap: test bitmap_weight() for more (Jakub Ramaseuski) [RHEL-191324]
- bitmap: add bitmap_weight_from() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: align test_bitmap output (Jakub Ramaseuski) [RHEL-191324]
- bitmap: switch test to scnprintf("%*pbl") (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Add test for out-of-boundary modifications for scatter &amp; gather (Jakub Ramaseuski) [RHEL-191324]
- cpumask: Introduce cpumask_weighted_or() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: Align documentation between bitmap_gather() and bitmap_scatter() (Jakub Ramaseuski) [RHEL-191324]
- bitmap: remove _check_eq_u32_array (Jakub Ramaseuski) [RHEL-191324]
- include: update references to include/asm-&lt;arch&gt; (Jakub Ramaseuski) [RHEL-191324]
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (CKI Backport Bot) [RHEL-189604] {CVE-2025-71147}
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (CKI Backport Bot) [RHEL-189576] {CVE-2025-71113}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188644] {CVE-2026-52976}
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180167] {CVE-2026-46116}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.37.1.el10_2]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (CKI Backport Bot) [RHEL-212681]
- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180076] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.44.1" date="1786104000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="b0d12537ac37de70282db1e3bdf54a44316b9d4e85cf1a544b7aa0f86716d3a8" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.46.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.38.1.el10_2]" date="1784721600">- net: gro: don't merge zcopy skbs (CKI Backport Bot) [RHEL-177856] {CVE-2026-46323}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.46.1" date="1786449600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c6c5cf2784bd680f02c793bbde763098a6266b36fa7d4961bb45a8a6648bfef2" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.47.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.39.1.el10_2]" date="1784808000">- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193518] {CVE-2026-52973}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179299] {CVE-2026-46099}
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189651] {CVE-2026-23110}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188547] {CVE-2026-53059}
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172537] {CVE-2026-31692}
- fs/notify: call exportfs_encode_fid with s_umount (Jay Shin) [RHEL-169188] {CVE-2025-40237}
- fs: relax assertions on failure to encode file handles (Jay Shin) [RHEL-169188]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.40.1.el10_2]" date="1785153600">- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.47.1" date="1786536001">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="1f2b02cd145e0be9f34769bdf35c146cc370340ae05c3e8444031fc167e1b462" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.49.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.41.1.el10_2]" date="1785240000">- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.49.1" date="1787227200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c6ce50d737027a98fe235d4b8522fc694b1c8e32503521365391d0639cff0948" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.50.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.42.1.el10_2]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.50.1" date="1788264000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="c7b7bdea895355eb61927a29ce0d648b1fe1341877e34a9c399a4df89691cc37" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.51.1.el10_2"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.43.1.el10_2]" date="1785758400">- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.44.1.el10_2]" date="1785844800">- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.45.1.el10_2]" date="1786104000">- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.46.1.el10_2]" date="1786363200">- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.47.1.el10_2]" date="1786536000">- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb-&gt;dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect-&gt;helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set-&gt;nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.48.1.el10_2]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213217] {CVE-2026-63888}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222740] {CVE-2026-63884}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222567] {CVE-2026-64219}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222667] {CVE-2026-53329}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (Mika Penttilä) [RHEL-222625] {CVE-2026-63879}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221336] {CVE-2026-43206}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222753] {CVE-2026-53356}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222721] {CVE-2026-45878}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222701] {CVE-2026-53143}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222685] {CVE-2026-53136}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222646] {CVE-2026-53374}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221380] {CVE-2026-43237}
- sched/psi: Create the psimon kthread outside of cgroup_mutex (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- sched/psi: fix race between file release and pressure write (CKI Backport Bot) [RHEL-232560] {CVE-2026-52991}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231667] {CVE-2026-63886}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228531] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228531]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224545]
- xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lukas Herbolt) [RHEL-223954]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.49.1.el10_2]" date="1787140800">- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179570] {CVE-2026-45991}
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-235459]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-235459]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-235459]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-235459]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-235459]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-235459]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-235459]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-235459]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226717] {CVE-2026-43493}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235812]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236210] {CVE-2026-68388}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227850] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227850] {CVE-2026-64370}
- exit: kill the pointless __exit_signal()-&gt;clear_tsk_thread_flag(TIF_SIGPENDING) (Waiman Long) [RHEL-227850]
- exit: change the release_task() paths to call flush_sigqueue() lockless (Waiman Long) [RHEL-227850]
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234551] {CVE-2026-64382}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234530] {CVE-2026-64379}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234129] {CVE-2026-64386}
- smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229066] {CVE-2026-46185}
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213153] {CVE-2026-64017}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.50.1.el10_2]" date="1788177600">- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
- nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244915] {CVE-2026-72130}
- locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (CKI Backport Bot) [RHEL-242861] {CVE-2026-72069}
- s390: Revert support for DCACHE_WORD_ACCESS (John J Coleman) [RHEL-188180]
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234051] {CVE-2026-64298}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227794] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (CKI Backport Bot) [RHEL-229415] {CVE-2026-53392}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228036] {CVE-2026-53391}
- NFSD: fix nfs4_file access extra count in nfsd4_add_rdaccess_to_wrdeleg (CKI Backport Bot) [RHEL-227946] {CVE-2026-53026}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226322] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225522] {CVE-2026-53397}
- mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236329] {CVE-2026-68086}
- userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- userfaultfd: correctly prevent registering VM_DROPPABLE regions (Rafael Aquini) [RHEL-237862] {CVE-2026-68166}
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234477] {CVE-2026-64438}
- mm: shrinker: fix NULL pointer dereference in debugfs (Rafael Aquini) [RHEL-230833] {CVE-2026-64417}
- mm: shrinker: fix shrinker_info teardown race with expansion (Rafael Aquini) [RHEL-230833] {CVE-2026-64418}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230475] {CVE-2026-68480}
- crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234546] {CVE-2026-64304}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231446] {CVE-2026-64277}
- mm/huge_memory: update file PMD counter before folio_put() (CKI Backport Bot) [RHEL-231228] {CVE-2026-53189}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230263] {CVE-2026-64276}
- ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230142] {CVE-2026-64490}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229231] {CVE-2026-64018}
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228550] {CVE-2026-64136}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225292] {CVE-2026-45970}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227657] {CVE-2026-64189}
- iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227452] {CVE-2026-53053}
- smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226988] {CVE-2026-64384}
- mm/list_lru: drain before clearing xarray entry on reparent (Rafael Aquini) [RHEL-227399] {CVE-2026-53153}
- s390/pfault: Fix virtual vs physical address confusion (Ramesh Chhetri) [RHEL-222507]
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-218627]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219623] {CVE-2026-64320}
- sctp: hold socket lock when dumping endpoints in sctp_diag (CKI Backport Bot) [RHEL-212393]
- seccomp: passthrough uretprobe systemcall without filtering (Ricardo Robaina) [RHEL-210908] {CVE-2025-21834}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193043]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191442] {CVE-2026-53185}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191042] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191042] {CVE-2026-53196}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189631] {CVE-2026-23003}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180136] {CVE-2026-46120}
- netfilter: nf_tables: Fix for duplicate device in netdev hooks (CKI Backport Bot) [RHEL-179761] {CVE-2026-43454}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179744] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.51.1.el10_2]" date="1788264000">- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246368] {CVE-2026-74581}
- iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240183] {CVE-2026-68145}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231559] {CVE-2026-63808}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (CKI Backport Bot) [RHEL-229621] {CVE-2026-63824}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223128] {CVE-2026-53073}
- smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219150] {CVE-2026-64387}</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.51.1" date="1788523200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
</package>
<package pkgid="125ad365d76b253607b79893aa81d432bd29e5f0cf62fbd17c7d545b27966a35" name="libpfm" arch="x86_64">
  <version epoch="0" ver="4.13.0" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.13.0-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.13.0-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 4.13.0-8" date="1706529600">- Fix gcc-14 -Werror=calloc-transposed-args compatibility</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.13.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.13.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 4.13.0-11" date="1768824000">- Add libpfm-ibm-counters.patch</changelog>
</package>
<package pkgid="216e1a993bea2119bd9dcab7f6dd4a2476107b7bca20904bab9c00fd74e68004" name="libpfm" arch="x86_64">
  <version epoch="0" ver="4.13.0" rel="11.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.13.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.13.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 4.13.0-11" date="1768824000">- Add libpfm-ibm-counters.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 4.13.0-11.1" date="1779364800">- Add libpfm-monaka.patch
- Add libpfm-monaka-v1.1.patch</changelog>
</package>
<package pkgid="26843955816851c3355265500f5967e280811cbe9b653cf9fc20f531c8267983" name="libpfm-devel" arch="x86_64">
  <version epoch="0" ver="4.13.0" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.13.0-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.13.0-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 4.13.0-8" date="1706529600">- Fix gcc-14 -Werror=calloc-transposed-args compatibility</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.13.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.13.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 4.13.0-11" date="1768824000">- Add libpfm-ibm-counters.patch</changelog>
</package>
<package pkgid="6a00491bc0e360a05f905c689c514920ff7f2926b8eeb98c03875e56b1c2593a" name="libpfm-devel" arch="x86_64">
  <version epoch="0" ver="4.13.0" rel="11.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.13.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.13.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 4.13.0-11" date="1768824000">- Add libpfm-ibm-counters.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 4.13.0-11.1" date="1779364800">- Add libpfm-monaka.patch
- Add libpfm-monaka-v1.1.patch</changelog>
</package>
<package pkgid="939464ddee4de3c9e8df8b6c41339d7dffca85291d955f0e955586b38633c6c5" name="libpfm-static" arch="x86_64">
  <version epoch="0" ver="4.13.0" rel="11.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.13.0-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.13.0-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 4.13.0-8" date="1706529600">- Fix gcc-14 -Werror=calloc-transposed-args compatibility</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.13.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.13.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 4.13.0-11" date="1768824000">- Add libpfm-ibm-counters.patch</changelog>
</package>
<package pkgid="e163661c7f9c4125f3f12bfe507b31b36a6d008461ce3d74d86981f112c8ee14" name="libpfm-static" arch="x86_64">
  <version epoch="0" ver="4.13.0" rel="11.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.13.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.13.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 4.13.0-11" date="1768824000">- Add libpfm-ibm-counters.patch</changelog>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 4.13.0-11.1" date="1779364800">- Add libpfm-monaka.patch
- Add libpfm-monaka-v1.1.patch</changelog>
</package>
<package pkgid="c7d54f40dad2d77919cf066b9669430eed21187d51a431fc3ebbae3c9688690d" name="libpgtypes" arch="x86_64">
  <version epoch="0" ver="16.1" rel="14.el10_0"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 16.1-4" date="1724673600">- rebuild in Konflux</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 16.1-5" date="1724932800">- make the build deterministic by serial make process</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Aviv Sabadra &lt;asabadra@redhat.com&gt; - 16.1-7" date="1731499200">- Bump release for building in Konflux</changelog>
  <changelog author="Aviv Sabadra &lt;asabadra@redhat.com&gt; - 16.1-8" date="1731931200">- Bump release for building in Konflux</changelog>
  <changelog author="Aviv Sabadra &lt;asabadra@redhat.com&gt; - 16.1-10" date="1732104000">- Bump release for Konflux</changelog>
  <changelog author="Aviv Sabadra &lt;asabadra@redhat.com&gt; - 16.1-11" date="1737979200">- Bump release for final January Konflux build</changelog>
  <changelog author="Aviv Sabadra &lt;asabadra@redhat.com&gt; - 16.1-12" date="1738065600">- Drop unnecessary PVC</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 16.1-13" date="1738929600">- Test draft builds with composes</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 16.1-14" date="1743076800">- Rebuild for Konflux (Resolves: RHEL-84822)</changelog>
</package>
<package pkgid="ed6baf5f40e8d685e3fbf5a642097ac3092f9d3521f69c524fb467e2077fdf18" name="libpinyin" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="9.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.0-1" date="1672833600">- Update to 2.8.0
- bug fixes for ARMv7</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.1-1" date="1673870400">- Update to 2.8.1
- bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.1-3" date="1684497600">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.1-5" date="1692792000">- Switch to use Kyoto Cabinet</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.1-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.1-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1bee9a3753c1052063ccf742bbae0d87ce50ed6ff176c9997395f5d5ccb1845f" name="libpinyin-data" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="9.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.0-1" date="1672833600">- Update to 2.8.0
- bug fixes for ARMv7</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.1-1" date="1673870400">- Update to 2.8.1
- bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.1-3" date="1684497600">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.1-5" date="1692792000">- Switch to use Kyoto Cabinet</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.1-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.1-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="740b74e1c2c22b6f314716cf09778493f1d1f54ae19cfb89930f35a1b1e54d50" name="libpinyin-devel" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="9.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.0-1" date="1672833600">- Update to 2.8.0
- bug fixes for ARMv7</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.1-1" date="1673870400">- Update to 2.8.1
- bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.1-3" date="1684497600">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.1-5" date="1692792000">- Switch to use Kyoto Cabinet</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.1-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.1-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="eee895e11b0f2dc6094a1aff9c6436e6cb06662af8a4d7e6afd878fc8f8cfcf7" name="libpinyin-tools" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="9.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.0-1" date="1672833600">- Update to 2.8.0
- bug fixes for ARMv7</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.1-1" date="1673870400">- Update to 2.8.1
- bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.1-3" date="1684497600">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.1-5" date="1692792000">- Switch to use Kyoto Cabinet</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.1-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.1-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6c048779776b1c65e3accd24c2d62f149784790dc0620f6f5c10d62a4429fc18" name="libpipeline" arch="x86_64">
  <version epoch="0" ver="1.5.7" rel="7.el10"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.5.7-1" date="1669032000">- Rebase to version 1.5.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.7-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.7-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.7-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.7-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.7-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.7-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="36a7ab19a5bd2b9c51aa4b973f139814a6e9cc6a79f9d55e777e67875c032615" name="libpipeline-devel" arch="x86_64">
  <version epoch="0" ver="1.5.7" rel="7.el10"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.5.7-1" date="1669032000">- Rebase to version 1.5.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.7-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.7-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.7-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.7-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.7-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.7-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ce1ae14445d8a3cf09909878d442968da9a049b473432504064459618ae15f75" name="libpkgconf" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="3.el10"/>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.8.0-6" date="1677067200">- Drop dependency on system-rpm-config (#2172406)</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.9.4-1" date="1677067201">- Rebase to 1.9.4</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 1.9.4-2" date="1684152000">- Rebuild for ATF soname bump</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 1.9.5-1" date="1684238400">- Update pkgconf to 1.9.5 (#2192963)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-2" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.1.0-1" date="1707739200">- update to 2.1.0
- https://github.com/pkgconf/pkgconf/blob/pkgconf-2.1.0/NEWS</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="72a875d3fd36ce6893be7eb311bb164883f5b0ad67beabd42448ea19ccc64d97" name="libpkgconf-devel" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="3.el10"/>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.8.0-6" date="1677067200">- Drop dependency on system-rpm-config (#2172406)</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 1.9.4-1" date="1677067201">- Rebase to 1.9.4</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 1.9.4-2" date="1684152000">- Rebuild for ATF soname bump</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 1.9.5-1" date="1684238400">- Update pkgconf to 1.9.5 (#2192963)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-2" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.5-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.1.0-1" date="1707739200">- update to 2.1.0
- https://github.com/pkgconf/pkgconf/blob/pkgconf-2.1.0/NEWS</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1e9a8817af6be96ff3f83c7564960cf5edb0b0f525cc16d43f6681b36a7fb76b" name="libpng" arch="x86_64">
  <version epoch="2" ver="1.6.40" rel="11.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.6.40-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-5" date="1722945600">- fix static analysis findings (RHEL-44993)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-6" date="1723118400">- fix hardening on aarch64</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-7" date="1723464000">- rebuild for rerunning tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.6.40-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-9" date="1768910400">- CVE-2025-64720: buffer overflow (RHEL-131432)
- CVE-2025-65018: heap buffer overflow (RHEL-131445)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-10" date="1771502400">- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-11" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148328)</changelog>
</package>
<package pkgid="7e73b951d1fbb936f65b651a6d72de942a7f252c82682877c20239d6ebf75c38" name="libpng" arch="x86_64">
  <version epoch="2" ver="1.6.40" rel="11.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.6.40-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-5" date="1722945600">- fix static analysis findings (RHEL-44993)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-6" date="1723118400">- fix hardening on aarch64</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-7" date="1723464000">- rebuild for rerunning tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.6.40-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-9" date="1768910400">- CVE-2025-64720: buffer overflow (RHEL-131432)
- CVE-2025-65018: heap buffer overflow (RHEL-131445)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-10" date="1771502400">- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-11" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148328)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-11.1" date="1778760000">- fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161329)
- fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161213)</changelog>
</package>
<package pkgid="4ada2f20e663b04fce737a4be5b27aebf5f81ca41b110976fcececfc36061ae8" name="libpng-devel" arch="x86_64">
  <version epoch="2" ver="1.6.40" rel="11.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.6.40-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-5" date="1722945600">- fix static analysis findings (RHEL-44993)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-6" date="1723118400">- fix hardening on aarch64</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-7" date="1723464000">- rebuild for rerunning tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.6.40-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-9" date="1768910400">- CVE-2025-64720: buffer overflow (RHEL-131432)
- CVE-2025-65018: heap buffer overflow (RHEL-131445)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-10" date="1771502400">- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-11" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148328)</changelog>
</package>
<package pkgid="b23bb7a005bad60f999cf22f5be1ad8e45ccef6285111b4e03174137d7ecc9a7" name="libpng-devel" arch="x86_64">
  <version epoch="2" ver="1.6.40" rel="11.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.6.40-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-5" date="1722945600">- fix static analysis findings (RHEL-44993)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-6" date="1723118400">- fix hardening on aarch64</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-7" date="1723464000">- rebuild for rerunning tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.6.40-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-9" date="1768910400">- CVE-2025-64720: buffer overflow (RHEL-131432)
- CVE-2025-65018: heap buffer overflow (RHEL-131445)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-10" date="1771502400">- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-11" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148328)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-11.1" date="1778760000">- fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161329)
- fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161213)</changelog>
</package>
<package pkgid="14b6c52bb92638355e7d17b0f2f135b6c76c4f5fec0de44a172d87dc942b2d62" name="libpng-static" arch="x86_64">
  <version epoch="2" ver="1.6.40" rel="11.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.6.40-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-5" date="1722945600">- fix static analysis findings (RHEL-44993)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-6" date="1723118400">- fix hardening on aarch64</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-7" date="1723464000">- rebuild for rerunning tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.6.40-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-9" date="1768910400">- CVE-2025-64720: buffer overflow (RHEL-131432)
- CVE-2025-65018: heap buffer overflow (RHEL-131445)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-10" date="1771502400">- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-11" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148328)</changelog>
</package>
<package pkgid="4250826e3c74734db3d76d4899c9b98d8022ce9e6d458deb619117bbb19a84bb" name="libpng-static" arch="x86_64">
  <version epoch="2" ver="1.6.40" rel="11.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.6.40-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-5" date="1722945600">- fix static analysis findings (RHEL-44993)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-6" date="1723118400">- fix hardening on aarch64</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-7" date="1723464000">- rebuild for rerunning tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.6.40-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-9" date="1768910400">- CVE-2025-64720: buffer overflow (RHEL-131432)
- CVE-2025-65018: heap buffer overflow (RHEL-131445)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-10" date="1771502400">- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-11" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148328)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-11.1" date="1778760000">- fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161329)
- fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161213)</changelog>
</package>
<package pkgid="3a4b46dfe3e3a6ae131114fa2bb14bdf5d283dacd96a3bd5056af75b66ed6ca5" name="libpng-tools" arch="x86_64">
  <version epoch="2" ver="1.6.40" rel="11.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.6.40-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-5" date="1722945600">- fix static analysis findings (RHEL-44993)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-6" date="1723118400">- fix hardening on aarch64</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-7" date="1723464000">- rebuild for rerunning tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.6.40-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-9" date="1768910400">- CVE-2025-64720: buffer overflow (RHEL-131432)
- CVE-2025-65018: heap buffer overflow (RHEL-131445)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-10" date="1771502400">- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-11" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148328)</changelog>
</package>
<package pkgid="7942c830680ac8a7c07d88d805c9972e9e40d52dec75921f5c3947192d18ef8a" name="libpng-tools" arch="x86_64">
  <version epoch="2" ver="1.6.40" rel="11.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.6.40-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-5" date="1722945600">- fix static analysis findings (RHEL-44993)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-6" date="1723118400">- fix hardening on aarch64</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-7" date="1723464000">- rebuild for rerunning tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2:1.6.40-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-9" date="1768910400">- CVE-2025-64720: buffer overflow (RHEL-131432)
- CVE-2025-65018: heap buffer overflow (RHEL-131445)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133216)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-10" date="1771502400">- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148832)
- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146650)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-11" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148328)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.40-11.1" date="1778760000">- fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161329)
- fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161213)</changelog>
</package>
<package pkgid="f2f77393b822594054040bf413365a13191e549b5a34ed1f5111f1a30b6b14a5" name="libportal" arch="x86_64">
  <version epoch="0" ver="0.9.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 0.8.1-1" date="1727611200">- Update to 0.8.1 and build Qt 6 bindings
  Resolves: RHEL-60817</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.8.1-3" date="1733918400">- Rebuild (qt6)
  Resolves: RHEL-53982</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-1" date="1736164800">- Update to 0.9.0
  Resolves: RHEL-72805</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-2" date="1749556800">- Rebuild (qt6)
  Resolves: RHEL-95936</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-3" date="1764676800">- Rebuild (qt6)
  Resolves: RHEL-109197</changelog>
</package>
<package pkgid="19d3ce9db56b46c145d2964f09a254ae1501742a3817d6d057b25a7239bb96f5" name="libportal-devel" arch="x86_64">
  <version epoch="0" ver="0.9.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 0.8.1-1" date="1727611200">- Update to 0.8.1 and build Qt 6 bindings
  Resolves: RHEL-60817</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.8.1-3" date="1733918400">- Rebuild (qt6)
  Resolves: RHEL-53982</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-1" date="1736164800">- Update to 0.9.0
  Resolves: RHEL-72805</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-2" date="1749556800">- Rebuild (qt6)
  Resolves: RHEL-95936</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-3" date="1764676800">- Rebuild (qt6)
  Resolves: RHEL-109197</changelog>
</package>
<package pkgid="a89cf9721a635390d821a83e3694f8e80b7afaff873acee273f5b61343775b35" name="libportal-devel-doc" arch="noarch">
  <version epoch="0" ver="0.9.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 0.8.1-1" date="1727611200">- Update to 0.8.1 and build Qt 6 bindings
  Resolves: RHEL-60817</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.8.1-3" date="1733918400">- Rebuild (qt6)
  Resolves: RHEL-53982</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-1" date="1736164800">- Update to 0.9.0
  Resolves: RHEL-72805</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-2" date="1749556800">- Rebuild (qt6)
  Resolves: RHEL-95936</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-3" date="1764676800">- Rebuild (qt6)
  Resolves: RHEL-109197</changelog>
</package>
<package pkgid="249e91a6480ee96885307a0a7cd6d2fa02216f2d71d2235d0f0ee766e3442849" name="libportal-gtk3" arch="x86_64">
  <version epoch="0" ver="0.9.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 0.8.1-1" date="1727611200">- Update to 0.8.1 and build Qt 6 bindings
  Resolves: RHEL-60817</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.8.1-3" date="1733918400">- Rebuild (qt6)
  Resolves: RHEL-53982</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-1" date="1736164800">- Update to 0.9.0
  Resolves: RHEL-72805</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-2" date="1749556800">- Rebuild (qt6)
  Resolves: RHEL-95936</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-3" date="1764676800">- Rebuild (qt6)
  Resolves: RHEL-109197</changelog>
</package>
<package pkgid="8840bd67f237b6947286882cdd6dc0880e5ac29d84950cdfd14a4c637d1ac1cc" name="libportal-gtk3-devel" arch="x86_64">
  <version epoch="0" ver="0.9.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 0.8.1-1" date="1727611200">- Update to 0.8.1 and build Qt 6 bindings
  Resolves: RHEL-60817</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.8.1-3" date="1733918400">- Rebuild (qt6)
  Resolves: RHEL-53982</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-1" date="1736164800">- Update to 0.9.0
  Resolves: RHEL-72805</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-2" date="1749556800">- Rebuild (qt6)
  Resolves: RHEL-95936</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-3" date="1764676800">- Rebuild (qt6)
  Resolves: RHEL-109197</changelog>
</package>
<package pkgid="b3fc8fbd531ed53547e4f7489f2a4e5b77885b288f2be8fed9b569ac45b361b5" name="libportal-gtk4" arch="x86_64">
  <version epoch="0" ver="0.9.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 0.8.1-1" date="1727611200">- Update to 0.8.1 and build Qt 6 bindings
  Resolves: RHEL-60817</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.8.1-3" date="1733918400">- Rebuild (qt6)
  Resolves: RHEL-53982</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-1" date="1736164800">- Update to 0.9.0
  Resolves: RHEL-72805</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-2" date="1749556800">- Rebuild (qt6)
  Resolves: RHEL-95936</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-3" date="1764676800">- Rebuild (qt6)
  Resolves: RHEL-109197</changelog>
</package>
<package pkgid="7a1a63502b97be4db519dd23b09b36e3b249bf9787377bda432dd221e34a986f" name="libportal-gtk4-devel" arch="x86_64">
  <version epoch="0" ver="0.9.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 0.8.1-1" date="1727611200">- Update to 0.8.1 and build Qt 6 bindings
  Resolves: RHEL-60817</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.8.1-3" date="1733918400">- Rebuild (qt6)
  Resolves: RHEL-53982</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-1" date="1736164800">- Update to 0.9.0
  Resolves: RHEL-72805</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-2" date="1749556800">- Rebuild (qt6)
  Resolves: RHEL-95936</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-3" date="1764676800">- Rebuild (qt6)
  Resolves: RHEL-109197</changelog>
</package>
<package pkgid="825eaa41aa045432ccdc6c2aad5c7e66b4525a3a3702e2f1ec4fb685e8b591de" name="libportal-qt6" arch="x86_64">
  <version epoch="0" ver="0.9.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 0.8.1-1" date="1727611200">- Update to 0.8.1 and build Qt 6 bindings
  Resolves: RHEL-60817</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.8.1-3" date="1733918400">- Rebuild (qt6)
  Resolves: RHEL-53982</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-1" date="1736164800">- Update to 0.9.0
  Resolves: RHEL-72805</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-2" date="1749556800">- Rebuild (qt6)
  Resolves: RHEL-95936</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-3" date="1764676800">- Rebuild (qt6)
  Resolves: RHEL-109197</changelog>
</package>
<package pkgid="e9c44650e0af5b9c776f9589d99a02301a1da88173a516f7ab09d2b797847f54" name="libportal-qt6-devel" arch="x86_64">
  <version epoch="0" ver="0.9.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 0.8.1-1" date="1727611200">- Update to 0.8.1 and build Qt 6 bindings
  Resolves: RHEL-60817</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.8.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.8.1-3" date="1733918400">- Rebuild (qt6)
  Resolves: RHEL-53982</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-1" date="1736164800">- Update to 0.9.0
  Resolves: RHEL-72805</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-2" date="1749556800">- Rebuild (qt6)
  Resolves: RHEL-95936</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.9.0-3" date="1764676800">- Rebuild (qt6)
  Resolves: RHEL-109197</changelog>
</package>
<package pkgid="4cc289ff068b6f58828091a1ca97653706ffef42d3126bf99232a059391519e9" name="libppd" arch="x86_64">
  <version epoch="1" ver="2.0.0" rel="10.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0~rc2-4" date="1695211200">- CVE-2023-4504 libppd: Postscript Parsing Heap Overflow</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-1" date="1697716800">- 2240389 - libppd-2.0.0 is available</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-5" date="1721217600">- RHEL-25803 libppd - backport fix for PWG printer support</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-6" date="1722945600">- RHEL-52980 fix deciding page sizes by changing delta for difference</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-9" date="1732190400">- RHEL-60335 CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-10" date="1738756800">- RHEL-71942 Fix several important issues reported by OSH</changelog>
</package>
<package pkgid="5132c6a091fa9b2f91b0ed9a4f55d84fa19717ef34b68a52ff618112fef1960c" name="libppd-devel" arch="x86_64">
  <version epoch="1" ver="2.0.0" rel="10.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0~rc2-4" date="1695211200">- CVE-2023-4504 libppd: Postscript Parsing Heap Overflow</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-1" date="1697716800">- 2240389 - libppd-2.0.0 is available</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.0.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-5" date="1721217600">- RHEL-25803 libppd - backport fix for PWG printer support</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-6" date="1722945600">- RHEL-52980 fix deciding page sizes by changing delta for difference</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:2.0.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-9" date="1732190400">- RHEL-60335 CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.0.0-10" date="1738756800">- RHEL-71942 Fix several important issues reported by OSH</changelog>
</package>
<package pkgid="b6fdd483e9849266b507032dcd08dfeefd17ad7a810a3b6d5e2ccd53f19e5ca7" name="libpq" arch="x86_64">
  <version epoch="0" ver="16.11" rel="3.el10_1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 16.1-4" date="1708430400">- Backport OpenSSL 3.2 fix from upstream master</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.1-5" date="1718712000">- Ship errcodes.h in -devel package (kea package requires errorcodes)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.1-7" date="1720008000">- Disable openssl ENGINE_API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.1-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; 16.8-1" date="1740052800">- Update to 16.8</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; 16.8-2" date="1741176000">- Bump release for rebuild</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.11-1" date="1764590400">- Rebase to upstream release 16.11</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.11-3" date="1764590401">- Release bump</changelog>
</package>
<package pkgid="47225274b807ec0c78d93dbf18c8e221c3fbcb8541c2187121e1d62051532777" name="libpq" arch="x86_64">
  <version epoch="0" ver="16.14" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.1-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; 16.8-1" date="1740052800">- Update to 16.8</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; 16.8-2" date="1741176000">- Bump release for rebuild</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.11-1" date="1764590400">- Rebase to upstream release 16.11</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.11-3" date="1764590401">- Release bump</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.14-1" date="1784548800">- Rebase to upstream release 16.14
- Resolves: RHEL-192240</changelog>
</package>
<package pkgid="47bb7fc50a283b2d2a381bb56538b33db154b78f5245cb324d1e008c90c4531d" name="libpq-devel" arch="x86_64">
  <version epoch="0" ver="16.11" rel="3.el10_1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 16.1-4" date="1708430400">- Backport OpenSSL 3.2 fix from upstream master</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.1-5" date="1718712000">- Ship errcodes.h in -devel package (kea package requires errorcodes)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.1-7" date="1720008000">- Disable openssl ENGINE_API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.1-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; 16.8-1" date="1740052800">- Update to 16.8</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; 16.8-2" date="1741176000">- Bump release for rebuild</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.11-1" date="1764590400">- Rebase to upstream release 16.11</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.11-3" date="1764590401">- Release bump</changelog>
</package>
<package pkgid="9f6eaf4a642447a9c148aecc87800e399f0e27034b2561ed56cf2ae178b23418" name="libpq-devel" arch="x86_64">
  <version epoch="0" ver="16.14" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 16.1-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; 16.8-1" date="1740052800">- Update to 16.8</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; 16.8-2" date="1741176000">- Bump release for rebuild</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.11-1" date="1764590400">- Rebase to upstream release 16.11</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.11-3" date="1764590401">- Release bump</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 16.14-1" date="1784548800">- Rebase to upstream release 16.14
- Resolves: RHEL-192240</changelog>
</package>
<package pkgid="b0a3fe0811121c260153c84cb068808a3286223c62b8c6db0c73640384cdb470" name="libproxy" arch="x86_64">
  <version epoch="0" ver="0.5.5" rel="4.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.5.2-1" date="1687089600">- Update to 0.5.2</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.5.3-1" date="1688731200">- Update to 0.5.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.3-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.5.3-3" date="1698926400">- Install a versioned library symlink (#2247508)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.3-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.3-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.5.5-1" date="1713441600">- Update to 0.5.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.5.5-2" date="1713441601">- Add gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.5-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="f021a3dcd272e28f3edbac4d0000d5b15b22b839841a2c953204eff1c4791aeb" name="libproxy-bin" arch="x86_64">
  <version epoch="0" ver="0.5.5" rel="4.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.5.2-1" date="1687089600">- Update to 0.5.2</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.5.3-1" date="1688731200">- Update to 0.5.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.3-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.5.3-3" date="1698926400">- Install a versioned library symlink (#2247508)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.3-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.3-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.5.5-1" date="1713441600">- Update to 0.5.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.5.5-2" date="1713441601">- Add gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.5-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="56c8ea0dd56f9269b64617c29557285e36efb7cd59c59ad4de9d21c713a748f8" name="libproxy-devel" arch="x86_64">
  <version epoch="0" ver="0.5.5" rel="4.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.5.2-1" date="1687089600">- Update to 0.5.2</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.5.3-1" date="1688731200">- Update to 0.5.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.3-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.5.3-3" date="1698926400">- Install a versioned library symlink (#2247508)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.3-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.3-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.5.5-1" date="1713441600">- Update to 0.5.5</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.5.5-2" date="1713441601">- Add gating.yaml</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.5-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.5.5-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="32d37cbe9416d2d729523261d342f0b7745cddb64c084768c9cfa13a52151ff3" name="libpsl" arch="x86_64">
  <version epoch="0" ver="0.21.5" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.2-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.21.2-3" date="1686916800">- Rebuilt for libunistring-1.1
- Mark psl-make-dafsa noarch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.2-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.21.2-5" date="1691064000">- migrate to SPDX license format
  - the old and new license tags are identical, this changelog entry just
    indicates that it was checked to be correct</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.21.5-1" date="1705233600">- Update to 0.21.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.5-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.5-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.5-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.21.5-5" date="1728388800">- enable c10s gating</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="6f4281358b7dcb3aeb6a003712577cc97d811d26ef9641b8583d5d415c19f292" name="libpsl-devel" arch="x86_64">
  <version epoch="0" ver="0.21.5" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.2-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.21.2-3" date="1686916800">- Rebuilt for libunistring-1.1
- Mark psl-make-dafsa noarch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.2-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 0.21.2-5" date="1691064000">- migrate to SPDX license format
  - the old and new license tags are identical, this changelog entry just
    indicates that it was checked to be correct</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.21.5-1" date="1705233600">- Update to 0.21.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.5-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.5-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.5-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.21.5-5" date="1728388800">- enable c10s gating</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.5-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="92590d1d78dab582eab87ce4d59a44de1a7f8d483345e6e7d820fc78d5981026" name="libpwquality" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="12.el10"/>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.4.5-3" date="1675252800">- Strengthen cracklib-dicts dependency to Recommends (#2158891)</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.4.5-4" date="1680264000">- Use setuptools instead of distutils to build this package
- Resolves: rhbz#2165572</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.4.5-5" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.5-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.4.5-7" date="1691150400">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.5-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.5-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.5-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Veronika Hanulikova &lt;vhanulik@redhat.com&gt; - 1.4.5-11" date="1722340800">- Add cracklib dependency (RHEL-39973)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.5-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="07353fbc89b0dafc2b3a41cbe75665076cdaa77a25c8bc9a458121df724f349f" name="libpwquality-devel" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="12.el10"/>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.4.5-3" date="1675252800">- Strengthen cracklib-dicts dependency to Recommends (#2158891)</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.4.5-4" date="1680264000">- Use setuptools instead of distutils to build this package
- Resolves: rhbz#2165572</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.4.5-5" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.5-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1.4.5-7" date="1691150400">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.5-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.5-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.5-10" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Veronika Hanulikova &lt;vhanulik@redhat.com&gt; - 1.4.5-11" date="1722340800">- Add cracklib dependency (RHEL-39973)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.5-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fa93024ef399ba84ac8c642d9909a28ad46df7b9024d1df700be6bee74852ac2" name="libqb" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.0.6-6" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.7-1" date="1686139200">- rebase to v2.0.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.7-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.8-1" date="1689940800">- rebase to v2.0.8</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.8-2" date="1701691200">- update doxygen2man for latest libXML2 - include parser.h</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.8-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.8-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.8-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.8-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1b4db151835b3b94f97860b7ca5789c34853869d6db6b0a425ff61e497d249fa" name="libqb-devel" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.0.6-6" date="1686052800">- migrated to SPDX license</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.7-1" date="1686139200">- rebase to v2.0.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.7-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.8-1" date="1689940800">- rebase to v2.0.8</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.8-2" date="1701691200">- update doxygen2man for latest libXML2 - include parser.h</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.8-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.8-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.8-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.8-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c56d1123d6e31168dc20c40dc030ac7b0998ade9d307dc3f9dee0c7202ff6566" name="libqmi" arch="x86_64">
  <version epoch="0" ver="1.34.0" rel="9.el10"/>
  <changelog author="Dennis Gilmore &lt;dennis@ausil.us&gt; - 1.34.0-1" date="1704801600">- update to 1.34.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.34.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.34.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.34.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.34.0-7" date="1719316800">- Add patches for a pair of bugs that make static analysis unhappy (RHEL-38475)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.34.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1.34.0-9" date="1765800000">- Fix build with meson &gt;= 1.7 (RHEL-133035)</changelog>
</package>
<package pkgid="a7b457fa2195383b6698b70b2dd4e343533fa40a88b6b2aad17678d82d70a20a" name="libqmi-devel" arch="x86_64">
  <version epoch="0" ver="1.34.0" rel="9.el10"/>
  <changelog author="Dennis Gilmore &lt;dennis@ausil.us&gt; - 1.34.0-1" date="1704801600">- update to 1.34.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.34.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.34.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.34.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.34.0-7" date="1719316800">- Add patches for a pair of bugs that make static analysis unhappy (RHEL-38475)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.34.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1.34.0-9" date="1765800000">- Fix build with meson &gt;= 1.7 (RHEL-133035)</changelog>
</package>
<package pkgid="15a8248dbcf56a5146d6d9acd9538f8301cb41e62262b176e8d00001b038242f" name="libqmi-utils" arch="x86_64">
  <version epoch="0" ver="1.34.0" rel="9.el10"/>
  <changelog author="Dennis Gilmore &lt;dennis@ausil.us&gt; - 1.34.0-1" date="1704801600">- update to 1.34.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.34.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.34.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.34.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.34.0-7" date="1719316800">- Add patches for a pair of bugs that make static analysis unhappy (RHEL-38475)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.34.0-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1.34.0-9" date="1765800000">- Fix build with meson &gt;= 1.7 (RHEL-133035)</changelog>
</package>
<package pkgid="aa1d2df2680640479fefaf374b91237d4f55738d97f93a28dca79cff525c1596" name="libqrtr-glib" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="7.el10"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.2.2-1" date="1669118400">- Update to 1.2.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.2-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.2-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.2-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.2-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.2-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.2-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="3343dae43a112fa6806441088a992fab7f9836324949d4212e893757778d4ba0" name="libqrtr-glib-devel" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="7.el10"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.2.2-1" date="1669118400">- Update to 1.2.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.2-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.2-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.2-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.2-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.2-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.2-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="35e6b5bff035edd6ea2fdfc4441333fffeb4d1fe986cbc41b83ba4bd4fb4fcfa" name="libquadmath" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="ee6d3352448ee1ff221864b05a36efa5be8fdce58a8772d3b4212a4c894de875" name="libquadmath-devel" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="9c4fa98da86031d57d3e92dae7742df95476595bd4fd2f7bca86396f2d3e7de5" name="libquadmath-static" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="0c74aaf9d6e905082e0df4244fb82073a993f3d36321361c39ec3a588f5441a0" name="librabbitmq" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="3.el10"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.12.0-1" date="1675252800">- update to 0.12.0
- add patch to not install the static library, from
  https://github.com/alanxz/rabbitmq-c/pull/749
- add patch to fix version in pkgconfig file, from
  https://github.com/alanxz/rabbitmq-c/pull/751</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.13.0-1" date="1675684800">- update to 0.13.0
- drop patches merged upstream</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.13.0-2" date="1688040000">- fix security issue, CVE-2023-35789</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.13.0-6" date="1712059200">- Resolves: RHEL-31259, Conditionally enable SSL engine APIs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.14.0-1" date="1712145600">- update to 0.14.0
- fix rpminspect rpmdeps
- fix gating-yaml-checks

Related: RHEL-31259</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.14.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.14.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5c95eae081dcb27e9082a71df6602998cebfa1897b654e73d24a54978b5dba17" name="librabbitmq-devel" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="3.el10"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.12.0-1" date="1675252800">- update to 0.12.0
- add patch to not install the static library, from
  https://github.com/alanxz/rabbitmq-c/pull/749
- add patch to fix version in pkgconfig file, from
  https://github.com/alanxz/rabbitmq-c/pull/751</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.13.0-1" date="1675684800">- update to 0.13.0
- drop patches merged upstream</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.13.0-2" date="1688040000">- fix security issue, CVE-2023-35789</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.13.0-6" date="1712059200">- Resolves: RHEL-31259, Conditionally enable SSL engine APIs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.14.0-1" date="1712145600">- update to 0.14.0
- fix rpminspect rpmdeps
- fix gating-yaml-checks

Related: RHEL-31259</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.14.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.14.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="39357b467f309b9903ee05efa9205b9fdef6b70fd51a3751f5af8ca4cce9b26a" name="librabbitmq-tools" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="3.el10"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.12.0-1" date="1675252800">- update to 0.12.0
- add patch to not install the static library, from
  https://github.com/alanxz/rabbitmq-c/pull/749
- add patch to fix version in pkgconfig file, from
  https://github.com/alanxz/rabbitmq-c/pull/751</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.13.0-1" date="1675684800">- update to 0.13.0
- drop patches merged upstream</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.13.0-2" date="1688040000">- fix security issue, CVE-2023-35789</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.13.0-6" date="1712059200">- Resolves: RHEL-31259, Conditionally enable SSL engine APIs</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.14.0-1" date="1712145600">- update to 0.14.0
- fix rpminspect rpmdeps
- fix gating-yaml-checks

Related: RHEL-31259</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.14.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.14.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f79cb8b4aaa714f5cf4ddf381d18e71775b1de654253bdb0e5f6e4297623b254" name="librados-devel" arch="x86_64">
  <version epoch="2" ver="18.2.1" rel="4.el10"/>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2:18.1.2-0.3" date="1689076800">- Rebuilt for ICU 73.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- with python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.5" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- revert python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.1" date="1690372800">- ceph-18.1.3 RC4</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.2" date="1690977600">- ceph-18.1.3 RC4, rebuild with libarrow-13.0.0</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.0-1" date="1691150400">- ceph-18.2.0 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-1" date="1700049600">- ceph-18.2.1 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-2" date="1702987200">- ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
  https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-3" date="1706097600">- gcc-14</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2:18.2.1-4" date="1709726400">- Add support for riscv64</changelog>
</package>
<package pkgid="e6f1be45e5752f6b0eec43414a784bdce2923213520225b7b8e7fddc8cde6f18" name="librados2" arch="x86_64">
  <version epoch="2" ver="18.2.1" rel="4.el10"/>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2:18.1.2-0.3" date="1689076800">- Rebuilt for ICU 73.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- with python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.5" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- revert python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.1" date="1690372800">- ceph-18.1.3 RC4</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.2" date="1690977600">- ceph-18.1.3 RC4, rebuild with libarrow-13.0.0</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.0-1" date="1691150400">- ceph-18.2.0 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-1" date="1700049600">- ceph-18.2.1 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-2" date="1702987200">- ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
  https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-3" date="1706097600">- gcc-14</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2:18.2.1-4" date="1709726400">- Add support for riscv64</changelog>
</package>
<package pkgid="05e39deab6bec6ed557907340b145ece40a04d7ef9c0af7bbee795a5d7797b9b" name="libradospp-devel" arch="x86_64">
  <version epoch="2" ver="18.2.1" rel="4.el10"/>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2:18.1.2-0.3" date="1689076800">- Rebuilt for ICU 73.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- with python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.5" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- revert python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.1" date="1690372800">- ceph-18.1.3 RC4</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.2" date="1690977600">- ceph-18.1.3 RC4, rebuild with libarrow-13.0.0</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.0-1" date="1691150400">- ceph-18.2.0 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-1" date="1700049600">- ceph-18.2.1 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-2" date="1702987200">- ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
  https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-3" date="1706097600">- gcc-14</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2:18.2.1-4" date="1709726400">- Add support for riscv64</changelog>
</package>
<package pkgid="2130f89292267c3201e3450e8cbfdbd0ca5e26080bd41deeae0dcd4b67128287" name="libradosstriper-devel" arch="x86_64">
  <version epoch="2" ver="18.2.1" rel="4.el10"/>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2:18.1.2-0.3" date="1689076800">- Rebuilt for ICU 73.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- with python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.5" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- revert python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.1" date="1690372800">- ceph-18.1.3 RC4</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.2" date="1690977600">- ceph-18.1.3 RC4, rebuild with libarrow-13.0.0</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.0-1" date="1691150400">- ceph-18.2.0 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-1" date="1700049600">- ceph-18.2.1 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-2" date="1702987200">- ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
  https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-3" date="1706097600">- gcc-14</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2:18.2.1-4" date="1709726400">- Add support for riscv64</changelog>
</package>
<package pkgid="8b4e86faa1d3082af1b81e501896791c38336e40bd9e6983ad1a40aec497de4a" name="libradosstriper1" arch="x86_64">
  <version epoch="2" ver="18.2.1" rel="4.el10"/>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2:18.1.2-0.3" date="1689076800">- Rebuilt for ICU 73.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- with python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.5" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- revert python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.1" date="1690372800">- ceph-18.1.3 RC4</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.2" date="1690977600">- ceph-18.1.3 RC4, rebuild with libarrow-13.0.0</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.0-1" date="1691150400">- ceph-18.2.0 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-1" date="1700049600">- ceph-18.2.1 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-2" date="1702987200">- ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
  https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-3" date="1706097600">- gcc-14</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2:18.2.1-4" date="1709726400">- Add support for riscv64</changelog>
</package>
<package pkgid="d61f791c341c4b2813452dfd8954cdf7a90f6b22e26939cac770fe59ecb04ad3" name="librbd-devel" arch="x86_64">
  <version epoch="2" ver="18.2.1" rel="4.el10"/>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2:18.1.2-0.3" date="1689076800">- Rebuilt for ICU 73.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- with python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.5" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- revert python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.1" date="1690372800">- ceph-18.1.3 RC4</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.2" date="1690977600">- ceph-18.1.3 RC4, rebuild with libarrow-13.0.0</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.0-1" date="1691150400">- ceph-18.2.0 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-1" date="1700049600">- ceph-18.2.1 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-2" date="1702987200">- ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
  https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-3" date="1706097600">- gcc-14</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2:18.2.1-4" date="1709726400">- Add support for riscv64</changelog>
</package>
<package pkgid="0d66f5079de0a66cdd690aee35b098cdf1670d90296955e6faa31f7970611c5b" name="librbd1" arch="x86_64">
  <version epoch="2" ver="18.2.1" rel="4.el10"/>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2:18.1.2-0.3" date="1689076800">- Rebuilt for ICU 73.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- with python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:18.1.2-0.5" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
- revert python3-Cython -&gt; python3dist(cython) &lt; 3~~</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.1" date="1690372800">- ceph-18.1.3 RC4</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.1.3-0.2" date="1690977600">- ceph-18.1.3 RC4, rebuild with libarrow-13.0.0</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.0-1" date="1691150400">- ceph-18.2.0 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-1" date="1700049600">- ceph-18.2.1 GA</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-2" date="1702987200">- ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
  https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:18.2.1-3" date="1706097600">- gcc-14</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2:18.2.1-4" date="1709726400">- Add support for riscv64</changelog>
</package>
<package pkgid="a6884526bcdd2378c3770b9342be48cf278665d1c22b973b668581c8cf02e029" name="librdkafka" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.2-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 1.9.2-3" date="1685534400">- Update License tag for SPDX
- Upstream sources claim that the Apache 2.0 is used</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.1.1-1" date="1686830400">- Rebase to latest upstream version
  resolves: rhbz#1947184</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.1.1-5" date="1716811200">- Disable building with openssl engine support
  resolves: RHEL-33739</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.1-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4bdcb53f38827c31130107cd20440afd94a29d651245702807537976d4c56657" name="librdkafka-devel" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.2-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 1.9.2-3" date="1685534400">- Update License tag for SPDX
- Upstream sources claim that the Apache 2.0 is used</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.1.1-1" date="1686830400">- Rebase to latest upstream version
  resolves: rhbz#1947184</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.1.1-5" date="1716811200">- Disable building with openssl engine support
  resolves: RHEL-33739</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.1-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="04d5136492c8d3cceb297c61e271f783a8dd2f42770d885e143e8e2334567df9" name="librdmacm" arch="x86_64">
  <version epoch="0" ver="61.0" rel="1.el10"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1768478400">- Rebase to upstream release 61.0</changelog>
</package>
<package pkgid="e3b5e98bc8d2ba0dc613287c26133feef542c7908f7461f42b009afd0aee4163" name="librdmacm-utils" arch="x86_64">
  <version epoch="0" ver="61.0" rel="1.el10"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 61.0-1" date="1768478400">- Rebase to upstream release 61.0</changelog>
</package>
<package pkgid="38685cbf3076f814f0488ded0e78ec52e69f900752b689ea49e4f73ce53b3d86" name="libref_array" arch="x86_64">
  <version epoch="0" ver="0.1.5" rel="58.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-53" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-54" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-55" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-56" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-57" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-58" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6309b3d50babef1f3b301c0e6e8417bd4a4e5564bc68417be4cf9326f4191f73" name="libref_array-devel" arch="x86_64">
  <version epoch="0" ver="0.1.5" rel="58.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-53" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-54" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-55" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.2-56" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-57" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.6.2-58" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a1fbe1c5aa56e62f3a3ac6cdc335c89ce15529540186eff3cf49f2e50795547c" name="librelp" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.0-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 1.11.0-1" date="1687262400">- rebase to 1.11.0
  resolves: rhbz#2159703
- enable openssl</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 1.11.0-6" date="1723723200">- Rebuild
  Resolves: RHEL-54298</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9d5f28777d1ca9645f934eae752532c6a554c0a9021222bc5a4effc196e87843" name="librelp-devel" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.0-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 1.11.0-1" date="1687262400">- rebase to 1.11.0
  resolves: rhbz#2159703
- enable openssl</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 1.11.0-6" date="1723723200">- Rebuild
  Resolves: RHEL-54298</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.11.0-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fcd569f4344e01101f6369c23719a650954fa62a54ef3a956bad482b83d5a8f3" name="librepo" arch="x86_64">
  <version epoch="0" ver="1.19.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jan Kolarik &lt;jkolarik@redhat.com&gt; - 1.17.1-1" date="1711454400">- Update to 1.17.1 (RHEL-38831)
- gpg_gpgme.c: fix build errors with older gcc
- Change header files to match a configured ABI regarding a zchunk support
- Fix building zchunk code if zchunk is enabled
- Fix compiler warnings</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 1.18.0-1" date="1719921600">- Update to 1.18.0 (RHEL-35699)
- API: Add LRO_USERNAME and LRO_PASSWORD options
- Add a private dependency on zck to librepo.pc if zchunk support is enabled
- Hash cache: Improved work with extended file attributes
- Improve performance of large number of package downloads
- Fix error handling, Fix examples and build them</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.18.0-2" date="1721044800">- Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
- Fix a memory leak in select_next_target() (RHEL-35699)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.18.0-4" date="1750766400">- Propagate return value from prepare_repo_download_targets (RHEL-85338)</changelog>
  <changelog author="Romain Geissler &lt;romain.geissler@amadeus.com&gt; - 1.18.0-5" date="1750766401">- Fix input termination for pgpParsePkts
  Resolves: RHEL-82533</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.18.0-6" date="1751544000">- Test for: Fix input termination for pgpParsePkts (RHEL-61730)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.19.0-1" date="1764072000">- Rebase to 1.19.0 (RHEL-126292)</changelog>
</package>
<package pkgid="83697a87d3cce3005f9b5e66459343d12c465e60999d59ce6d5320a1aaa569d8" name="librepo-devel" arch="x86_64">
  <version epoch="0" ver="1.19.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jan Kolarik &lt;jkolarik@redhat.com&gt; - 1.17.1-1" date="1711454400">- Update to 1.17.1 (RHEL-38831)
- gpg_gpgme.c: fix build errors with older gcc
- Change header files to match a configured ABI regarding a zchunk support
- Fix building zchunk code if zchunk is enabled
- Fix compiler warnings</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 1.18.0-1" date="1719921600">- Update to 1.18.0 (RHEL-35699)
- API: Add LRO_USERNAME and LRO_PASSWORD options
- Add a private dependency on zck to librepo.pc if zchunk support is enabled
- Hash cache: Improved work with extended file attributes
- Improve performance of large number of package downloads
- Fix error handling, Fix examples and build them</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.18.0-2" date="1721044800">- Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
- Fix a memory leak in select_next_target() (RHEL-35699)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.18.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.18.0-4" date="1750766400">- Propagate return value from prepare_repo_download_targets (RHEL-85338)</changelog>
  <changelog author="Romain Geissler &lt;romain.geissler@amadeus.com&gt; - 1.18.0-5" date="1750766401">- Fix input termination for pgpParsePkts
  Resolves: RHEL-82533</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.18.0-6" date="1751544000">- Test for: Fix input termination for pgpParsePkts (RHEL-61730)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.19.0-1" date="1764072000">- Rebase to 1.19.0 (RHEL-126292)</changelog>
</package>
<package pkgid="13e892dc14f3ebfb5f8a73f9bc74cfefc77240e841389118c31a08fffbfc6b32" name="libreswan" arch="x86_64">
  <version epoch="0" ver="5.3" rel="8.el10_2"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.2-1" date="1741262400">- Update to libreswan 5.2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.2-2" date="1750248000">- ipsec delete: expect no IKE only for orphan child</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3-1" date="1752235200">- Update to libreswan-5.3</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 5.3-2" date="1767960000">- ikev2: reject simultaneous IKE_AUTH requests</changelog>
  <changelog author="Andrew Cagney &lt;cagney@gnu.org&gt; - 5.3-3" date="1768392000">- helpers: work around NSS by joining helper threads</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3-4" date="1770120000">- pluto: reject crossing IKE_AUTH request only for the one side</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3-5" date="1771848000">- Subpackage minimal set of daemons into -minimal</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 5.3-6" date="1773748800">- CI: Update CI plan url</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 5.3-7" date="1773748801">- ikev2: use nonces to tie-break simultaneous IKE</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3-8" date="1773835200">- Bump release number</changelog>
</package>
<package pkgid="ffe09cf1bfdc5e6ea4eada9782c19bf986726e55c52e35eb0456968daa17ea3e" name="libreswan" arch="x86_64">
  <version epoch="0" ver="5.3.2" rel="1.el10_2"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3-1" date="1752235200">- Update to libreswan-5.3</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 5.3-2" date="1767960000">- ikev2: reject simultaneous IKE_AUTH requests</changelog>
  <changelog author="Andrew Cagney &lt;cagney@gnu.org&gt; - 5.3-3" date="1768392000">- helpers: work around NSS by joining helper threads</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3-4" date="1770120000">- pluto: reject crossing IKE_AUTH request only for the one side</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3-5" date="1771848000">- Subpackage minimal set of daemons into -minimal</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 5.3-6" date="1773748800">- CI: Update CI plan url</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 5.3-7" date="1773748801">- ikev2: use nonces to tie-break simultaneous IKE</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3-8" date="1773835200">- Bump release number</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3.1-1" date="1782993600">- Update to libreswan-5.3.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3.2-1" date="1784808000">- Update to libreswan-5.3.2</changelog>
</package>
<package pkgid="ab54d6f6328e5e3b578770dc1b50518737434ec47b7236e8703cb73033235250" name="libreswan-minimal" arch="x86_64">
  <version epoch="0" ver="5.3" rel="8.el10_2"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.2-1" date="1741262400">- Update to libreswan 5.2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.2-2" date="1750248000">- ipsec delete: expect no IKE only for orphan child</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3-1" date="1752235200">- Update to libreswan-5.3</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 5.3-2" date="1767960000">- ikev2: reject simultaneous IKE_AUTH requests</changelog>
  <changelog author="Andrew Cagney &lt;cagney@gnu.org&gt; - 5.3-3" date="1768392000">- helpers: work around NSS by joining helper threads</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3-4" date="1770120000">- pluto: reject crossing IKE_AUTH request only for the one side</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3-5" date="1771848000">- Subpackage minimal set of daemons into -minimal</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 5.3-6" date="1773748800">- CI: Update CI plan url</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 5.3-7" date="1773748801">- ikev2: use nonces to tie-break simultaneous IKE</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3-8" date="1773835200">- Bump release number</changelog>
</package>
<package pkgid="3b109f1870353e71876bc8dd78a3defb1a598daa9799a92af65ce5c14679d654" name="libreswan-minimal" arch="x86_64">
  <version epoch="0" ver="5.3.2" rel="1.el10_2"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3-1" date="1752235200">- Update to libreswan-5.3</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 5.3-2" date="1767960000">- ikev2: reject simultaneous IKE_AUTH requests</changelog>
  <changelog author="Andrew Cagney &lt;cagney@gnu.org&gt; - 5.3-3" date="1768392000">- helpers: work around NSS by joining helper threads</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3-4" date="1770120000">- pluto: reject crossing IKE_AUTH request only for the one side</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3-5" date="1771848000">- Subpackage minimal set of daemons into -minimal</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 5.3-6" date="1773748800">- CI: Update CI plan url</changelog>
  <changelog author="Ondrej Moris &lt;omoris@redhat.com&gt; - 5.3-7" date="1773748801">- ikev2: use nonces to tie-break simultaneous IKE</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3-8" date="1773835200">- Bump release number</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3.1-1" date="1782993600">- Update to libreswan-5.3.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 5.3.2-1" date="1784808000">- Update to libreswan-5.3.2</changelog>
</package>
<package pkgid="705c960b714e209aeccce17e902716bb38a7788b95a9f08551f50a65331289dd" name="librhsm" arch="x86_64">
  <version epoch="0" ver="0.0.3" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.3-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.3-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.0.3-11" date="1692792000">- Convert a license tag to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.3-12" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.3-13" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.0.3-14" date="1717070400">- Improve a documentation (RHEL-38831)
- Refactor parse_entitlement_data() (RHEL-32365)
- Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.0.3-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.0.3-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b844356b49718dd54566cbeecea29a260b68658c75c89c2480f4411967b74abb" name="librhsm-devel" arch="x86_64">
  <version epoch="0" ver="0.0.3" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.3-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.3-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.0.3-11" date="1692792000">- Convert a license tag to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.3-12" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.3-13" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.0.3-14" date="1717070400">- Improve a documentation (RHEL-38831)
- Refactor parse_entitlement_data() (RHEL-32365)
- Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.0.3-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.0.3-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1359cc1a839388349f84bdcaf03a949e03946199e6c46b26792c99ea2cb7940d" name="librsvg2" arch="x86_64">
  <version epoch="0" ver="2.57.1" rel="9.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.57.0-4" date="1699876800">- Fix RHEL build</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.57.1-1" date="1702641600">- Update to 2.57.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.57.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.57.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.57.1-4" date="1706788800">- Update Rust macro usage</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.57.1-5" date="1718366400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.57.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Brian Stinson &lt;bstinson@redhat.com&gt; - 2.57.1-7" date="1722427200">- Backport a patch from rawhide disabling broken tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.57.1-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.57.1-9" date="1732190400">- Fix FTBFS by updating time crate</changelog>
</package>
<package pkgid="542ba9ff387aa0a05be35ea7d926366827c3da097d761226c220e44a0cd00a6b" name="librsvg2-devel" arch="x86_64">
  <version epoch="0" ver="2.57.1" rel="9.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.57.0-4" date="1699876800">- Fix RHEL build</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.57.1-1" date="1702641600">- Update to 2.57.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.57.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.57.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.57.1-4" date="1706788800">- Update Rust macro usage</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.57.1-5" date="1718366400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.57.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Brian Stinson &lt;bstinson@redhat.com&gt; - 2.57.1-7" date="1722427200">- Backport a patch from rawhide disabling broken tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.57.1-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.57.1-9" date="1732190400">- Fix FTBFS by updating time crate</changelog>
</package>
<package pkgid="f97f0eb3ede16e0abcee1f49111185241870eb92802205e1512e5c0e90df5548" name="librsvg2-tools" arch="x86_64">
  <version epoch="0" ver="2.57.1" rel="9.el10"/>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.57.0-4" date="1699876800">- Fix RHEL build</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.57.1-1" date="1702641600">- Update to 2.57.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.57.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.57.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.57.1-4" date="1706788800">- Update Rust macro usage</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.57.1-5" date="1718366400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.57.1-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Brian Stinson &lt;bstinson@redhat.com&gt; - 2.57.1-7" date="1722427200">- Backport a patch from rawhide disabling broken tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.57.1-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.57.1-9" date="1732190400">- Fix FTBFS by updating time crate</changelog>
</package>
<package pkgid="4f52d65dd313d0d7732ec073022b6e2ddf54fbe42be7a72c6878c863bf02e686" name="libsamplerate" arch="x86_64">
  <version epoch="0" ver="0.2.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.2-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.2-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jarsolav Kysela &lt;perex@perex.cz&gt; - 0.2.2-6" date="1694088000">- SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.2-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.2-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.2-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.2-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="042b646650ef9c75bd1d3c02ef1d4165676064fbe750eaadb8babe428a555cea" name="libsamplerate-devel" arch="x86_64">
  <version epoch="0" ver="0.2.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.2-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.2-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jarsolav Kysela &lt;perex@perex.cz&gt; - 0.2.2-6" date="1694088000">- SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.2-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.2-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.2-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.2-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ec87fbab38f21ac139f505b5502b77ee85aa8c4afb48054cf11dd1eecdb3d87b" name="libsane-airscan" arch="x86_64">
  <version epoch="0" ver="0.99.27" rel="14.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.99.27-6" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.99.27-7" date="1675339200">- 2165612 - IPP-USB as a weak dependency of CUPS and sane-airscan</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.99.27-8" date="1677153600">- move to meson</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.99.27-9" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.99.27-10" date="1693396800">- applied accepted license exception - SANE-exception</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 0.99.27-11" date="1702036800">- fix FTBFS</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.99.27-12" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.99.27-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.99.27-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a4e9ebf0ab6fc8b369c703662188a2c363fc0fadbea1be126cc8e49338bbe8ae" name="libsane-hpaio" arch="x86_64">
  <version epoch="0" ver="3.23.12" rel="10.el10"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-1" date="1704715200">- 2252302 - hplip-3.23.12 is available</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-2" date="1705665600">- add fallback url to hp-plugin-download</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23.12-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.23.12-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-5" date="1711022400">- RHEL-29931 hp-plugin-download uses removed curl option</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-6" date="1715083200">- RHEL-35696 Remove/migrate additional license tags</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-9" date="1750161600">- enable following links with curl in all use cases
  Resolves: RHEL-84817
- hp-plugin-download wrongly parsed file type
  Resolves: RHEL-97437</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-10" date="1752235200">- RHEL-102977 rpm -q --changelog hplip no longer lists changelog</changelog>
</package>
<package pkgid="f85ccde8b035d16f889ba37adc02dbabf5f6eab4f5d06e3e844e6d85d4b15518" name="libsane-hpaio" arch="x86_64">
  <version epoch="0" ver="3.23.12" rel="10.el10_2.4"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-9" date="1750161600">- enable following links with curl in all use cases
  Resolves: RHEL-84817
- hp-plugin-download wrongly parsed file type
  Resolves: RHEL-97437</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-10" date="1752235200">- RHEL-102977 rpm -q --changelog hplip no longer lists changelog</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.2" date="1781006400">- CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via
  integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.4" date="1781524800">- Fix more leaks in hpcups</changelog>
</package>
<package pkgid="e650fb1674e00be5c116367e58d6b7baed2c08f07dcf38d0a5516ba1c72def49" name="libsane-hpaio" arch="x86_64">
  <version epoch="0" ver="3.23.12" rel="10.el10_2.5"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.23.12-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-9" date="1750161600">- enable following links with curl in all use cases
  Resolves: RHEL-84817
- hp-plugin-download wrongly parsed file type
  Resolves: RHEL-97437</changelog>
  <changelog author="Petr Dancak &lt;pdancak@redhat.com&gt; - 3.23.12-10" date="1752235200">- RHEL-102977 rpm -q --changelog hplip no longer lists changelog</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.1" date="1779883200">- CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution
  via OS command injection in Is_Process_Running()</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.2" date="1781006400">- CVE-2026-8631 hplip: Arbitrary code execution and privilege escalation via
  integer overflow in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.3" date="1781265600">- OSH fixes after CVE-2026-8631</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.4" date="1781524800">- Fix more leaks in hpcups</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.23.12-10.5" date="1783080000">- RHEL-192007 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631</changelog>
</package>
<package pkgid="0ea5eb8f4d3efd1898efd2f5624d709c7a09e0a7e3be8b2d83e040b0bfafe30f" name="libsbc" arch="x86_64">
  <version epoch="0" ver="2.0" rel="7.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-4" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2.0-7" date="1764590400">- Bump release to address sbc-devel inclusion to CRB
  Resolves: RHEL-105436</changelog>
</package>
<package pkgid="ee91ee0f4ad9b2b0deac8b215b2e9b335edfc43f6fc5cd90817f7dc4f3f1ccce" name="libseccomp" arch="x86_64">
  <version epoch="0" ver="2.5.6" rel="1.el10"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.5.3-5" date="1685620800">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.3-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.3-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.3-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.3-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.3-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Romain Geissler &lt;romain.geissler@amadeus.com&gt; - 2.5.6-1" date="1739880000">- Upgrade to version 2.5.6.
  Resolves: RHEL-80090</changelog>
</package>
<package pkgid="4c9c4caa457fbbf486262e55dc666f6c77c07929a7c64512b7c223a9d537207d" name="libseccomp-devel" arch="x86_64">
  <version epoch="0" ver="2.5.6" rel="1.el10"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.5.3-5" date="1685620800">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.3-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.3-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.3-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.3-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.3-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Romain Geissler &lt;romain.geissler@amadeus.com&gt; - 2.5.6-1" date="1739880000">- Upgrade to version 2.5.6.
  Resolves: RHEL-80090</changelog>
</package>
<package pkgid="cdcfa13635e3bcdcabc5c290f9e3512e3d3ae38a51ac69404a5166851d9900c5" name="libseccomp-static" arch="x86_64">
  <version epoch="0" ver="2.5.6" rel="1.el10"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.5.3-5" date="1685620800">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.3-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.3-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.3-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.3-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5.3-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Romain Geissler &lt;romain.geissler@amadeus.com&gt; - 2.5.6-1" date="1739880000">- Upgrade to version 2.5.6.
  Resolves: RHEL-80090</changelog>
</package>
<package pkgid="36321377f08b3143d29fd6e9aef1de77c5fc898f96049032834df2f90aaf98e6" name="libsecret" arch="x86_64">
  <version epoch="0" ver="0.21.2" rel="8.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.21.0-1" date="1691755200">- Update to 0.21.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.21.1-1" date="1695124800">- Update to 0.21.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.21.2-1" date="1702123200">- Update to 0.21.2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 0.21.2-2" date="1702209600">- Use GnuTLS as the default crypto backend</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.2-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.2-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.21.2-6" date="1724068800">- Fix SDPX license</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.2-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Romain Geissler &lt;romain.geissler@amadeus.com&gt; - 0.21.2-8" date="1740830400">- Backport packaging of mock service from Fedora in order to consume it in EPEL
  Resolves: RHEL-81780</changelog>
</package>
<package pkgid="755028a85b990c499f51503c600d8a63bca927bc28d2f3ab1a631fbd96fae38b" name="libsecret-devel" arch="x86_64">
  <version epoch="0" ver="0.21.2" rel="8.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.21.0-1" date="1691755200">- Update to 0.21.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.21.1-1" date="1695124800">- Update to 0.21.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.21.2-1" date="1702123200">- Update to 0.21.2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 0.21.2-2" date="1702209600">- Use GnuTLS as the default crypto backend</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.2-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.2-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.21.2-6" date="1724068800">- Fix SDPX license</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.2-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Romain Geissler &lt;romain.geissler@amadeus.com&gt; - 0.21.2-8" date="1740830400">- Backport packaging of mock service from Fedora in order to consume it in EPEL
  Resolves: RHEL-81780</changelog>
</package>
<package pkgid="128d4e0f01268f62a200bb95737556482758eb94892d5fb972f1547c64beb429" name="libsecret-mock-service" arch="noarch">
  <version epoch="0" ver="0.21.2" rel="8.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.21.0-1" date="1691755200">- Update to 0.21.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.21.1-1" date="1695124800">- Update to 0.21.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.21.2-1" date="1702123200">- Update to 0.21.2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 0.21.2-2" date="1702209600">- Use GnuTLS as the default crypto backend</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.2-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.2-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.21.2-6" date="1724068800">- Fix SDPX license</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.21.2-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Romain Geissler &lt;romain.geissler@amadeus.com&gt; - 0.21.2-8" date="1740830400">- Backport packaging of mock service from Fedora in order to consume it in EPEL
  Resolves: RHEL-81780</changelog>
</package>
<package pkgid="625b19992e3d446095102e23c3b3a5279ece234b54286034be0aa4a31d45d5c3" name="libselinux" arch="x86_64">
  <version epoch="0" ver="3.10" rel="1.el10"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc1.2" date="1733313600">- libselinux/utils: drop reachable assert in sefcontext_compile</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc3.1" date="1734523200">- SELinux userspace 3.8-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-1" date="1738238400">- SELinux userspace 3.8 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-2" date="1748347200">- Prioritize local literal fcontext definitions (rhbz#2360183)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.9-0.rc2.1" date="1751284800">- SELinux userspace 3.9-rc2 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-1" date="1753185600">- SELinux userspace 3.9 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-2" date="1761134400">- Ignore files removed during relabeling (RHEL-110181)</changelog>
  <changelog author="Veronika Syncakova &lt;vsyncako@redhat.com&gt; - 3.9-3" date="1765800000">- Rebuild to accomodate changes in swig (RHEL-118812)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-4" date="1769428800">- restorecon: Add option to count relabeled files (RHEL-144056)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.10-1" date="1770292800">- SELinux userspace 3.10 release</changelog>
</package>
<package pkgid="4fb5423a211957993bfdd92bce7771c0d5012255c75beb34a256f9dcc4b45411" name="libselinux-devel" arch="x86_64">
  <version epoch="0" ver="3.10" rel="1.el10"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc1.2" date="1733313600">- libselinux/utils: drop reachable assert in sefcontext_compile</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc3.1" date="1734523200">- SELinux userspace 3.8-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-1" date="1738238400">- SELinux userspace 3.8 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-2" date="1748347200">- Prioritize local literal fcontext definitions (rhbz#2360183)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.9-0.rc2.1" date="1751284800">- SELinux userspace 3.9-rc2 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-1" date="1753185600">- SELinux userspace 3.9 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-2" date="1761134400">- Ignore files removed during relabeling (RHEL-110181)</changelog>
  <changelog author="Veronika Syncakova &lt;vsyncako@redhat.com&gt; - 3.9-3" date="1765800000">- Rebuild to accomodate changes in swig (RHEL-118812)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-4" date="1769428800">- restorecon: Add option to count relabeled files (RHEL-144056)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.10-1" date="1770292800">- SELinux userspace 3.10 release</changelog>
</package>
<package pkgid="d1861d70a0bdd98942fd0aabb4f6395433d97fc1cd04a0ae543032a94f7eac08" name="libselinux-ruby" arch="x86_64">
  <version epoch="0" ver="3.10" rel="1.el10"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc1.2" date="1733313600">- libselinux/utils: drop reachable assert in sefcontext_compile</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc3.1" date="1734523200">- SELinux userspace 3.8-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-1" date="1738238400">- SELinux userspace 3.8 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-2" date="1748347200">- Prioritize local literal fcontext definitions (rhbz#2360183)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.9-0.rc2.1" date="1751284800">- SELinux userspace 3.9-rc2 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-1" date="1753185600">- SELinux userspace 3.9 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-2" date="1761134400">- Ignore files removed during relabeling (RHEL-110181)</changelog>
  <changelog author="Veronika Syncakova &lt;vsyncako@redhat.com&gt; - 3.9-3" date="1765800000">- Rebuild to accomodate changes in swig (RHEL-118812)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-4" date="1769428800">- restorecon: Add option to count relabeled files (RHEL-144056)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.10-1" date="1770292800">- SELinux userspace 3.10 release</changelog>
</package>
<package pkgid="09202112fb354c17567da76aa35934678bd7ef3ee024d9a5bfcd5920729f5bcb" name="libselinux-static" arch="x86_64">
  <version epoch="0" ver="3.10" rel="1.el10"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc1.2" date="1733313600">- libselinux/utils: drop reachable assert in sefcontext_compile</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc3.1" date="1734523200">- SELinux userspace 3.8-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-1" date="1738238400">- SELinux userspace 3.8 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-2" date="1748347200">- Prioritize local literal fcontext definitions (rhbz#2360183)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.9-0.rc2.1" date="1751284800">- SELinux userspace 3.9-rc2 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-1" date="1753185600">- SELinux userspace 3.9 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-2" date="1761134400">- Ignore files removed during relabeling (RHEL-110181)</changelog>
  <changelog author="Veronika Syncakova &lt;vsyncako@redhat.com&gt; - 3.9-3" date="1765800000">- Rebuild to accomodate changes in swig (RHEL-118812)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-4" date="1769428800">- restorecon: Add option to count relabeled files (RHEL-144056)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.10-1" date="1770292800">- SELinux userspace 3.10 release</changelog>
</package>
<package pkgid="56b46afb8f5258ed030d1bee42ac4cbb742643356b5289ffbf4f544aef6c2d19" name="libselinux-utils" arch="x86_64">
  <version epoch="0" ver="3.10" rel="1.el10"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc1.2" date="1733313600">- libselinux/utils: drop reachable assert in sefcontext_compile</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc3.1" date="1734523200">- SELinux userspace 3.8-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-1" date="1738238400">- SELinux userspace 3.8 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-2" date="1748347200">- Prioritize local literal fcontext definitions (rhbz#2360183)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.9-0.rc2.1" date="1751284800">- SELinux userspace 3.9-rc2 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-1" date="1753185600">- SELinux userspace 3.9 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-2" date="1761134400">- Ignore files removed during relabeling (RHEL-110181)</changelog>
  <changelog author="Veronika Syncakova &lt;vsyncako@redhat.com&gt; - 3.9-3" date="1765800000">- Rebuild to accomodate changes in swig (RHEL-118812)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-4" date="1769428800">- restorecon: Add option to count relabeled files (RHEL-144056)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.10-1" date="1770292800">- SELinux userspace 3.10 release</changelog>
</package>
<package pkgid="22d6c2bbc83866457e1291eeb14d1cebdfdf5bbc1822e2d197cf49da1912b3c6" name="libsemanage" arch="x86_64">
  <version epoch="0" ver="3.10" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.7-3" date="1730203200">- Bump release for October 2024 mass rebuild (RHEL-64018)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.7-4" date="1731412800">- direct_api: INTEGER_OVERFLOW read_len = read() (RHEL-35997)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc1.1" date="1733400000">- SELinux userspace 3.8-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc3.1" date="1734523200">- SELinux userspace 3.8-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-1" date="1738238400">- SELinux userspace 3.8 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8.1-1" date="1741262400">- SELinux userspace 3.8.1 release
- improve performance of semanage store rebuild (RHEL-81707)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.9-0.rc2.1" date="1751630400">- SELinux userspace 3.9-rc2 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-1" date="1753185600">- SELinux userspace 3.9 release</changelog>
  <changelog author="Veronika Syncakova &lt;vsyncako@redhat.com&gt; - 3.9-2" date="1768219200">- Rebuild to accommodate changes in swig (RHEL-138405)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.10-1" date="1770292800">- SELinux userspace 3.10 release</changelog>
</package>
<package pkgid="9c8e9c08707a46b2b8cd0184734ff2d4c4546dadf4c9b19748510c417b26c5c0" name="libsemanage-devel" arch="x86_64">
  <version epoch="0" ver="3.10" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.7-3" date="1730203200">- Bump release for October 2024 mass rebuild (RHEL-64018)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.7-4" date="1731412800">- direct_api: INTEGER_OVERFLOW read_len = read() (RHEL-35997)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc1.1" date="1733400000">- SELinux userspace 3.8-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc3.1" date="1734523200">- SELinux userspace 3.8-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-1" date="1738238400">- SELinux userspace 3.8 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8.1-1" date="1741262400">- SELinux userspace 3.8.1 release
- improve performance of semanage store rebuild (RHEL-81707)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.9-0.rc2.1" date="1751630400">- SELinux userspace 3.9-rc2 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-1" date="1753185600">- SELinux userspace 3.9 release</changelog>
  <changelog author="Veronika Syncakova &lt;vsyncako@redhat.com&gt; - 3.9-2" date="1768219200">- Rebuild to accommodate changes in swig (RHEL-138405)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.10-1" date="1770292800">- SELinux userspace 3.10 release</changelog>
</package>
<package pkgid="a12c0f1307c31b29b32d09635b405b62a794484d79de012ebd39be9d3885a999" name="libsemanage-static" arch="x86_64">
  <version epoch="0" ver="3.10" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.7-3" date="1730203200">- Bump release for October 2024 mass rebuild (RHEL-64018)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.7-4" date="1731412800">- direct_api: INTEGER_OVERFLOW read_len = read() (RHEL-35997)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc1.1" date="1733400000">- SELinux userspace 3.8-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc3.1" date="1734523200">- SELinux userspace 3.8-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-1" date="1738238400">- SELinux userspace 3.8 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8.1-1" date="1741262400">- SELinux userspace 3.8.1 release
- improve performance of semanage store rebuild (RHEL-81707)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.9-0.rc2.1" date="1751630400">- SELinux userspace 3.9-rc2 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-1" date="1753185600">- SELinux userspace 3.9 release</changelog>
  <changelog author="Veronika Syncakova &lt;vsyncako@redhat.com&gt; - 3.9-2" date="1768219200">- Rebuild to accommodate changes in swig (RHEL-138405)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.10-1" date="1770292800">- SELinux userspace 3.10 release</changelog>
</package>
<package pkgid="af099df7a4e676252e4eb3cae2c446bcd0092dfc11b36ab3dfb259c3cba029cf" name="libsepol" arch="x86_64">
  <version epoch="0" ver="3.10" rel="1.el10"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.7-1" date="1719489600">- SELinux userspace 3.7 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.7-2" date="1723204800">- sepol_compute_sid: Do not destroy uninitialized context (RHEL-34808)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.7-3" date="1730203200">- Bump release for October 2024 mass rebuild (RHEL-64018)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.7-4" date="1731412800">- cil: Check that sym_index is within bounds (RHEL-34823)
- cil: Initialize avtab_datum on declaration (RHEL-34810)
- mls: Do not destroy context on memory error (RHEL-34810)
- cil/cil_post: Initialize tmp on declaration (RHEL-34810)
- Initialize "strs" on declaration (RHEL-34810)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc1.1" date="1733400000">- SELinux userspace 3.8-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc3.1" date="1734523200">- SELinux userspace 3.8-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-1" date="1738238400">- SELinux userspace 3.8 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.9-0.rc2.1" date="1751284800">- SELinux userspace 3.9-rc2 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-1" date="1753185600">- SELinux userspace 3.9 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.10-1" date="1770292800">- SELinux userspace 3.10 release</changelog>
</package>
<package pkgid="eb3389d6d0a7042f0642162de60c66e6d7527d0ad985130eda5177162831ac03" name="libsepol-devel" arch="x86_64">
  <version epoch="0" ver="3.10" rel="1.el10"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.7-1" date="1719489600">- SELinux userspace 3.7 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.7-2" date="1723204800">- sepol_compute_sid: Do not destroy uninitialized context (RHEL-34808)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.7-3" date="1730203200">- Bump release for October 2024 mass rebuild (RHEL-64018)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.7-4" date="1731412800">- cil: Check that sym_index is within bounds (RHEL-34823)
- cil: Initialize avtab_datum on declaration (RHEL-34810)
- mls: Do not destroy context on memory error (RHEL-34810)
- cil/cil_post: Initialize tmp on declaration (RHEL-34810)
- Initialize "strs" on declaration (RHEL-34810)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc1.1" date="1733400000">- SELinux userspace 3.8-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc3.1" date="1734523200">- SELinux userspace 3.8-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-1" date="1738238400">- SELinux userspace 3.8 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.9-0.rc2.1" date="1751284800">- SELinux userspace 3.9-rc2 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-1" date="1753185600">- SELinux userspace 3.9 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.10-1" date="1770292800">- SELinux userspace 3.10 release</changelog>
</package>
<package pkgid="ae8245d610d1ba9c2b89ab4f64d2d1deab713a80388f796581663b96a5bf63d8" name="libsepol-static" arch="x86_64">
  <version epoch="0" ver="3.10" rel="1.el10"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.7-1" date="1719489600">- SELinux userspace 3.7 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.7-2" date="1723204800">- sepol_compute_sid: Do not destroy uninitialized context (RHEL-34808)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.7-3" date="1730203200">- Bump release for October 2024 mass rebuild (RHEL-64018)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.7-4" date="1731412800">- cil: Check that sym_index is within bounds (RHEL-34823)
- cil: Initialize avtab_datum on declaration (RHEL-34810)
- mls: Do not destroy context on memory error (RHEL-34810)
- cil/cil_post: Initialize tmp on declaration (RHEL-34810)
- Initialize "strs" on declaration (RHEL-34810)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc1.1" date="1733400000">- SELinux userspace 3.8-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc3.1" date="1734523200">- SELinux userspace 3.8-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-1" date="1738238400">- SELinux userspace 3.8 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.9-0.rc2.1" date="1751284800">- SELinux userspace 3.9-rc2 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-1" date="1753185600">- SELinux userspace 3.9 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.10-1" date="1770292800">- SELinux userspace 3.10 release</changelog>
</package>
<package pkgid="3d4dd7374b69afedc08e0958ffb82feb0b81f5b6a486d514519831971c8ec718" name="libsepol-utils" arch="x86_64">
  <version epoch="0" ver="3.10" rel="1.el10"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.7-1" date="1719489600">- SELinux userspace 3.7 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.7-2" date="1723204800">- sepol_compute_sid: Do not destroy uninitialized context (RHEL-34808)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.7-3" date="1730203200">- Bump release for October 2024 mass rebuild (RHEL-64018)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.7-4" date="1731412800">- cil: Check that sym_index is within bounds (RHEL-34823)
- cil: Initialize avtab_datum on declaration (RHEL-34810)
- mls: Do not destroy context on memory error (RHEL-34810)
- cil/cil_post: Initialize tmp on declaration (RHEL-34810)
- Initialize "strs" on declaration (RHEL-34810)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc1.1" date="1733400000">- SELinux userspace 3.8-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-0.rc3.1" date="1734523200">- SELinux userspace 3.8-rc3 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.8-1" date="1738238400">- SELinux userspace 3.8 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.9-0.rc2.1" date="1751284800">- SELinux userspace 3.9-rc2 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.9-1" date="1753185600">- SELinux userspace 3.9 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.10-1" date="1770292800">- SELinux userspace 3.10 release</changelog>
</package>
<package pkgid="db890590fc08f40ff142ecfb5c67ef403fee205cbaf1aee29f004583f179a64a" name="libserf" arch="x86_64">
  <version epoch="0" ver="1.3.10" rel="7.el10"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.3.9-26" date="1675166400">- Fix multihome server handling and backport cmake support
- Related: rhbz#1130328</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.3.9-27" date="1675684800">- Fix testsuite
- Resolves: rhbz#2166252</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.3.9-28" date="1678622400">- Change the License tag to the SPDX format</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.3.10-1" date="1686052800">- Update to 1.3.10
- Resolves: rhbz#2211498</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.10-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.3.10-3" date="1701950400">- Add linking of gssapi to support Kerberos authentication
- Resolves: rhbz#2245095</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.10-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.10-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.10-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.10-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b7859dba18b5455ab1ad62a4af38735cd8a8a9f3e42c9b2f1b4fd3dffded8580" name="libserf-devel" arch="x86_64">
  <version epoch="0" ver="1.3.10" rel="7.el10"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.3.9-26" date="1675166400">- Fix multihome server handling and backport cmake support
- Related: rhbz#1130328</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.3.9-27" date="1675684800">- Fix testsuite
- Resolves: rhbz#2166252</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.3.9-28" date="1678622400">- Change the License tag to the SPDX format</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.3.10-1" date="1686052800">- Update to 1.3.10
- Resolves: rhbz#2211498</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.10-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.3.10-3" date="1701950400">- Add linking of gssapi to support Kerberos authentication
- Resolves: rhbz#2245095</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.10-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.10-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.10-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.10-7" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ac58d0900267254d8715492f7f7e97de2a9facbd258897870a5bf856807c5121" name="libshaderc" arch="x86_64">
  <version epoch="0" ver="2025.4" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2023.7-2" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2023.7-3" date="1714478400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2023.7-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2024.0-1" date="1720180800">- Update to 1.3.280.0 SDK</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2024.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2024.4-1" date="1737460800">- Update to 1.4.304.0 SDK</changelog>
  <changelog author="Anusha Srivatsa &lt;asrivats@redhat.com&gt; - 2025.2-1" date="1750593600">- Update to SDK v1.4.313.0</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2025.4-1" date="1767873600">- Update to 1.4.328.1 SDK</changelog>
</package>
<package pkgid="8cacd91c346818eeb77b8000ebc34d8737cfe0aff4ab2b789915575921afaf5a" name="libshaderc-devel" arch="x86_64">
  <version epoch="0" ver="2025.4" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2023.7-2" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2023.7-3" date="1714478400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2023.7-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2024.0-1" date="1720180800">- Update to 1.3.280.0 SDK</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2024.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2024.4-1" date="1737460800">- Update to 1.4.304.0 SDK</changelog>
  <changelog author="Anusha Srivatsa &lt;asrivats@redhat.com&gt; - 2025.2-1" date="1750593600">- Update to SDK v1.4.313.0</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2025.4-1" date="1767873600">- Update to 1.4.328.1 SDK</changelog>
</package>
<package pkgid="83c8ea392d9d136027d34cc3ce4d3ab32c55e8be47154ec8a4fb4a83e42afa82" name="libshaderc-static" arch="x86_64">
  <version epoch="0" ver="2025.4" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2023.7-2" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 2023.7-3" date="1714478400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2023.7-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2024.0-1" date="1720180800">- Update to 1.3.280.0 SDK</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2024.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2024.4-1" date="1737460800">- Update to 1.4.304.0 SDK</changelog>
  <changelog author="Anusha Srivatsa &lt;asrivats@redhat.com&gt; - 2025.2-1" date="1750593600">- Update to SDK v1.4.313.0</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2025.4-1" date="1767873600">- Update to 1.4.328.1 SDK</changelog>
</package>
<package pkgid="9e0802452b737785b8d5de21cc6e625e30a581bd9f1e6731b3b5b6bcf65b8c21" name="libshout" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="9.el10"/>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 2.4.6-1" date="1671105600">- Update libshout to 2.4.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.6-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.6-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.6-4" date="1702382400">- Converted license tag to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.6-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.6-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.6-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.6-8" date="1724760000">- Fixed devel subpackage SPDX license
  Related: RHEL-35719</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.6-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="15e4384955db622afc0691b4b0ad95e2ef30f9c0fad865ad7c1273700b19c45f" name="libshout-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="9.el10"/>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 2.4.6-1" date="1671105600">- Update libshout to 2.4.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.6-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.6-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.6-4" date="1702382400">- Converted license tag to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.6-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.6-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.6-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.6-8" date="1724760000">- Fixed devel subpackage SPDX license
  Related: RHEL-35719</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.6-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="def55ae50c6ceb427a04c21b448f8f6ea3a84f44d4caae2522c0aec823c9211e" name="libsigc++20" arch="x86_64">
  <version epoch="0" ver="2.12.1" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10.8-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10.8-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10.8-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.12.1-1" date="1696161600">- Update to 2.12.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="ff2c9d4c8666d1d9b77662c49cb9965c199df3bd3412d7656faf4d65492c2f88" name="libsigc++20-devel" arch="x86_64">
  <version epoch="0" ver="2.12.1" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10.8-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10.8-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10.8-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.12.1-1" date="1696161600">- Update to 2.12.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="afb177daf3004ac3489de3fbf367b23694f0e73d88bf9d8609354ec4c48f43fc" name="libsigc++20-doc" arch="noarch">
  <version epoch="0" ver="2.12.1" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10.8-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10.8-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10.8-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.12.1-1" date="1696161600">- Update to 2.12.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="8dfbf54172fcc90c4973d8f55ee96fe53ffe845f9bc69355028c8bc24a3432e5" name="libsigc++30" arch="x86_64">
  <version epoch="0" ver="3.6.0" rel="5.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.4.0-1" date="1672660800">- Update to 3.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.6.0-1" date="1696161600">- Update to 3.6.0
- Fix NEWS file to not be executable</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.6.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.6.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ff14348692aa76d5dd5d3226becc75f4d8e7323b32162e0845fbdc8a60e3ec08" name="libsigc++30-devel" arch="x86_64">
  <version epoch="0" ver="3.6.0" rel="5.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.4.0-1" date="1672660800">- Update to 3.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.6.0-1" date="1696161600">- Update to 3.6.0
- Fix NEWS file to not be executable</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.6.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.6.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d131f96566792b1d31c3fe2bc614ddfe2b35a0131fbe4dcea5bbe64ea1aabdd5" name="libsigc++30-doc" arch="noarch">
  <version epoch="0" ver="3.6.0" rel="5.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.4.0-1" date="1672660800">- Update to 3.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.6.0-1" date="1696161600">- Update to 3.6.0
- Fix NEWS file to not be executable</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.6.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.6.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="67030e1b8afd89159dbdb7e8a4adcdab886c23c96e1479416890223d47dae2c8" name="libslirp" arch="x86_64">
  <version epoch="0" ver="4.7.0" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.7.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.7.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.7.0-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.7.0-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4.7.0-7" date="1717502400">- rebuild
- Related: RHEL-39410</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 4.7.0-8" date="1718020800">- Backport "ip: Enforce strict aliasing" patch
- Fixes: RHEL-40593</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.7.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.7.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="97d0384dc5f7a83cbc2634ed09bdea53f4b587806d19ba9a5ab798f345bb809b" name="libslirp-devel" arch="x86_64">
  <version epoch="0" ver="4.7.0" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.7.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.7.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.7.0-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.7.0-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 4.7.0-7" date="1717502400">- rebuild
- Related: RHEL-39410</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 4.7.0-8" date="1718020800">- Backport "ip: Enforce strict aliasing" patch
- Fixes: RHEL-40593</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.7.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.7.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="14ca3de907cd5f90fdf3614f2dc46d7e2b7a4cf74babdd60dce62addea730079" name="libsmartcols" arch="x86_64">
  <version epoch="0" ver="2.40.2" rel="18.el10"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-9" date="1736856000">- more(1): make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-10" date="1739448000">- blkid: allow up to 64k erofs block sizes</changelog>
  <changelog author="Frank Liang &lt;xiliang@redhat.com&gt; - 2.40.2-11" date="1745064000">- agetty: fix stdin conversion to tty name</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-12" date="1753790400">- coresched: backport new tool to RHEL-10</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-13" date="1753876800">- lscpu: update table with ARM IDs</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-14" date="1759147200">- lscpu: Add NVIDIA Olympus arm64 core
- libfdisk: improve collision reporting
- libfdisk: (dos) ignore incomplete EBR for non-wholedisk
- wall: always use utmp as fallback</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-15" date="1761220800">- mount: improve --all documentation
- libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
- libblkid: use snprintf() instead of sprintf()</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-16" date="1763553600">- libfdisk: fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-17" date="1765800000">- Fix heap buffer overread in setpwnam() [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-18" date="1768478400">- use sysuser setting for uuidd</changelog>
</package>
<package pkgid="7e73a9abe6ed2385a3cc8003bc0417b397803e425b9ba45af5269a396722d924" name="libsmartcols-devel" arch="x86_64">
  <version epoch="0" ver="2.40.2" rel="18.el10"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-9" date="1736856000">- more(1): make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-10" date="1739448000">- blkid: allow up to 64k erofs block sizes</changelog>
  <changelog author="Frank Liang &lt;xiliang@redhat.com&gt; - 2.40.2-11" date="1745064000">- agetty: fix stdin conversion to tty name</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-12" date="1753790400">- coresched: backport new tool to RHEL-10</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-13" date="1753876800">- lscpu: update table with ARM IDs</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-14" date="1759147200">- lscpu: Add NVIDIA Olympus arm64 core
- libfdisk: improve collision reporting
- libfdisk: (dos) ignore incomplete EBR for non-wholedisk
- wall: always use utmp as fallback</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-15" date="1761220800">- mount: improve --all documentation
- libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
- libblkid: use snprintf() instead of sprintf()</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-16" date="1763553600">- libfdisk: fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-17" date="1765800000">- Fix heap buffer overread in setpwnam() [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-18" date="1768478400">- use sysuser setting for uuidd</changelog>
</package>
<package pkgid="a8dd794d0bc91faff7ac57957816d6f4c2c773efd3c2d9421ac671127c388028" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="107.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-100" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114545 - Update to version 4.23.4
- resolves: RHEL-132338 - Fix Time Machine backup
- resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-101" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-132975</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
</package>
<package pkgid="7a9ee21cb7e78a619f21bb114bda8f98b7125859501513eeb7dfeedf41f653a0" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="109.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-108" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-109" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="cceedee9c44e99cf266015a3687a487fbc7e921cce2f378bd54366175c0c0371" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="107.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-100" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114545 - Update to version 4.23.4
- resolves: RHEL-132338 - Fix Time Machine backup
- resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-101" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-132975</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
</package>
<package pkgid="ba3b96d26b2da0e678bcd0106d5682861aa001d6da52ac3c3f50ba23a1cb67ca" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="109.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-108" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-109" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="ea987b054de6e4823c44dfb1c3049894a3b3ec93b77e43d3420cb2f4c7526eb6" name="libsmbios" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="13.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.4.3-6" date="1655121600">- Rebuilt for Python 3.11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.3-7" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.3-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.4.3-9" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.3-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 2.4.3-11" date="1697889600">- Use make macros https://src.fedoraproject.org/rpms/libsmbios/pull-request/5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.3-12" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.3-13" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="95d2fc96b583a780fab49ba96b659cfedd123e1a09dfae3e947c7d9e90a705b5" name="libsmbios-devel" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="13.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.4.3-6" date="1655121600">- Rebuilt for Python 3.11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.3-7" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.3-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.4.3-9" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.3-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 2.4.3-11" date="1697889600">- Use make macros https://src.fedoraproject.org/rpms/libsmbios/pull-request/5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.3-12" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.3-13" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
</package>
<package pkgid="5134a7e1d0dfe72b7a2b9e24465614c1608ebd37f59bec16a8af43b5b119e547" name="libsmi" arch="x86_64">
  <version epoch="0" ver="0.4.8" rel="43.el10.0.1"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 0.4.8-35" date="1704456000">- update to the latest available source tree, cleanup as much as we can</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.8-36" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.4.8-37" date="1705838401">- C type-safety level downgrade due to pointer/int conversion bugs (#2256912)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.8-38" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.4.8-39" date="1715774400">- fix license field (#RHEL-36338)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.4.8-40" date="1717502400">- reduce build parallelism, too much breaks the build</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.8-41" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.4.8-42" date="1720440000">- move yang files to avoid conflict with frr (#RHEL-43428)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.8-43" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 0.4.8-43.0.1" date="1730289600">- Rebuild package to address build system issue</changelog>
</package>
<package pkgid="51645ff14926b59133dded6dfb7df638a67f553953ac56c04bc4f9d2623897d5" name="libsmi-devel" arch="x86_64">
  <version epoch="0" ver="0.4.8" rel="43.el10.0.1"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 0.4.8-35" date="1704456000">- update to the latest available source tree, cleanup as much as we can</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.8-36" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.4.8-37" date="1705838401">- C type-safety level downgrade due to pointer/int conversion bugs (#2256912)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.8-38" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.4.8-39" date="1715774400">- fix license field (#RHEL-36338)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.4.8-40" date="1717502400">- reduce build parallelism, too much breaks the build</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.8-41" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.4.8-42" date="1720440000">- move yang files to avoid conflict with frr (#RHEL-43428)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.4.8-43" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 0.4.8-43.0.1" date="1730289600">- Rebuild package to address build system issue</changelog>
</package>
<package pkgid="cd16a2bd3a1fa2ec55df8f1e6b8fa75c84a9574bee122334ae22aef27f27c346" name="libsndfile" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="6.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.2.2-5" date="1732104000">- fix crash in ogg vorbis (#RHEL-65092) (CVE-2024-50612)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.2-6" date="1765281600">- change the license to LGPL-2.1 OR LGPL-3.0 (#RHEL-85333)</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.2.2-6.1" date="1779105600">- apply patch for CVE-2026-37555
  Resolves: ￼RHEL-174531</changelog>
</package>
<package pkgid="1e6ab6e46d51c42ec41d4fbaa54dcc165f269fba0a1f9e4f1577b4cab8023d7f" name="libsndfile-devel" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="6.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.2.2-5" date="1732104000">- fix crash in ogg vorbis (#RHEL-65092) (CVE-2024-50612)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.2-6" date="1765281600">- change the license to LGPL-2.1 OR LGPL-3.0 (#RHEL-85333)</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.2.2-6.1" date="1779105600">- apply patch for CVE-2026-37555
  Resolves: ￼RHEL-174531</changelog>
</package>
<package pkgid="5d030a6fe4fa55398dca208ac6118df5d9a5abadce90ce72017ada23a469d9c9" name="libsndfile-utils" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="6.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.2-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.2-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.2.2-5" date="1732104000">- fix crash in ogg vorbis (#RHEL-65092) (CVE-2024-50612)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.2.2-6" date="1765281600">- change the license to LGPL-2.1 OR LGPL-3.0 (#RHEL-85333)</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.2.2-6.1" date="1779105600">- apply patch for CVE-2026-37555
  Resolves: ￼RHEL-174531</changelog>
</package>
<package pkgid="2b7f87669815ca4e27669da51125045d2bd25e4931f64313f232b5880c39cb04" name="libsocket_wrapper_noop" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="6.el10"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.4.0-1" date="1674129600">- Update to version 1.4.0
  * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.4.0/CHANGELOG</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.4.0-2" date="1677153600">- Fix building with cmocka &gt;= 1.1.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-3" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-4" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e6b7d41bc1c207f51ee7151bad4b34ecc3f3a3fe258a23d74cbc7ce44cb043df" name="libsocket_wrapper_noop-devel" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="6.el10"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.4.0-1" date="1674129600">- Update to version 1.4.0
  * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.4.0/CHANGELOG</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.4.0-2" date="1677153600">- Fix building with cmocka &gt;= 1.1.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-3" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-4" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9d6657ef3f366f60ffee76a03d6f60a98abef17aed0d72420031b9986363bc32" name="libsolv" arch="x86_64">
  <version epoch="0" ver="0.7.33" rel="2.el10"/>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-1" date="1717070400">- Update to 0.7.29 (RHEL-32212)</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-2" date="1717156800">- Configure gating</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-4" date="1717156801">- Stricten dependencies between libsolv subpackages (RHEL-38831)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-6" date="1720526400">- Use digest functions from OpenSSL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-7" date="1723118400">- Bump release for Aug 2024 perl mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Martin Banas &lt;mbanas@redhat.com&gt; - 0.7.29-9" date="1731499200">- Run dnf CI-Tier-1 tests for gating of libsolv as well</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 0.7.33-1" date="1757332800">- Rebase to 0.7.33</changelog>
  <changelog author="Evan Goode &lt;mail@evangoo.de&gt; - 0.7.33-2" date="1768910400">- Add testcase for color filtering when adding update targets</changelog>
</package>
<package pkgid="84715a55dbc48f8513cb9854f2d9023bdb64c44a7914a572e420274cd06f1a4f" name="libsolv" arch="x86_64">
  <version epoch="0" ver="0.7.33" rel="5.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-6" date="1720526400">- Use digest functions from OpenSSL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-7" date="1723118400">- Bump release for Aug 2024 perl mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Martin Banas &lt;mbanas@redhat.com&gt; - 0.7.29-9" date="1731499200">- Run dnf CI-Tier-1 tests for gating of libsolv as well</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 0.7.33-1" date="1757332800">- Rebase to 0.7.33</changelog>
  <changelog author="Evan Goode &lt;mail@evangoo.de&gt; - 0.7.33-2" date="1768910400">- Add testcase for color filtering when adding update targets</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.33-3" date="1779969600">- Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
  repository (CVE-2026-9150) (RHEL-178263)</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.33-4" date="1779969601">- Cope with integer overflow in data size arithmetics in repo_add_solv()
  (CVE-2026-9149) (RHEL-178267)</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.33-5" date="1779969602">- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178270)</changelog>
</package>
<package pkgid="8c972568249c9406293120980b41de196e0bcd08106660cf51e8fa7cc7bf205f" name="libsolv-demo" arch="x86_64">
  <version epoch="0" ver="0.7.33" rel="2.el10"/>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-1" date="1717070400">- Update to 0.7.29 (RHEL-32212)</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-2" date="1717156800">- Configure gating</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-4" date="1717156801">- Stricten dependencies between libsolv subpackages (RHEL-38831)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-6" date="1720526400">- Use digest functions from OpenSSL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-7" date="1723118400">- Bump release for Aug 2024 perl mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Martin Banas &lt;mbanas@redhat.com&gt; - 0.7.29-9" date="1731499200">- Run dnf CI-Tier-1 tests for gating of libsolv as well</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 0.7.33-1" date="1757332800">- Rebase to 0.7.33</changelog>
  <changelog author="Evan Goode &lt;mail@evangoo.de&gt; - 0.7.33-2" date="1768910400">- Add testcase for color filtering when adding update targets</changelog>
</package>
<package pkgid="92ff81d866c212ef494f364653ac2f762b12737d0204c4e35182f075a9f346a3" name="libsolv-demo" arch="x86_64">
  <version epoch="0" ver="0.7.33" rel="5.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-6" date="1720526400">- Use digest functions from OpenSSL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-7" date="1723118400">- Bump release for Aug 2024 perl mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Martin Banas &lt;mbanas@redhat.com&gt; - 0.7.29-9" date="1731499200">- Run dnf CI-Tier-1 tests for gating of libsolv as well</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 0.7.33-1" date="1757332800">- Rebase to 0.7.33</changelog>
  <changelog author="Evan Goode &lt;mail@evangoo.de&gt; - 0.7.33-2" date="1768910400">- Add testcase for color filtering when adding update targets</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.33-3" date="1779969600">- Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
  repository (CVE-2026-9150) (RHEL-178263)</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.33-4" date="1779969601">- Cope with integer overflow in data size arithmetics in repo_add_solv()
  (CVE-2026-9149) (RHEL-178267)</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.33-5" date="1779969602">- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178270)</changelog>
</package>
<package pkgid="af07b47c63202043639cfeb617367c212c4d50295d523b59363127f07fd17001" name="libsolv-devel" arch="x86_64">
  <version epoch="0" ver="0.7.33" rel="2.el10"/>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-1" date="1717070400">- Update to 0.7.29 (RHEL-32212)</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-2" date="1717156800">- Configure gating</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-4" date="1717156801">- Stricten dependencies between libsolv subpackages (RHEL-38831)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-6" date="1720526400">- Use digest functions from OpenSSL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-7" date="1723118400">- Bump release for Aug 2024 perl mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Martin Banas &lt;mbanas@redhat.com&gt; - 0.7.29-9" date="1731499200">- Run dnf CI-Tier-1 tests for gating of libsolv as well</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 0.7.33-1" date="1757332800">- Rebase to 0.7.33</changelog>
  <changelog author="Evan Goode &lt;mail@evangoo.de&gt; - 0.7.33-2" date="1768910400">- Add testcase for color filtering when adding update targets</changelog>
</package>
<package pkgid="2ed7d3a607ed8ec0f3b961b32c04c5ef8f6c3e520c419eda224e0ab8711a5ff4" name="libsolv-devel" arch="x86_64">
  <version epoch="0" ver="0.7.33" rel="5.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-6" date="1720526400">- Use digest functions from OpenSSL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-7" date="1723118400">- Bump release for Aug 2024 perl mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Martin Banas &lt;mbanas@redhat.com&gt; - 0.7.29-9" date="1731499200">- Run dnf CI-Tier-1 tests for gating of libsolv as well</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 0.7.33-1" date="1757332800">- Rebase to 0.7.33</changelog>
  <changelog author="Evan Goode &lt;mail@evangoo.de&gt; - 0.7.33-2" date="1768910400">- Add testcase for color filtering when adding update targets</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.33-3" date="1779969600">- Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
  repository (CVE-2026-9150) (RHEL-178263)</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.33-4" date="1779969601">- Cope with integer overflow in data size arithmetics in repo_add_solv()
  (CVE-2026-9149) (RHEL-178267)</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.33-5" date="1779969602">- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178270)</changelog>
</package>
<package pkgid="81b1f46d818c279a9005965e783a816d4c4dd4b8a0cd39745db90df9680bf887" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.33" rel="2.el10"/>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-1" date="1717070400">- Update to 0.7.29 (RHEL-32212)</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-2" date="1717156800">- Configure gating</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-4" date="1717156801">- Stricten dependencies between libsolv subpackages (RHEL-38831)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-6" date="1720526400">- Use digest functions from OpenSSL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-7" date="1723118400">- Bump release for Aug 2024 perl mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Martin Banas &lt;mbanas@redhat.com&gt; - 0.7.29-9" date="1731499200">- Run dnf CI-Tier-1 tests for gating of libsolv as well</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 0.7.33-1" date="1757332800">- Rebase to 0.7.33</changelog>
  <changelog author="Evan Goode &lt;mail@evangoo.de&gt; - 0.7.33-2" date="1768910400">- Add testcase for color filtering when adding update targets</changelog>
</package>
<package pkgid="87ed875da58844dd0639b691250bde75c6163ddf119da190074bae4582ac655b" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.33" rel="5.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-6" date="1720526400">- Use digest functions from OpenSSL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-7" date="1723118400">- Bump release for Aug 2024 perl mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Martin Banas &lt;mbanas@redhat.com&gt; - 0.7.29-9" date="1731499200">- Run dnf CI-Tier-1 tests for gating of libsolv as well</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 0.7.33-1" date="1757332800">- Rebase to 0.7.33</changelog>
  <changelog author="Evan Goode &lt;mail@evangoo.de&gt; - 0.7.33-2" date="1768910400">- Add testcase for color filtering when adding update targets</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.33-3" date="1779969600">- Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
  repository (CVE-2026-9150) (RHEL-178263)</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.33-4" date="1779969601">- Cope with integer overflow in data size arithmetics in repo_add_solv()
  (CVE-2026-9149) (RHEL-178267)</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.33-5" date="1779969602">- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178270)</changelog>
</package>
<package pkgid="9f1cff3eddfb30a635706c6f05606fa9826ff503ad21d1318026ac9b8c8b0a99" name="libsolv-tools-base" arch="x86_64">
  <version epoch="0" ver="0.7.33" rel="2.el10"/>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-1" date="1717070400">- Update to 0.7.29 (RHEL-32212)</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-2" date="1717156800">- Configure gating</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-4" date="1717156801">- Stricten dependencies between libsolv subpackages (RHEL-38831)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-6" date="1720526400">- Use digest functions from OpenSSL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-7" date="1723118400">- Bump release for Aug 2024 perl mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Martin Banas &lt;mbanas@redhat.com&gt; - 0.7.29-9" date="1731499200">- Run dnf CI-Tier-1 tests for gating of libsolv as well</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 0.7.33-1" date="1757332800">- Rebase to 0.7.33</changelog>
  <changelog author="Evan Goode &lt;mail@evangoo.de&gt; - 0.7.33-2" date="1768910400">- Add testcase for color filtering when adding update targets</changelog>
</package>
<package pkgid="888e7bf637fed5be1f95ae46700768a90eb4223bb515be6a1b517586c6ace51f" name="libsolv-tools-base" arch="x86_64">
  <version epoch="0" ver="0.7.33" rel="5.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.29-6" date="1720526400">- Use digest functions from OpenSSL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-7" date="1723118400">- Bump release for Aug 2024 perl mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.7.29-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Martin Banas &lt;mbanas@redhat.com&gt; - 0.7.29-9" date="1731499200">- Run dnf CI-Tier-1 tests for gating of libsolv as well</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 0.7.33-1" date="1757332800">- Rebase to 0.7.33</changelog>
  <changelog author="Evan Goode &lt;mail@evangoo.de&gt; - 0.7.33-2" date="1768910400">- Add testcase for color filtering when adding update targets</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.33-3" date="1779969600">- Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
  repository (CVE-2026-9150) (RHEL-178263)</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.33-4" date="1779969601">- Cope with integer overflow in data size arithmetics in repo_add_solv()
  (CVE-2026-9149) (RHEL-178267)</changelog>
  <changelog author="Petr P&#xED;sa&#x159; &lt;ppisar@redhat.com&gt; - 0.7.33-5" date="1779969602">- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178270)</changelog>
</package>
<package pkgid="899cf8c6958e0804b2b43b97a0b07a49d60ed5117a2ee76a7e710958ef0c4e01" name="libsoup3" arch="x86_64">
  <version epoch="0" ver="3.6.5" rel="5.el10"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 3.4.4-4" date="1714046400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.4-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.1-1" date="1736510400">- Update to 3.6.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.3-1" date="1736942400">- Update to 3.6.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.5-1" date="1745928000">- Update to 3.6.5 and add patches for CVEs</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.5-2" date="1746014400">- Add patch to hopefully fix server-test timeouts</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.5-3" date="1746100800">- Add patch to hopefully fix http2-body-size-test timeouts</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.5-4" date="1747828800">- Fix several CVEs</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.5-5" date="1748347200">- Bump revision number</changelog>
</package>
<package pkgid="0acb4b333b5724d2bc6e55de1efe59842c97551d109c9741966bb96686dbcec8" name="libsoup3-devel" arch="x86_64">
  <version epoch="0" ver="3.6.5" rel="5.el10"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 3.4.4-4" date="1714046400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.4-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.1-1" date="1736510400">- Update to 3.6.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.3-1" date="1736942400">- Update to 3.6.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.5-1" date="1745928000">- Update to 3.6.5 and add patches for CVEs</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.5-2" date="1746014400">- Add patch to hopefully fix server-test timeouts</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.5-3" date="1746100800">- Add patch to hopefully fix http2-body-size-test timeouts</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.5-4" date="1747828800">- Fix several CVEs</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.5-5" date="1748347200">- Bump revision number</changelog>
</package>
<package pkgid="c0f91596beee3c35dff7d5894264acacd203bbd095728b10a09abfb1ed43e60e" name="libsoup3-doc" arch="noarch">
  <version epoch="0" ver="3.6.5" rel="5.el10"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 3.4.4-4" date="1714046400">- Add gating.yaml via API</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.4-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.4.4-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.1-1" date="1736510400">- Update to 3.6.1</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.3-1" date="1736942400">- Update to 3.6.3</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.5-1" date="1745928000">- Update to 3.6.5 and add patches for CVEs</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.5-2" date="1746014400">- Add patch to hopefully fix server-test timeouts</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.5-3" date="1746100800">- Add patch to hopefully fix http2-body-size-test timeouts</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.5-4" date="1747828800">- Fix several CVEs</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.6.5-5" date="1748347200">- Bump revision number</changelog>
</package>
<package pkgid="85b77645e24e8cb92d9d271be50bc335fd532e28e58bb8f2f6f2898877492e51" name="libspectre" arch="x86_64">
  <version epoch="0" ver="0.2.12" rel="8.el10"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.2.11-1" date="1667822400">- Update to 0.2.11
- Resolves: #2139968</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.2.12-1" date="1673870400">- Update to 0.2.12
- Resolves: #2159146</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.12-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.2.12-3" date="1674561600">- Rebuild for ghostscript-10.0.0
- Related: #2128814</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.12-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.12-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.12-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.12-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.12-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c25509f57db6b51d40274821ef4ff24c1f8933547c98d78ea334d4a2ad4f29cf" name="libspectre-devel" arch="x86_64">
  <version epoch="0" ver="0.2.12" rel="8.el10"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.2.11-1" date="1667822400">- Update to 0.2.11
- Resolves: #2139968</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.2.12-1" date="1673870400">- Update to 0.2.12
- Resolves: #2159146</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.12-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.2.12-3" date="1674561600">- Rebuild for ghostscript-10.0.0
- Related: #2128814</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.12-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.12-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.12-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.12-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.12-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5a6cbc413167f0cb57524b21ed782a0cf543090f349a2334d579a80a89b05a91" name="libspelling" arch="x86_64">
  <version epoch="0" ver="0.4.8" rel="1.el10"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.4.5-1" date="1737633600">- Initial import based on Fedora 42</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.4.6-1" date="1738065600">- Update to 0.4.6</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 0.4.8-1" date="1744891200">- Update libspelling 0.4.8</changelog>
</package>
<package pkgid="14e0f53b55051b17c4c455de4f56502f354dc76a4e5080547e07dd44b24dea24" name="libspelling-devel" arch="x86_64">
  <version epoch="0" ver="0.4.8" rel="1.el10"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.4.5-1" date="1737633600">- Initial import based on Fedora 42</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.4.6-1" date="1738065600">- Update to 0.4.6</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 0.4.8-1" date="1744891200">- Update libspelling 0.4.8</changelog>
</package>
<package pkgid="1c7cc6b0612a14bddd01c47a4180599e8b9423f59f36865507a59f55c3bec5ec" name="libspiro" arch="x86_64">
  <version epoch="0" ver="20221101" rel="8.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20221101-1" date="1668081600">- Update to 20221101 version (#2139603)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20221101-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20221101-3" date="1687521600">- Migrate to SPDX license expression</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20221101-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20221101-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20221101-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20221101-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20221101-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="711bb604662c63f67650e3e1dbe10e34bfe609760df5d0ad3ec9c80401b02638" name="libspiro" arch="x86_64">
  <version epoch="0" ver="20240903" rel="3.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20221101-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 20240903-3" date="1786708800">- update to 20240903 version and move pgk to AppStream</changelog>
</package>
<package pkgid="3b9af3747ad6ea6ad6d2592bc0b2b218a551cf00b3455dbb1b43f345864fe7c7" name="libspiro-devel" arch="x86_64">
  <version epoch="0" ver="20221101" rel="8.el10"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20221101-1" date="1668081600">- Update to 20221101 version (#2139603)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20221101-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20221101-3" date="1687521600">- Migrate to SPDX license expression</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20221101-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20221101-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20221101-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20221101-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20221101-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d21a4567bd12d80ada76c24d9058ab93805b3a8aee513d204050ecd9c1001a69" name="libspiro-devel" arch="x86_64">
  <version epoch="0" ver="20240903" rel="3.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 20221101-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 20240903-3" date="1786708800">- update to 20240903 version and move pgk to AppStream</changelog>
</package>
<package pkgid="403dbd95a34fe31b9180ee241a883114ce6b26ee20e2c6e2bc066377e57fd93c" name="libsrtp" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 2.3.0-11" date="1688731200">- add %check (thanks to Gerd v. Egidy) Related: rhbz#2163492</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-12" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-13" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-14" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.0-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.0-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="98610722442ca40efe5e72e49d95bc2625ddd91a12c49609b3c816d3ddf3c781" name="libsrtp-devel" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 2.3.0-11" date="1688731200">- add %check (thanks to Gerd v. Egidy) Related: rhbz#2163492</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-12" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-13" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-14" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.0-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.0-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1cf0d9329b3f87c8cb3a5cd193fbb50cf8d08ea8f77621553fa476730a8dbaa8" name="libsrtp-tools" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 2.3.0-11" date="1688731200">- add %check (thanks to Gerd v. Egidy) Related: rhbz#2163492</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-12" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-13" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-14" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.0-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.3.0-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ba36161fc545d353baaf2c5bced685ad5009907a32a2cf8f0a3f4c66e61e9c38" name="libss" arch="x86_64">
  <version epoch="0" ver="1.47.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47.0-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Brian J. Murrell &lt;brian@interlinx.bc.ca&gt; - 1.47.0-5" date="1707480000">- Recommends: /usr/sbin/sendmail rather than sendmail as many packages
  can provide a /usr/sbin/sendmail command</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.47.1-1" date="1719316800">- Rebase to new upstream
- Remove stale patch from the package</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.47.1-2" date="1721649600">- Disable metadata_csum_seed and orphan_file features in mke2fs.conf</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.47.1-4" date="1750766400">- debugfs: byteswap dirsearch dirent buf on big endian systems
  Resolves: RHEL-74431</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.47.1-5" date="1763553600">- Bump release for SPDX rebuild
- Related: RHEL-119484</changelog>
</package>
<package pkgid="ca566398cca5aafd99e83fd3af9730ddf8e29688ca68a19e7789ee74a6d1ca22" name="libss-devel" arch="x86_64">
  <version epoch="0" ver="1.47.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47.0-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.47.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Brian J. Murrell &lt;brian@interlinx.bc.ca&gt; - 1.47.0-5" date="1707480000">- Recommends: /usr/sbin/sendmail rather than sendmail as many packages
  can provide a /usr/sbin/sendmail command</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47.0-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.47.1-1" date="1719316800">- Rebase to new upstream
- Remove stale patch from the package</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.47.1-2" date="1721649600">- Disable metadata_csum_seed and orphan_file features in mke2fs.conf</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.47.1-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.47.1-4" date="1750766400">- debugfs: byteswap dirsearch dirent buf on big endian systems
  Resolves: RHEL-74431</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.47.1-5" date="1763553600">- Bump release for SPDX rebuild
- Related: RHEL-119484</changelog>
</package>
<package pkgid="f1c243c0909da6ba30d9f86797d4046cc5476116ed99ab14a4755dbffd24fb96" name="libssh" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="2.el10"/>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 0.10.6-5" date="1716379200">- Build libssh with pkcs11-provider instead of pkcs11 engine
- Resolves: RHEL-30437</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 0.10.6-6" date="1717761600">- Add riscv64</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.10.6-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.10.6-8" date="1724155200">- Remove the dependency on engine.h</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 0.11.1-1" date="1729684800">- Rebase to new upstream version 0.11.1
- Resolves: RHEL-64319</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.11.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.11.1-3" date="1759233600">- Fix CVE-2025-5318
  Resolves: RHEL-111721
- Add BuildRequires for p11-kit-client</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.12.0-1" date="1770724800">- Rebase to 0.12.0
  Resolves: RHEL-133421, RHEL-70825, RHEL-130042
- Add a Requires for crypto-policies instead of a Recommends
  Resolves: RHEL-139045</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.12.0-2" date="1771502400">- Fix the verbosity of some new logs added in 0.12.0
  Resolves: RHEL-93748</changelog>
</package>
<package pkgid="ab82eb674b117517b7de9b029c9eb090b85a3d9f5e9818a09ffc66e44f8abee4" name="libssh" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="3.el10_2"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.10.6-8" date="1724155200">- Remove the dependency on engine.h</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 0.11.1-1" date="1729684800">- Rebase to new upstream version 0.11.1
- Resolves: RHEL-64319</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.11.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.11.1-3" date="1759233600">- Fix CVE-2025-5318
  Resolves: RHEL-111721
- Add BuildRequires for p11-kit-client</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.12.0-1" date="1770724800">- Rebase to 0.12.0
  Resolves: RHEL-133421, RHEL-70825, RHEL-130042
- Add a Requires for crypto-policies instead of a Recommends
  Resolves: RHEL-139045</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.12.0-2" date="1771502400">- Fix the verbosity of some new logs added in 0.12.0
  Resolves: RHEL-93748</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.12.0-3" date="1784721600">- Backport CVE fixes from 0.12.2
  Resolves: RHEL-213004
  Resolves: RHEL-213029
  Resolves: RHEL-213032
  Resolves: RHEL-213039
  Resolves: RHEL-213046
  Resolves: RHEL-213079
  Resolves: RHEL-213112
  Resolves: RHEL-213117
  Resolves: RHEL-213148
  Resolves: RHEL-213150
  Resolves: RHEL-213175</changelog>
</package>
<package pkgid="6562e7f447f52dc7d16af776452c3aa914aca0df033710726893a4558f7e8b03" name="libssh-config" arch="noarch">
  <version epoch="0" ver="0.12.0" rel="2.el10"/>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 0.10.6-5" date="1716379200">- Build libssh with pkcs11-provider instead of pkcs11 engine
- Resolves: RHEL-30437</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 0.10.6-6" date="1717761600">- Add riscv64</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.10.6-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.10.6-8" date="1724155200">- Remove the dependency on engine.h</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 0.11.1-1" date="1729684800">- Rebase to new upstream version 0.11.1
- Resolves: RHEL-64319</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.11.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.11.1-3" date="1759233600">- Fix CVE-2025-5318
  Resolves: RHEL-111721
- Add BuildRequires for p11-kit-client</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.12.0-1" date="1770724800">- Rebase to 0.12.0
  Resolves: RHEL-133421, RHEL-70825, RHEL-130042
- Add a Requires for crypto-policies instead of a Recommends
  Resolves: RHEL-139045</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.12.0-2" date="1771502400">- Fix the verbosity of some new logs added in 0.12.0
  Resolves: RHEL-93748</changelog>
</package>
<package pkgid="3bdb9782e49c93998dc755905ac0753453f5c30ed2c80bb587dd694ee69e32c4" name="libssh-config" arch="noarch">
  <version epoch="0" ver="0.12.0" rel="3.el10_2"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.10.6-8" date="1724155200">- Remove the dependency on engine.h</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 0.11.1-1" date="1729684800">- Rebase to new upstream version 0.11.1
- Resolves: RHEL-64319</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.11.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.11.1-3" date="1759233600">- Fix CVE-2025-5318
  Resolves: RHEL-111721
- Add BuildRequires for p11-kit-client</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.12.0-1" date="1770724800">- Rebase to 0.12.0
  Resolves: RHEL-133421, RHEL-70825, RHEL-130042
- Add a Requires for crypto-policies instead of a Recommends
  Resolves: RHEL-139045</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.12.0-2" date="1771502400">- Fix the verbosity of some new logs added in 0.12.0
  Resolves: RHEL-93748</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.12.0-3" date="1784721600">- Backport CVE fixes from 0.12.2
  Resolves: RHEL-213004
  Resolves: RHEL-213029
  Resolves: RHEL-213032
  Resolves: RHEL-213039
  Resolves: RHEL-213046
  Resolves: RHEL-213079
  Resolves: RHEL-213112
  Resolves: RHEL-213117
  Resolves: RHEL-213148
  Resolves: RHEL-213150
  Resolves: RHEL-213175</changelog>
</package>
<package pkgid="cfc1d461bf887edb7a125cfe3553d09cc7947e16bc200a2f6f71bce57fbff3e8" name="libssh-devel" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="2.el10"/>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 0.10.6-5" date="1716379200">- Build libssh with pkcs11-provider instead of pkcs11 engine
- Resolves: RHEL-30437</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 0.10.6-6" date="1717761600">- Add riscv64</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.10.6-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.10.6-8" date="1724155200">- Remove the dependency on engine.h</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 0.11.1-1" date="1729684800">- Rebase to new upstream version 0.11.1
- Resolves: RHEL-64319</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.11.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.11.1-3" date="1759233600">- Fix CVE-2025-5318
  Resolves: RHEL-111721
- Add BuildRequires for p11-kit-client</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.12.0-1" date="1770724800">- Rebase to 0.12.0
  Resolves: RHEL-133421, RHEL-70825, RHEL-130042
- Add a Requires for crypto-policies instead of a Recommends
  Resolves: RHEL-139045</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.12.0-2" date="1771502400">- Fix the verbosity of some new logs added in 0.12.0
  Resolves: RHEL-93748</changelog>
</package>
<package pkgid="e9756dfc245a65d4f8cc56d8220a0961b4541ceeed1363c0fd042e7b99da9a94" name="libssh-devel" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="3.el10_2"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.10.6-8" date="1724155200">- Remove the dependency on engine.h</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 0.11.1-1" date="1729684800">- Rebase to new upstream version 0.11.1
- Resolves: RHEL-64319</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.11.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.11.1-3" date="1759233600">- Fix CVE-2025-5318
  Resolves: RHEL-111721
- Add BuildRequires for p11-kit-client</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.12.0-1" date="1770724800">- Rebase to 0.12.0
  Resolves: RHEL-133421, RHEL-70825, RHEL-130042
- Add a Requires for crypto-policies instead of a Recommends
  Resolves: RHEL-139045</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.12.0-2" date="1771502400">- Fix the verbosity of some new logs added in 0.12.0
  Resolves: RHEL-93748</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 0.12.0-3" date="1784721600">- Backport CVE fixes from 0.12.2
  Resolves: RHEL-213004
  Resolves: RHEL-213029
  Resolves: RHEL-213032
  Resolves: RHEL-213039
  Resolves: RHEL-213046
  Resolves: RHEL-213079
  Resolves: RHEL-213112
  Resolves: RHEL-213117
  Resolves: RHEL-213148
  Resolves: RHEL-213150
  Resolves: RHEL-213175</changelog>
</package>
<package pkgid="5c53609bd9506b06ca8e65f435ecccecb6d8236552206d75513451fc7525f282" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="- Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3.1" date="1783512000">- Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole
- Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass</changelog>
</package>
<package pkgid="0a99500e935417c307a473f76b05f6dfcf7cc96352e71b584e77886ed90e13d4" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2"/>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 2.10.2-4" date="1746187200">- Resolves: RHEL-89474 - Fails to build on riscv64</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
</package>
<package pkgid="2e11a3363c885e0132244bd7dc749ce2328c4f545e9ccf60d946573f82c04eac" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="- Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3.1" date="1783512000">- Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole
- Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass</changelog>
</package>
<package pkgid="988aeeed922c425ddf7120bcf285f6d4706df82973625b445373f2dd6b9c98de" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2"/>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 2.10.2-4" date="1746187200">- Resolves: RHEL-89474 - Fails to build on riscv64</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
</package>
<package pkgid="7393c6dd7271f18c1d6f114c2fbcf7ddf43d913a7e5b32d7f339a6a844044f75" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="- Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3.1" date="1783512000">- Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole
- Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass</changelog>
</package>
<package pkgid="efd84a19889beb400984377c53a99cf9805e69fa42176e82382f36dce5c88e53" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2"/>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 2.10.2-4" date="1746187200">- Resolves: RHEL-89474 - Fails to build on riscv64</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
</package>
<package pkgid="bc107dc911b11d8e09c8de748c4c7de7ef57a644372975c81259366a3473baf8" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="- Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3.1" date="1783512000">- Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole
- Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass</changelog>
</package>
<package pkgid="f65f69e4f982816512e3e86c4db7ee989680f92a89c54c7192558fb339062e42" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2"/>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 2.10.2-4" date="1746187200">- Resolves: RHEL-89474 - Fails to build on riscv64</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
</package>
<package pkgid="8a32bc74e1d55cc05ed4524986ce3542a90927ed5523d202bdbca48c2da40bf2" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="- Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3.1" date="1783512000">- Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole
- Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass</changelog>
</package>
<package pkgid="b29928d6416fb305039e9da924861935784d8afdc13c7fc2cb098b3f9b883cf9" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2"/>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 2.10.2-4" date="1746187200">- Resolves: RHEL-89474 - Fails to build on riscv64</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
</package>
<package pkgid="c935904e631ed513d7d21bd75bf9154643e6f2c43a6fbb2d97b579c6c1b0c257" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="- Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3.1" date="1783512000">- Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole
- Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass</changelog>
</package>
<package pkgid="39ee2a63494084d3519cd295197f6ac5d82f1bb720bf4844b1b7cabf1429bcb5" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2"/>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 2.10.2-4" date="1746187200">- Resolves: RHEL-89474 - Fails to build on riscv64</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
</package>
<package pkgid="440771c360edb039dda0666349d8b8e03a6fb702c6b943f511de031ac62919da" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="- Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3.1" date="1783512000">- Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole
- Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass</changelog>
</package>
<package pkgid="0dcc74a4fb20129d2f67351f7d2496ac4022e3af29f6f903ad8f580e04292174" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2"/>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 2.10.2-4" date="1746187200">- Resolves: RHEL-89474 - Fails to build on riscv64</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
</package>
<package pkgid="308cc1519a67531ab3ddec72cac21bdcc6ef8f71fba1dd579e48eef9e6699cfd" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="- Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3.1" date="1783512000">- Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole
- Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass</changelog>
</package>
<package pkgid="e3ac224fb5e872610212f14a6c000ac32ae780673ffb133d7beba0022d8bc6b6" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="3.el10_2"/>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 2.10.2-4" date="1746187200">- Resolves: RHEL-89474 - Fails to build on riscv64</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-1" date="1749124800">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
- Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
- Resolves: RHEL-25593 - Improve sssd-simple man page description
- Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
- Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
- Resolves: RHEL-4981 - p11_child currently has an infinite timeout
- Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
- Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
- Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-2" date="1749211200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.0-3" date="1749816000">- Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-1" date="1753963200">- Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.11.1-2" date="1755172800">- Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.11.1-3" date="1758542400">- Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 2.12.0-1" date="1768478400">- Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
- Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
- Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
- Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
- Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
- Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
- Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
- Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
- Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
- Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
- Resolves: RHEL-72935 - sss_override does not work on AD UPN
- Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
- Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-2" date="1775131200">- Resolves: RHEL-148232 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.12.0-3" date="1776168000">- Resolves: RHEL-167749 - SSSD IdP (Entra ID): listing group members does not work
- Resolves: RHEL-167757 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
</package>
<package pkgid="342c4128ad2e04b518871c3029132405d0a8a36a94c0449262d08cc8350e62ba" name="libstdc++" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="7ce2f001978b0891c83c011e70443d318beaaf289cc670ae09d7aa25f6cab359" name="libstdc++-devel" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="d48220fd8e949177919ef52722078156bc6d1f3a4e9939def8b3021f0db4076f" name="libstdc++-docs" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="8f6d651b3690c87644c89fd5e6d3cf7915971812070ac6aa8ceee6b4fe6c5bd1" name="libstdc++-static" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="d87471510215816810f1f4c1e83fb1b71e800fc8ed6f26788287bf209bdbb95a" name="libstoragemgmt" arch="x86_64">
  <version epoch="0" ver="1.10.1" rel="4.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.9.8-2" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.9.8-4" date="1689940800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.8-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-1" date="1721044800">- Upgrade to 1.10.1</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-2" date="1721217600">- Add gating.yaml</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-3" date="1723118400">- Remove smis plugin sub package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0f0722da3796f2141bd59bbe7a2b7810de328f8f2e03fc92d95264e862a733b4" name="libstoragemgmt-arcconf-plugin" arch="noarch">
  <version epoch="0" ver="1.10.1" rel="4.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.9.8-2" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.9.8-4" date="1689940800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.8-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-1" date="1721044800">- Upgrade to 1.10.1</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-2" date="1721217600">- Add gating.yaml</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-3" date="1723118400">- Remove smis plugin sub package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="14bcfe6b93c1d274ba97aba1dc43e6f1e7247ad588180cfcd5586b94a0465f47" name="libstoragemgmt-devel" arch="x86_64">
  <version epoch="0" ver="1.10.1" rel="4.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.9.8-2" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.9.8-4" date="1689940800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.8-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-1" date="1721044800">- Upgrade to 1.10.1</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-2" date="1721217600">- Add gating.yaml</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-3" date="1723118400">- Remove smis plugin sub package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0f4ec1532f6973fcccedcb77f2b2380c74ebeca26893b417a65f57fcf69852de" name="libstoragemgmt-hpsa-plugin" arch="noarch">
  <version epoch="0" ver="1.10.1" rel="4.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.9.8-2" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.9.8-4" date="1689940800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.8-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-1" date="1721044800">- Upgrade to 1.10.1</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-2" date="1721217600">- Add gating.yaml</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-3" date="1723118400">- Remove smis plugin sub package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1b4bb9f6e05b626c77ea5fcf241f38a815b9eb434d1a1e121ebada25c05679e6" name="libstoragemgmt-local-plugin" arch="noarch">
  <version epoch="0" ver="1.10.1" rel="4.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.9.8-2" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.9.8-4" date="1689940800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.8-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-1" date="1721044800">- Upgrade to 1.10.1</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-2" date="1721217600">- Add gating.yaml</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-3" date="1723118400">- Remove smis plugin sub package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9445eaa3689d9e4c184b9fa8651ee9ed6aff4b118d7442314dd9aa555f254948" name="libstoragemgmt-megaraid-plugin" arch="noarch">
  <version epoch="0" ver="1.10.1" rel="4.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.9.8-2" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.9.8-4" date="1689940800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.8-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-1" date="1721044800">- Upgrade to 1.10.1</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-2" date="1721217600">- Add gating.yaml</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-3" date="1723118400">- Remove smis plugin sub package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a4f88103a93b20ca6a0813640390b8fab8ca627e5f3097778f6540fd8cbb4de9" name="libstoragemgmt-nfs-plugin" arch="x86_64">
  <version epoch="0" ver="1.10.1" rel="4.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.9.8-2" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.9.8-4" date="1689940800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.8-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-1" date="1721044800">- Upgrade to 1.10.1</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-2" date="1721217600">- Add gating.yaml</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-3" date="1723118400">- Remove smis plugin sub package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d00468d396c4e7e120f6768013f7b883f241605a383b1609fc01b742a6150f5a" name="libstoragemgmt-targetd-plugin" arch="noarch">
  <version epoch="0" ver="1.10.1" rel="4.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.9.8-2" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.9.8-4" date="1689940800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.8-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-1" date="1721044800">- Upgrade to 1.10.1</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-2" date="1721217600">- Add gating.yaml</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-3" date="1723118400">- Remove smis plugin sub package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="daebc862cb323194873b1c854b81f76a838ea72222794e81e7723b694864e670" name="libstoragemgmt-udev" arch="x86_64">
  <version epoch="0" ver="1.10.1" rel="4.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.9.8-2" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.9.8-4" date="1689940800">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.8-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.9.8-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-1" date="1721044800">- Upgrade to 1.10.1</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-2" date="1721217600">- Add gating.yaml</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.10.1-3" date="1723118400">- Remove smis plugin sub package</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="61e2efbce964d690ab8a0e472a709151748349b4d633235c1ec5419b167cf9f6" name="libsysfs" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="15.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-6" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-7" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.1.1-8" date="1715256000">- Update license tags to SPDX format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.1-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.1.1-10" date="1721822400">- Add explicit package version requirement for sysfsutils requiring libsysfs</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.1.1-11" date="1721822401">- Bump release</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.1.1-12" date="1721822402">- Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.1.1-13" date="1722513600">- Fix memory leaks and off-by-one error
  Resolves: RHEL-42557</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.1-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.1.1-15" date="1745323200">- Fix erroneous my_strncat implementation
  Resolves: RHEL-83778</changelog>
</package>
<package pkgid="30627fd15e308bc5f2eca1671340c90ceeb56f853e2311175eb9718da63527cd" name="libsysfs-devel" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="15.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-6" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-7" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.1.1-8" date="1715256000">- Update license tags to SPDX format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.1-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.1.1-10" date="1721822400">- Add explicit package version requirement for sysfsutils requiring libsysfs</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.1.1-11" date="1721822401">- Bump release</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.1.1-12" date="1721822402">- Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.1.1-13" date="1722513600">- Fix memory leaks and off-by-one error
  Resolves: RHEL-42557</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.1-14" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.1.1-15" date="1745323200">- Fix erroneous my_strncat implementation
  Resolves: RHEL-83778</changelog>
</package>
<package pkgid="008602c1ecb1820c2df862c23dc39ef7f3e880e5850e5344199e5452142f2d8c" name="libsysprof" arch="x86_64">
  <version epoch="0" ver="47.2" rel="1.el10"/>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 46.0-4" date="1720008000">- Bundle libunwind as part of Sysprof</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 46.0-5" date="1720440000">- Only bundle libunwind on RHEL like systems</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 46.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 47.1-1" date="1730721600">- Update to Sysprof 47.1</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 47.1-2" date="1730894400">- Backport debuginfod and sysprof-live-unwinder</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 47.1-3" date="1731067200">- Lower libpanel requirement for s390</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 47.1-4" date="1731067201">- Backport ifdef check for register knowledge</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 47.1-5" date="1731585600">- update patches to sysprof-el10 branch</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 47.1-6" date="1731585601">- build: fix a s390 test</changelog>
  <changelog author="Christian Hergert &lt;chergert@redhat.com&gt; - 47.2-1" date="1732708800">- Update to 47.2</changelog>
</package>
<package pkgid="f46bc17b9d15e8a6711f6e53a5d4c6bd574c69b5e37c25e01af5cd70a43b57af" name="libtalloc" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="100.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.4.0-3" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Guenther Deschner &lt;gdeschne@redhat.com&gt; - 2.4.1-1" date="1691409600">- rhbz#2224330 - libtalloc-2.4.1 is available</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Guenther Deschner &lt;gdeschne@redhat.com&gt; - 2.4.2-1" date="1706529600">- rhbz#2260954 - libtalloc-2.4.2 is available</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2.4.2-106" date="1729598400">- Reformat</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2.4.3-100" date="1747310400">- Update to version 2.4.3
- resolves: RHEL-89875</changelog>
</package>
<package pkgid="29f6b57e3347366bff663eb7e6ae4181ab50ee71211f235d1f8ed9cbf71957e3" name="libtalloc-devel" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="100.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.4.0-3" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Guenther Deschner &lt;gdeschne@redhat.com&gt; - 2.4.1-1" date="1691409600">- rhbz#2224330 - libtalloc-2.4.1 is available</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Guenther Deschner &lt;gdeschne@redhat.com&gt; - 2.4.2-1" date="1706529600">- rhbz#2260954 - libtalloc-2.4.2 is available</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2.4.2-106" date="1729598400">- Reformat</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2.4.3-100" date="1747310400">- Update to version 2.4.3
- resolves: RHEL-89875</changelog>
</package>
<package pkgid="e48beb90c718db2b01b0b8de61757c2c36cb265b8e027708f33bd6f686420569" name="libtasn1" arch="x86_64">
  <version epoch="0" ver="4.20.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.19.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 4.19.0-4" date="1695211200">- Migrate license field to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.19.0-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.19.0-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.19.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 4.19.0-8" date="1728302400">- Initial CI and gating setup for RHEL-10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.19.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 4.20.0-1" date="1739361600">- Update to 4.20.0 to fix CVE-2024-12133</changelog>
</package>
<package pkgid="db7abe9ca42d7ce71faac2e976881a48a21c83485c33261c2908fe8a4b7a3eb7" name="libtasn1" arch="x86_64">
  <version epoch="0" ver="4.20.0" rel="5.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.19.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 4.19.0-8" date="1728302400">- Initial CI and gating setup for RHEL-10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.19.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 4.20.0-1" date="1739361600">- Update to 4.20.0 to fix CVE-2024-12133</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 4.20.0-2" date="1745064000">- Properly check valgrind arches</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 4.20.0-3" date="1751025600">- plans/ci: modify plan names</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.20.0-4" date="1779883200">- Switch to autosetup</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.20.0-5" date="1779883201">- Fix for CVE-2025-13151 stack buffer overflow</changelog>
</package>
<package pkgid="b5798905510e2fd3559e18b319d12a0c624c451dbd78866564825f993ed22686" name="libtasn1-devel" arch="x86_64">
  <version epoch="0" ver="4.20.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.19.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 4.19.0-4" date="1695211200">- Migrate license field to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.19.0-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.19.0-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.19.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 4.19.0-8" date="1728302400">- Initial CI and gating setup for RHEL-10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.19.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 4.20.0-1" date="1739361600">- Update to 4.20.0 to fix CVE-2024-12133</changelog>
</package>
<package pkgid="0b13cb62595d88c868ba7ff8bb1c14467649e4e79f627661ebaf37bad14ff0cd" name="libtasn1-devel" arch="x86_64">
  <version epoch="0" ver="4.20.0" rel="5.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.19.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 4.19.0-8" date="1728302400">- Initial CI and gating setup for RHEL-10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.19.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 4.20.0-1" date="1739361600">- Update to 4.20.0 to fix CVE-2024-12133</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 4.20.0-2" date="1745064000">- Properly check valgrind arches</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 4.20.0-3" date="1751025600">- plans/ci: modify plan names</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.20.0-4" date="1779883200">- Switch to autosetup</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.20.0-5" date="1779883201">- Fix for CVE-2025-13151 stack buffer overflow</changelog>
</package>
<package pkgid="2aec0cfdb435f781aba852d35c2611baf82f9b36f82c07afd2ec50b50fb5f5e1" name="libtasn1-tools" arch="x86_64">
  <version epoch="0" ver="4.20.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.19.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 4.19.0-4" date="1695211200">- Migrate license field to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.19.0-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.19.0-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.19.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 4.19.0-8" date="1728302400">- Initial CI and gating setup for RHEL-10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.19.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 4.20.0-1" date="1739361600">- Update to 4.20.0 to fix CVE-2024-12133</changelog>
</package>
<package pkgid="7f770fde65f50c2d00eb713720d286ca8582401adf3ba6a4e8073915887bacb8" name="libtasn1-tools" arch="x86_64">
  <version epoch="0" ver="4.20.0" rel="5.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.19.0-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 4.19.0-8" date="1728302400">- Initial CI and gating setup for RHEL-10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.19.0-9" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 4.20.0-1" date="1739361600">- Update to 4.20.0 to fix CVE-2024-12133</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 4.20.0-2" date="1745064000">- Properly check valgrind arches</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 4.20.0-3" date="1751025600">- plans/ci: modify plan names</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.20.0-4" date="1779883200">- Switch to autosetup</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.20.0-5" date="1779883201">- Fix for CVE-2025-13151 stack buffer overflow</changelog>
</package>
<package pkgid="179566c41a2e55790ac55e3460450e05160daeb62de2c4de5a8c5c731755c43d" name="libtdb" arch="x86_64">
  <version epoch="0" ver="1.4.14" rel="100.el10"/>
  <changelog author="Guenther Deschner &lt;gdeschne@redhat.com&gt; - 1.4.10-1" date="1706529600">- rhbz#2260955 - libtdb-1.4.10 is available</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 1.4.10-2" date="1713960000">- Cleanup spec file</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.4.10-3" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.10-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Guenther Deschner &lt;gdeschne@redhat.com&gt; - 1.4.11-1" date="1722254400">- rhbz#2300485 - libtdb-1.4.11 is available</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.12-1" date="1727352000">- Update to version 1.4.12
- resolves: RHEL-59782</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.12-101" date="1727870400">- resolves: RHEL-34923</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.12-102" date="1729512000">- Enable gating tests for libtdb</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.13-100" date="1747310400">- Update to version 1.4.13
- resolves: RHEL-89874</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.14-100" date="1757678400">- Update to version 1.4.14
- resolves: RHEL-114546</changelog>
</package>
<package pkgid="f55b33c663a881e55131905b5c288fa90740026a5e4e3cf50a0ec12f8aada2dc" name="libtdb-devel" arch="x86_64">
  <version epoch="0" ver="1.4.14" rel="100.el10"/>
  <changelog author="Guenther Deschner &lt;gdeschne@redhat.com&gt; - 1.4.10-1" date="1706529600">- rhbz#2260955 - libtdb-1.4.10 is available</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 1.4.10-2" date="1713960000">- Cleanup spec file</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.4.10-3" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.10-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Guenther Deschner &lt;gdeschne@redhat.com&gt; - 1.4.11-1" date="1722254400">- rhbz#2300485 - libtdb-1.4.11 is available</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.12-1" date="1727352000">- Update to version 1.4.12
- resolves: RHEL-59782</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.12-101" date="1727870400">- resolves: RHEL-34923</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.12-102" date="1729512000">- Enable gating tests for libtdb</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.13-100" date="1747310400">- Update to version 1.4.13
- resolves: RHEL-89874</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 1.4.14-100" date="1757678400">- Update to version 1.4.14
- resolves: RHEL-114546</changelog>
</package>
<package pkgid="83bc28979f6cb23b17241a863744a9f0e92e70d1d296681bef3ad779a3f10516" name="libtevent" arch="x86_64">
  <version epoch="0" ver="0.17.1" rel="100.el10"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.16.0-1" date="1698408000">- Update to version 0.16.0
- resolves: rhbz#2244376</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 0.16.1-1" date="1706529600">- rhbz#2260956 - libtevent-0.16.1 is available</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.16.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0.16.1-106" date="1729598400">- Reformat</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0.16.2-100" date="1747396800">- Update to version 0.16.2
- resolves: RHEL-89876</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0.17.1-100" date="1757678400">- Update to version 0.17.1
- resolves: RHEL-114547</changelog>
</package>
<package pkgid="fdf877062e6db5fd2fa32679e96e8f5b0bbcf65875df83ecc8dcf0af1f4a5a1e" name="libtevent-devel" arch="x86_64">
  <version epoch="0" ver="0.17.1" rel="100.el10"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.16.0-1" date="1698408000">- Update to version 0.16.0
- resolves: rhbz#2244376</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 0.16.1-1" date="1706529600">- rhbz#2260956 - libtevent-0.16.1 is available</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.16.1-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0.16.1-106" date="1729598400">- Reformat</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0.16.2-100" date="1747396800">- Update to version 0.16.2
- resolves: RHEL-89876</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0.17.1-100" date="1757678400">- Update to version 0.17.1
- resolves: RHEL-114547</changelog>
</package>
<package pkgid="18db919f85a238c095803c53814822f42f35b5edac6a350057f6472ee291a873" name="libthai" arch="x86_64">
  <version epoch="0" ver="0.1.29" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.29-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.1.29-5" date="1684324800">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.29-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.29-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.29-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.29-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.29-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="86bcc601d22b85f39a620e81d9717f778461de55be1a2b0ce1e535a22ce37ec3" name="libthai-devel" arch="x86_64">
  <version epoch="0" ver="0.1.29" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.29-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.1.29-5" date="1684324800">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.29-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.29-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.29-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.29-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.29-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1efda0d73bc1f399db017926bc66ace20835e61482c3430b5425d8a2296b3937" name="libtheora" arch="x86_64">
  <version epoch="1" ver="1.1.1" rel="39.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.1.1-33" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.1.1-34" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.1.1-35" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.1.1-36" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1:1.1.1-37" date="1714737600">- Remove transfig dependency for RHEL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.1.1-38" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.1.1-39" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ee9612e01607bc2f37f0e9e01a5cf4df41fb3d691f95d4ecd9dbb99fccf88141" name="libtheora-devel" arch="x86_64">
  <version epoch="1" ver="1.1.1" rel="39.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.1.1-33" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.1.1-34" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.1.1-35" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.1.1-36" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1:1.1.1-37" date="1714737600">- Remove transfig dependency for RHEL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.1.1-38" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.1.1-39" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e0db8b8bb5e7687d8d58dd86773b1e45c3c65f474971a46a00a6ec9727a20a2a" name="libtheora-devel-docs" arch="noarch">
  <version epoch="1" ver="1.1.1" rel="39.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.1.1-33" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.1.1-34" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.1.1-35" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.1.1-36" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1:1.1.1-37" date="1714737600">- Remove transfig dependency for RHEL</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.1.1-38" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.1.1-39" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2ccff9b841055c6f490672689659214a25d13d49ac2c5c0410f0e1dae30fa33f" name="libtiff" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="8.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.6.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-4" date="1724241600">- fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52926)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.6.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-6" date="1743422400">- drop unused compat libtiff.so.5 (RHEL-85372)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-7" date="1768478400">- fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112523)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8" date="1771588800">- fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.1" date="1778500800">- fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159310)</changelog>
</package>
<package pkgid="207234b2c215ad997a789dd4576f2ea814c657607d352c44d7230b63063c01ba" name="libtiff" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="8.el10_2.4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-4" date="1724241600">- fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52926)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.6.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-6" date="1743422400">- drop unused compat libtiff.so.5 (RHEL-85372)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-7" date="1768478400">- fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112523)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8" date="1771588800">- fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.1" date="1778500800">- fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159310)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.2" date="1780488000">- backport documentation change for CVE-2023-52355 (RHEL-178281)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.3" date="1782734400">- reintroduce ignore option -i as it is required for tests (RHEL-185328)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.4" date="1783944000">- fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189374)
- make sure documentation is updated during build for CVE-2023-52355 (RHEL-178281)</changelog>
</package>
<package pkgid="7dc1462de38a119ebc9146209c13255b908753acfc7fa2da978483ab4dd980d8" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="8.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.6.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-4" date="1724241600">- fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52926)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.6.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-6" date="1743422400">- drop unused compat libtiff.so.5 (RHEL-85372)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-7" date="1768478400">- fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112523)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8" date="1771588800">- fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.1" date="1778500800">- fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159310)</changelog>
</package>
<package pkgid="7149b042574d1b2d683b581f1adcb0695acf81d1349328ba5cb4f0d0511f8dd9" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="8.el10_2.4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-4" date="1724241600">- fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52926)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.6.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-6" date="1743422400">- drop unused compat libtiff.so.5 (RHEL-85372)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-7" date="1768478400">- fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112523)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8" date="1771588800">- fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.1" date="1778500800">- fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159310)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.2" date="1780488000">- backport documentation change for CVE-2023-52355 (RHEL-178281)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.3" date="1782734400">- reintroduce ignore option -i as it is required for tests (RHEL-185328)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.4" date="1783944000">- fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189374)
- make sure documentation is updated during build for CVE-2023-52355 (RHEL-178281)</changelog>
</package>
<package pkgid="a78e52810d78690082f062cc4a85f969e7b48e9038d05b3ec0f3e77dd718c3d5" name="libtiff-static" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="8.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.6.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-4" date="1724241600">- fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52926)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.6.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-6" date="1743422400">- drop unused compat libtiff.so.5 (RHEL-85372)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-7" date="1768478400">- fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112523)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8" date="1771588800">- fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.1" date="1778500800">- fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159310)</changelog>
</package>
<package pkgid="9397a806b00c2dc1e4a5d44057a5751c53e19eb9dab3430b047343a260b37c56" name="libtiff-static" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="8.el10_2.4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-4" date="1724241600">- fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52926)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.6.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-6" date="1743422400">- drop unused compat libtiff.so.5 (RHEL-85372)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-7" date="1768478400">- fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112523)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8" date="1771588800">- fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.1" date="1778500800">- fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159310)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.2" date="1780488000">- backport documentation change for CVE-2023-52355 (RHEL-178281)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.3" date="1782734400">- reintroduce ignore option -i as it is required for tests (RHEL-185328)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.4" date="1783944000">- fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189374)
- make sure documentation is updated during build for CVE-2023-52355 (RHEL-178281)</changelog>
</package>
<package pkgid="5984f634ece9f3d770116c23e5b461025bebc726f3f3b756ef601c4ddedfb539" name="libtiff-tools" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="8.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.6.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-4" date="1724241600">- fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52926)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.6.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-6" date="1743422400">- drop unused compat libtiff.so.5 (RHEL-85372)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-7" date="1768478400">- fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112523)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8" date="1771588800">- fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.1" date="1778500800">- fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159310)</changelog>
</package>
<package pkgid="857ae171237c78c2627ea5e2ae31bbb0d57b169a913572b18ef231e85bc5588d" name="libtiff-tools" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="8.el10_2.4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-4" date="1724241600">- fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52926)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.6.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-6" date="1743422400">- drop unused compat libtiff.so.5 (RHEL-85372)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-7" date="1768478400">- fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112523)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8" date="1771588800">- fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.1" date="1778500800">- fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159310)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.2" date="1780488000">- backport documentation change for CVE-2023-52355 (RHEL-178281)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.3" date="1782734400">- reintroduce ignore option -i as it is required for tests (RHEL-185328)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.6.0-8.4" date="1783944000">- fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189374)
- make sure documentation is updated during build for CVE-2023-52355 (RHEL-178281)</changelog>
</package>
<package pkgid="f14f685673bfc0372a4487873862725b6ca5d08f84c7ced05c678825129a68dc" name="libtirpc" arch="x86_64">
  <version epoch="0" ver="1.3.5" rel="1.el10"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-1.rc2" date="1691409600">- Updated to the latest upstream RC release: libtirpc-1-3-4-rc2</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.4-0" date="1696680000">- Updated to latest upstream release: libtirpc-1-3-4</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.3.4-1" date="1697457600">- Convert License tag to SPDX format</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.4-1.rc1" date="1704283200">- Updated to the latest upstream RC release: libtirpc-1-3-5-rc1</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.4-1.rc2" date="1704456000">- Updated to the latest upstream RC release: libtirpc-1-3-5-rc2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.4-1.rc2.1" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.4-1.rc2.2" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.4-1.rc2.3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.5-0" date="1722081600">- Updated to the latest upstream release: libtirpc-1_3_5 (RHEL-50728)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.5-1" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="613b1c1705289ac6604c671adce9451842c4259943af41a9eddcbb23db037bfd" name="libtirpc-devel" arch="x86_64">
  <version epoch="0" ver="1.3.5" rel="1.el10"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.3-1.rc2" date="1691409600">- Updated to the latest upstream RC release: libtirpc-1-3-4-rc2</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.4-0" date="1696680000">- Updated to latest upstream release: libtirpc-1-3-4</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.3.4-1" date="1697457600">- Convert License tag to SPDX format</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.4-1.rc1" date="1704283200">- Updated to the latest upstream RC release: libtirpc-1-3-5-rc1</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.4-1.rc2" date="1704456000">- Updated to the latest upstream RC release: libtirpc-1-3-5-rc2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.4-1.rc2.1" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.4-1.rc2.2" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.4-1.rc2.3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 1.3.5-0" date="1722081600">- Updated to the latest upstream release: libtirpc-1_3_5 (RHEL-50728)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.5-1" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8972d91a4405cc791a2ad5c9c24bfd9d5469d103af58d04d6eeed76ea3989da4" name="libtool" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="14.el10"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.4.7-11" date="1717156800">- Rework hardening patch to include loaders. (RHEL-33501)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.7-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.7-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 2.4.7-14" date="1771156800">- Fix riscv64 build
  Resolves: RHEL-149798</changelog>
</package>
<package pkgid="3ec337a2d615dc42dcee0e1726d5de3af41963b300e7d3a34bf5ea56e5dd3fea" name="libtool-ltdl" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="14.el10"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.4.7-11" date="1717156800">- Rework hardening patch to include loaders. (RHEL-33501)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.7-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.7-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 2.4.7-14" date="1771156800">- Fix riscv64 build
  Resolves: RHEL-149798</changelog>
</package>
<package pkgid="b49497c38c56bf71ecda58529a0fc64fd985dc3836ec97e638fb0128ffc364d4" name="libtool-ltdl-devel" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="14.el10"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.4.7-11" date="1717156800">- Rework hardening patch to include loaders. (RHEL-33501)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.7-12" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.4.7-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 2.4.7-14" date="1771156800">- Fix riscv64 build
  Resolves: RHEL-149798</changelog>
</package>
<package pkgid="12dd8cdfc9050211f18b483635b05acddb0e961ed09c239b7fb360177b474f04" name="libtpms" arch="x86_64">
  <version epoch="0" ver="0.9.6" rel="11.el10_0"/>
  <changelog author="Stefan Berger &lt;stefanb@linux.ibm.com&gt; - 0.9.6-3" date="1689595200">- Set license to 'BSD and TCGL' from previous 'BSD' (BZ2219548)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.6-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.6-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.6-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.6-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.9.6-8" date="1722945600">- Disable TPM 1.2 support, as it is not supported by RHEL.</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.9.6-9" date="1726056000">- Backport "tpm2: Return TPM_RC_VALUE upon decryption failure"
  Resolves: RHEL-52968</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.6-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.9.6-11" date="1750075200">- Fix CVE-2025-49133
  Resolves: RHEL-96247</changelog>
</package>
<package pkgid="3a3833c0139d74fa35cc16eebedb9c867634d1cf17bfd1cdeaa81c900e22238f" name="libtpms-devel" arch="x86_64">
  <version epoch="0" ver="0.9.6" rel="11.el10_0"/>
  <changelog author="Stefan Berger &lt;stefanb@linux.ibm.com&gt; - 0.9.6-3" date="1689595200">- Set license to 'BSD and TCGL' from previous 'BSD' (BZ2219548)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.6-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.6-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.6-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.6-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.9.6-8" date="1722945600">- Disable TPM 1.2 support, as it is not supported by RHEL.</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.9.6-9" date="1726056000">- Backport "tpm2: Return TPM_RC_VALUE upon decryption failure"
  Resolves: RHEL-52968</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.6-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.9.6-11" date="1750075200">- Fix CVE-2025-49133
  Resolves: RHEL-96247</changelog>
</package>
<package pkgid="59f348e329bf7a6949ecdd856141a7e577fc7302c9cfc4af58794918da5c6d67" name="libtracecmd" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="2.el10"/>
  <changelog author="Zamir SUN &lt;sztsian@gmail.com&gt; - 1.3.1-2" date="1685966400">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zamir SUN &lt;sztsian@gmail.com&gt; - 1.5.1-1" date="1706011200">- Update to 1.5.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.1-2" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.5.1-3" date="1717416000">- Drop useless mlocate dependency (RHEL-39378)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.5.2-1" date="1732795200">- Rebase to 1.5.2 and backport further SAST patches (RHEL-40112)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.5.2-2" date="1745496000">- Fix trace messages (RHEL-80321)</changelog>
</package>
<package pkgid="a0c5f0f07f31d45b8c92ab9e68a48dd6a3812e55eb3bdd30eb5cd9a511ad7104" name="libtracecmd-devel" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="2.el10"/>
  <changelog author="Zamir SUN &lt;sztsian@gmail.com&gt; - 1.3.1-2" date="1685966400">- SPDX migration</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zamir SUN &lt;sztsian@gmail.com&gt; - 1.5.1-1" date="1706011200">- Update to 1.5.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.1-2" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.5.1-3" date="1717416000">- Drop useless mlocate dependency (RHEL-39378)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.5.2-1" date="1732795200">- Rebase to 1.5.2 and backport further SAST patches (RHEL-40112)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.5.2-2" date="1745496000">- Fix trace messages (RHEL-80321)</changelog>
</package>
<package pkgid="d7137f5a249791aa404fcc8e599c600ca84af906ac9f1faaf58267ba6459509b" name="libtraceevent" arch="x86_64">
  <version epoch="0" ver="1.8.4" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zamir SUN &lt;sztsian@gmail.com&gt; - 1.8.2-1" date="1706011200">- Update to 1.8.2 (#2213358)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.2-2" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.2-3" date="1718712000">- Use the distribution building flags (RHEL-33502)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.2-5" date="1720612800">- Fix SAST vulnerabilities (RHEL-40624)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.2-5" date="1728561600">- Fix double free in event_read_print_args (RHEL-61627)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.4-1" date="1729771200">- Update to 1.8.4 (RHEL-61627)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.4-2" date="1729771201">- Use EXTRA_CFLAGS to fix annocheck (RHEL-33502)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.4-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ce3f1765f8c098cdf001adaf278e710ef371b68243616e0089a1a573fbac7919" name="libtraceevent-devel" arch="x86_64">
  <version epoch="0" ver="1.8.4" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zamir SUN &lt;sztsian@gmail.com&gt; - 1.8.2-1" date="1706011200">- Update to 1.8.2 (#2213358)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.2-2" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.2-3" date="1718712000">- Use the distribution building flags (RHEL-33502)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.2-5" date="1720612800">- Fix SAST vulnerabilities (RHEL-40624)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.2-5" date="1728561600">- Fix double free in event_read_print_args (RHEL-61627)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.4-1" date="1729771200">- Update to 1.8.4 (RHEL-61627)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.4-2" date="1729771201">- Use EXTRA_CFLAGS to fix annocheck (RHEL-33502)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.4-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="61df66f9a55209915837b8de229b8da587f64da6cc0cae110f068b695648f833" name="libtracefs" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zamir SUN &lt;sztsian@gmail.com&gt; - 1.8.0-1" date="1706011200">- Update to 1.8.0 (RHBZ#2213357)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-2" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.0-4" date="1720526400">- Build with LTO (RHEL-46715)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.0-5" date="1720612800">- Fix SAST vulnerabilities (RHEL-40413)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Glozar &lt;tglozar@redhat.com&gt; - 1.8.0-7" date="1748433600">- Fix read file failure code checking
  Resolves: RHEL-93863</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.2-1" date="1750248000">- Rebase to version 1.8.2 (RHEL-94793)</changelog>
</package>
<package pkgid="014fc0c8efeb01b8bb0346447fcce0ca9353fdaa0edda193f60cd87c69354533" name="libtracefs-devel" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Zamir SUN &lt;sztsian@gmail.com&gt; - 1.8.0-1" date="1706011200">- Update to 1.8.0 (RHBZ#2213357)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-2" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.0-4" date="1720526400">- Build with LTO (RHEL-46715)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.0-5" date="1720612800">- Fix SAST vulnerabilities (RHEL-40413)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.8.0-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Glozar &lt;tglozar@redhat.com&gt; - 1.8.0-7" date="1748433600">- Fix read file failure code checking
  Resolves: RHEL-93863</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 1.8.2-1" date="1750248000">- Rebase to version 1.8.2 (RHEL-94793)</changelog>
</package>
<package pkgid="b66d55e0d9f0fbf3ba6c3951da08d3661a167dd281a35b60a99bee52330cb0be" name="libtracker-sparql" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="4.el10"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.6~beta-1" date="1691755200">- Update to 3.6.beta</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.6~rc-1" date="1694001600">- Update to 3.6.rc</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.6.0-1" date="1695124800">- Update to 3.6.0</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 3.6.0-2" date="1704715200">- Backport upstream patch to fix C compatibility issue in Meson probe</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.7~alpha-1" date="1705665600">- Update to 3.7.alpha</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7~alpha-2" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.7.3-1" date="1714737600">- Update to 3.7.3 and sync with Fedora</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.7.3-2" date="1718107200">- Disable stemmer support as libstemmer is being removed from RHEL 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.7.3-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 3.7.3-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="06b9e24d9f7f29e894737269f9ed97bdc10846e369a9d3dca1073b5fcd8ff9ba" name="libtree-sitter" arch="x86_64">
  <version epoch="0" ver="0.23.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.7-2" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.20.8-1" date="1680609600">- Update to version 0.20.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.8-2" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.20.9-1" date="1706270400">- Update to version 0.20.9
  https://github.com/tree-sitter/tree-sitter/releases/tag/v0.20.9</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20.9-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 0.23.0-1" date="1727179200">- Update to version 0.23.0 (RHEL-56996)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.23.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 0.23.0-3" date="1732017600">- Bump release (RHEL-66937)</changelog>
</package>
<package pkgid="3c656f714ca88267a6e278e6b03673089b283a87cb0ad8cfb640613090fcf754" name="libtree-sitter-devel" arch="x86_64">
  <version epoch="0" ver="0.23.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.7-2" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.20.8-1" date="1680609600">- Update to version 0.20.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.8-2" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 0.20.9-1" date="1706270400">- Update to version 0.20.9
  https://github.com/tree-sitter/tree-sitter/releases/tag/v0.20.9</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.20.9-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 0.23.0-1" date="1727179200">- Update to version 0.23.0 (RHEL-56996)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.23.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 0.23.0-3" date="1732017600">- Bump release (RHEL-66937)</changelog>
</package>
<package pkgid="a561f95441d366617bf65a4dad8e5037bc4ba3b077ed68526c6acb3a65ec378c" name="libtsan" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="78ef0b7ee2bc6160e1c7f40190e9c6005b39620fd9aeae1ee772e9684432ebda" name="libtsan-static" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="ab39abcb5c2de3877ce3b168c825db356fae502d476fb23a92bee7992c506588" name="libubsan" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="a88a91cce5beb8935af4d50588f257193343b6b1b3d26404c1e9bfbaae3c13b3" name="libubsan-static" arch="x86_64">
  <version epoch="0" ver="14.3.1" rel="4.4.el10"/>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2" date="1750334400">- update from releases/gcc-14 branch (RHEL-83953)
  - GCC 14.3 release
  - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
	c++/120125, c++/120161, d/114434, d/115249, d/116373,
	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
	d/119112, d/119139, d/119817, d/119826, debug/101533,
	driver/117739, driver/119727, fortran/59252, fortran/81978,
	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
	fortran/106948, fortran/108434, fortran/108454,
	fortran/109066, fortran/110993, fortran/116706,
	fortran/117434, fortran/118080, fortran/118640,
	fortran/118683, fortran/118750, fortran/119054,
	fortran/119380, fortran/119656, fortran/119986,
	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
	libfortran/120196, libgcc/101075, libgcc/119151,
	libgcc/119796, libstdc++/21334, libstdc++/90389,
	libstdc++/99832, libstdc++/100249, libstdc++/101527,
	libstdc++/101587, libstdc++/104395, libstdc++/105258,
	libstdc++/105609, libstdc++/106612, libstdc++/108487,
	libstdc++/108760, libstdc++/108846, libstdc++/110498,
	libstdc++/112490, libstdc++/112803, libstdc++/114758,
	libstdc++/114945, libstdc++/115046, libstdc++/115285,
	libstdc++/115939, libstdc++/116212, libstdc++/116440,
	libstdc++/116471, libstdc++/117121, libstdc++/117921,
	libstdc++/117983, libstdc++/118083, libstdc++/118158,
	libstdc++/118160, libstdc++/118185, libstdc++/118413,
	libstdc++/118699, libstdc++/118811, libstdc++/119121,
	libstdc++/119135, libstdc++/119429, libstdc++/119469,
	libstdc++/119593, libstdc++/119671, libstdc++/120198,
	libstdc++/120548, lto/91299, lto/113207, lto/114501,
	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
	middle-end/111285, middle-end/113546, middle-end/114877,
	middle-end/115871, middle-end/115913, middle-end/117498,
	middle-end/117811, middle-end/118140, middle-end/118411,
	middle-end/118819, middle-end/118950, middle-end/119119,
	middle-end/119204, middle-end/119219, middle-end/119706,
	middle-end/119808, middle-end/120547, modula2/115032,
	modula2/115112, modula2/118703, modula2/118761,
	preprocessor/108900, preprocessor/116047, preprocessor/120061,
	rtl-optimization/115568, rtl-optimization/116564,
	rtl-optimization/117186, rtl-optimization/117239,
	rtl-optimization/117506, rtl-optimization/118320,
	rtl-optimization/118638, rtl-optimization/118662,
	rtl-optimization/118739, rtl-optimization/119071,
	rtl-optimization/119291, rtl-optimization/119689,
	rtl-optimization/119785, target/86772, target/106544,
	target/110901, target/113257, target/115258, target/115485,
	target/116036, target/116086, target/116111, target/116149,
	target/116240, target/116256, target/116305, target/116308,
	target/116550, target/116591, target/116592, target/116593,
	target/116693, target/116720, target/116809, target/116827,
	target/116927, target/117286, target/117383, target/117483,
	target/117544, target/117682, target/117878, target/118067,
	target/118137, target/118154, target/118182, target/118184,
	target/118329, target/118357, target/118501, target/118531,
	target/118561, target/118601, target/118623, target/118685,
	target/118776, target/118813, target/118815, target/118825,
	target/118835, target/118843, target/118844, target/118892,
	target/118942, target/119084, target/119133, target/119172,
	target/119235, target/119327, target/119340, target/119383,
	target/119386, target/119408, target/119450, target/119533,
	target/119547, target/119549, target/119572, target/119610,
	target/119784, target/119834, target/120441, target/120480,
	testsuite/52641, testsuite/116448, testsuite/118127,
	testsuite/118597, tree-optimization/117358,
	tree-optimization/120638 tree-optimization/87984,
	tree-optimization/98845, tree-optimization/111873,
	tree-optimization/112859, tree-optimization/113197,
	tree-optimization/114052, tree-optimization/115347,
	tree-optimization/115494, tree-optimization/116098,
	tree-optimization/116125, tree-optimization/116412,
	tree-optimization/116749, tree-optimization/116906,
	tree-optimization/116922, tree-optimization/117113,
	tree-optimization/117119, tree-optimization/117243,
	tree-optimization/117424, tree-optimization/117919,
	tree-optimization/117979, tree-optimization/118476,
	tree-optimization/118522, tree-optimization/118605,
	tree-optimization/118653, tree-optimization/118689,
	tree-optimization/118717, tree-optimization/118915,
	tree-optimization/118922, tree-optimization/118924,
	tree-optimization/118953, tree-optimization/118976,
	tree-optimization/119057, tree-optimization/119096,
	tree-optimization/119145, tree-optimization/119351,
	tree-optimization/119399, tree-optimization/119417,
	tree-optimization/119534, tree-optimization/119706,
	tree-optimization/119707, tree-optimization/119722,
	tree-optimization/119778, tree-optimization/120048,
	tree-optimization/120156</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.1" date="1750680000">- Update to latest pretty printers from GTS (RHEL-81976)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-2.2" date="1758542400">- Add branch, conditions, and calls to gcov function summaries (RHEL-105464)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.3.1-2.3" date="1760616000">- add cross compilers for aarch64, ppc64le and s390x for non-production uses
  (RHEL-114519)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-2.4" date="1761134400">- add sysroot packages for use by non-production cross compilers (RHEL-118680)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 14.3.1-4" date="1761652800">- update from releases/gcc-14 branch
  - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
	fortran/120784, fortran/121145, fortran/121263, go/104290,
	libstdc++/110853, libstdc++/117276, libstdc++/120698,
	libstdc++/121097, libstdc++/121374, libstdc++/121496,
	libstdc++/121745, libstdc++/121827, libstdc++/122168,
	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
	rtl-optimization/121253, target/49857, target/81540, target/118280,
	target/120442, target/120476, target/120691, target/121118,
	target/121208, target/121294, target/121414, target/121449,
	target/121542, target/121599, target/121608, target/121749,
	target/122177, target/122187, target/122210, target/122220,
	target/122222, testsuite/118567, tree-optimization/117423,
	tree-optimization/119085, tree-optimization/120357,
	tree-optimization/120358, tree-optimization/120654,
	tree-optimization/120817, tree-optimization/120944,
	tree-optimization/121059, tree-optimization/121256,
	tree-optimization/121370, tree-optimization/121772,
	tree-optimization/121870, tree-optimization/122104</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.1" date="1765800000">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libstdc++fs.a and libstdc++exp.a in sysroot packages
  - add libsanitizer sysroot packages
  - save testsuite .sum files in build logs
  - add packages with files from build tree used in testsuite
  - escape \r in dg-regexp test names to avoid truncation in build-tree testing
  - fix iconv linking for installed testing
  - enable compat testing for installed testing
  - distinguish canonical and noncanonical target for installed testing
  - add plugin headers packages for cross compilers
  - install text-art/*.h plugin headers
  - support plugin tests for installed testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.2" date="1767700800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable stack-protector tests in cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.3" date="1769428800">- fixes for testing non-production cross compilers (RHEL-114521)
  - enable guality tests in cross testing
  - enable simulate-thread tests in cross testing
  - enable gcov tests in cross testing
  - enable some miscellaneous tests in cross testing
  - fix some tree-prof tests for cross testing</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 14.3.1-4.4" date="1771329600">- fixes for testing non-production cross compilers (RHEL-114521)
  - include libsanitizer.spec and static sanitizer libraries in packages
  - enable tests involving target environment variables in cross testing
  - disable color for more sanitizer tests</changelog>
</package>
<package pkgid="322725191f39282032de59f7c64b32eb7f56d65ec7d0b4953bce6c2497e64739" name="libudisks2" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="2.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-1.gitdb54112e" date="1721908800">- Rebase to git snapshot as of 2024-07-25</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-2.gitdb54112e" date="1722427200">- Fix Requires: for modules
- Fix gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10.90-3.gitdb54112e" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-4" date="1730808000">- Rebase to upstream 2.10.90 (pre-)release
- lvm2: Try opening for unused device detection harder (RHEL-39935)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-5" date="1737720000">- mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-6" date="1756814400">- udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.11.0-1" date="1762430400">- Version 2.11.0 (RHEL-114981)
- tests: Rework nvme revision check (RHEL-90572)
- tests: Adapt for missing fstab and crypttab (RHEL-78987)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.11.0-2" date="1772193600">- Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148566)
- Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148590)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.11.0-2.1" date="1781870400">- Rework fstab mount authorization for as-user (CVE-2026-7867) (RHEL-173437)</changelog>
</package>
<package pkgid="0877bd6c810a9a341bb9af7317c535a54b28f7a62e665206708781b0752a6f15" name="libudisks2" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="2.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-1.gitdb54112e" date="1721908800">- Rebase to git snapshot as of 2024-07-25</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-2.gitdb54112e" date="1722427200">- Fix Requires: for modules
- Fix gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10.90-3.gitdb54112e" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-4" date="1730808000">- Rebase to upstream 2.10.90 (pre-)release
- lvm2: Try opening for unused device detection harder (RHEL-39935)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-5" date="1737720000">- mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-6" date="1756814400">- udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.11.0-1" date="1762430400">- Version 2.11.0 (RHEL-114981)
- tests: Rework nvme revision check (RHEL-90572)
- tests: Adapt for missing fstab and crypttab (RHEL-78987)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.11.0-2" date="1772193600">- Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148566)
- Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148590)</changelog>
</package>
<package pkgid="e3b7d767e304bf6b166ac45d59b7636d85acae7f35f826cdf549c0478474e7c6" name="libudisks2-devel" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="2.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-1.gitdb54112e" date="1721908800">- Rebase to git snapshot as of 2024-07-25</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-2.gitdb54112e" date="1722427200">- Fix Requires: for modules
- Fix gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10.90-3.gitdb54112e" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-4" date="1730808000">- Rebase to upstream 2.10.90 (pre-)release
- lvm2: Try opening for unused device detection harder (RHEL-39935)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-5" date="1737720000">- mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-6" date="1756814400">- udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.11.0-1" date="1762430400">- Version 2.11.0 (RHEL-114981)
- tests: Rework nvme revision check (RHEL-90572)
- tests: Adapt for missing fstab and crypttab (RHEL-78987)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.11.0-2" date="1772193600">- Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148566)
- Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148590)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.11.0-2.1" date="1781870400">- Rework fstab mount authorization for as-user (CVE-2026-7867) (RHEL-173437)</changelog>
</package>
<package pkgid="41bd7afce14bf8b2087d4bc082b8415c23391b7175f1182852d5861598b6e5f9" name="libudisks2-devel" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="2.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-1.gitdb54112e" date="1721908800">- Rebase to git snapshot as of 2024-07-25</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-2.gitdb54112e" date="1722427200">- Fix Requires: for modules
- Fix gating tests</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.10.90-3.gitdb54112e" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-4" date="1730808000">- Rebase to upstream 2.10.90 (pre-)release
- lvm2: Try opening for unused device detection harder (RHEL-39935)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-5" date="1737720000">- mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.10.90-6" date="1756814400">- udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109406)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.11.0-1" date="1762430400">- Version 2.11.0 (RHEL-114981)
- tests: Rework nvme revision check (RHEL-90572)
- tests: Adapt for missing fstab and crypttab (RHEL-78987)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.11.0-2" date="1772193600">- Add missing polkit check for RestoreEncryptedHeader() (CVE-2026-26103) (RHEL-148566)
- Add missing polkit check for HeaderBackup() (CVE-2026-26104) (RHEL-148590)</changelog>
</package>
<package pkgid="77f05602cf5482434c6f90c9365f24be4a03073086762db3c093bb72729d4aa2" name="libunistring" arch="x86_64">
  <version epoch="0" ver="1.1" rel="10.el10"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 1.1-1" date="1670500800">- Update to upstream 1.1 release</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.1-2" date="1670500801">- Specify the soname explicitly</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade@fedoraproject.org&gt; - 1.1-5" date="1692619200">- Migrate to SPDX license expression</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pooja Yadav &lt;poyadav@redhat.com&gt; - 1.1-8" date="1714478400">- adding gating.yaml configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1-10" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="78ea0ff7d22a7ff6c9525304f80da88c1a1edcf404f62c466fe2bd71066291e2" name="libunistring-devel" arch="x86_64">
  <version epoch="0" ver="1.1" rel="10.el10"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 1.1-1" date="1670500800">- Update to upstream 1.1 release</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.1-2" date="1670500801">- Specify the soname explicitly</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade@fedoraproject.org&gt; - 1.1-5" date="1692619200">- Migrate to SPDX license expression</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pooja Yadav &lt;poyadav@redhat.com&gt; - 1.1-8" date="1714478400">- adding gating.yaml configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1-10" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="532e52467bd03ae2c5b06352a85576acc20269651d08e8e7a2a402e53231056b" name="liburing" arch="x86_64">
  <version epoch="0" ver="2.12" rel="1.el10"/>
  <changelog author="Stefan Hajnoczi &lt;stefanha@redhat.com&gt; - 2.5-1" date="1700740800">- Update to liburing 2.5.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 2.12-1" date="1756296000">- Update liburing to enable newest kernel features.
- Resolves: RHEL-111527</changelog>
</package>
<package pkgid="c2c1c9d5418f91e59cb0bd06526392fcaef76c49870e6cfe3564b29ff8824216" name="liburing-devel" arch="x86_64">
  <version epoch="0" ver="2.12" rel="1.el10"/>
  <changelog author="Stefan Hajnoczi &lt;stefanha@redhat.com&gt; - 2.5-1" date="1700740800">- Update to liburing 2.5.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.5-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 2.12-1" date="1756296000">- Update liburing to enable newest kernel features.
- Resolves: RHEL-111527</changelog>
</package>
<package pkgid="11369d8b10ba5ed8e1adff8622eccd6b8c721a4c637bdebe3684e508ccf45612" name="libusb1" arch="x86_64">
  <version epoch="0" ver="1.0.29" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.26-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.26-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.27-1" date="1714996800">- RHEL-35520 Update to release 1.0.27</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.27-2" date="1715342400">- gating: Change the gating settings for RHEL-10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.27-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.27-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.28-1" date="1744804800">- Update to the upstream version 1.0.28
- Update to the upstream version 1.0.28
- Fix automake-1.17 issue since the release was based on automake-1.17</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.29-1" date="1768824000">- Update to 1.0.29 and migrate to tmt test</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.0.29-2" date="1768910400">- reworking the tmt/fmf enablement to the form that Display systems QE use</changelog>
</package>
<package pkgid="f06eab0a6b2adb6facae7c4153067862d6dea49f0e6e25a0817ecef394eb5a14" name="libusb1" arch="x86_64">
  <version epoch="0" ver="1.0.30" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.27-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.27-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.28-1" date="1744804800">- Update to the upstream version 1.0.28
- Update to the upstream version 1.0.28
- Fix automake-1.17 issue since the release was based on automake-1.17</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.29-1" date="1768824000">- Update to 1.0.29 and migrate to tmt test</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.0.29-2" date="1768910400">- reworking the tmt/fmf enablement to the form that Display systems QE use</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.30-1" date="1781092800">- Update to release 1.0.30</changelog>
</package>
<package pkgid="a2e09d8d614016abc1442a6a9a57f7d846ca7ffaa6c4b691c77edb6bb2ee8189" name="libusb1-devel" arch="x86_64">
  <version epoch="0" ver="1.0.29" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.26-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.26-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.27-1" date="1714996800">- RHEL-35520 Update to release 1.0.27</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.27-2" date="1715342400">- gating: Change the gating settings for RHEL-10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.27-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.27-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.28-1" date="1744804800">- Update to the upstream version 1.0.28
- Update to the upstream version 1.0.28
- Fix automake-1.17 issue since the release was based on automake-1.17</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.29-1" date="1768824000">- Update to 1.0.29 and migrate to tmt test</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.0.29-2" date="1768910400">- reworking the tmt/fmf enablement to the form that Display systems QE use</changelog>
</package>
<package pkgid="edf0ec0127f1b844bfede1b4c5d722500b3b0495fc28a8a997ffd77e326da8b7" name="libusb1-devel" arch="x86_64">
  <version epoch="0" ver="1.0.30" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.27-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.27-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.28-1" date="1744804800">- Update to the upstream version 1.0.28
- Update to the upstream version 1.0.28
- Fix automake-1.17 issue since the release was based on automake-1.17</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.29-1" date="1768824000">- Update to 1.0.29 and migrate to tmt test</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.0.29-2" date="1768910400">- reworking the tmt/fmf enablement to the form that Display systems QE use</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.30-1" date="1781092800">- Update to release 1.0.30</changelog>
</package>
<package pkgid="3efad25bd6ede06521f5f5a9182db814e1612287681d8babc40ebc2283083fff" name="libusb1-devel-doc" arch="noarch">
  <version epoch="0" ver="1.0.29" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.26-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.26-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.27-1" date="1714996800">- RHEL-35520 Update to release 1.0.27</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.27-2" date="1715342400">- gating: Change the gating settings for RHEL-10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.27-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.27-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.28-1" date="1744804800">- Update to the upstream version 1.0.28
- Update to the upstream version 1.0.28
- Fix automake-1.17 issue since the release was based on automake-1.17</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.29-1" date="1768824000">- Update to 1.0.29 and migrate to tmt test</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.0.29-2" date="1768910400">- reworking the tmt/fmf enablement to the form that Display systems QE use</changelog>
</package>
<package pkgid="12ab95bbe4e57b7becac219b79ee84e869408477718e4b976f7c0aa9cbb9cbe0" name="libusb1-devel-doc" arch="noarch">
  <version epoch="0" ver="1.0.30" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.27-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.27-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.28-1" date="1744804800">- Update to the upstream version 1.0.28
- Update to the upstream version 1.0.28
- Fix automake-1.17 issue since the release was based on automake-1.17</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.29-1" date="1768824000">- Update to 1.0.29 and migrate to tmt test</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.0.29-2" date="1768910400">- reworking the tmt/fmf enablement to the form that Display systems QE use</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.30-1" date="1781092800">- Update to release 1.0.30</changelog>
</package>
<package pkgid="d0c17074e663083d2e1b9161cefa4e1f744418c5e207c2f785bcd225c1e5563a" name="libusb1-tests-examples" arch="x86_64">
  <version epoch="0" ver="1.0.29" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.26-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.26-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.27-1" date="1714996800">- RHEL-35520 Update to release 1.0.27</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.27-2" date="1715342400">- gating: Change the gating settings for RHEL-10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.27-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.27-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.28-1" date="1744804800">- Update to the upstream version 1.0.28
- Update to the upstream version 1.0.28
- Fix automake-1.17 issue since the release was based on automake-1.17</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.29-1" date="1768824000">- Update to 1.0.29 and migrate to tmt test</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.0.29-2" date="1768910400">- reworking the tmt/fmf enablement to the form that Display systems QE use</changelog>
</package>
<package pkgid="d7b3f86e62ae36aff71764d06ad2ef28e1c46ea91a2c1a1a7e34a27c53e8cdcb" name="libusb1-tests-examples" arch="x86_64">
  <version epoch="0" ver="1.0.30" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.27-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.27-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.28-1" date="1744804800">- Update to the upstream version 1.0.28
- Update to the upstream version 1.0.28
- Fix automake-1.17 issue since the release was based on automake-1.17</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.29-1" date="1768824000">- Update to 1.0.29 and migrate to tmt test</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.0.29-2" date="1768910400">- reworking the tmt/fmf enablement to the form that Display systems QE use</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.30-1" date="1781092800">- Update to release 1.0.30</changelog>
</package>
<package pkgid="6be63d7e889309c01ececc28479c1efe81da390cc70568461f9816d0224bf9e7" name="libuser" arch="x86_64">
  <version epoch="0" ver="0.64" rel="11.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 0.64-3" date="1686744000">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.64-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.64-5" date="1692705600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.64-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.64-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.64-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.64-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.64-10" date="1730894400">- rebuild, fix FTBFS (#RHEL-65455)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.64-11" date="1743595200">- create temporary edit files at symlink target location (RHEL-85247)</changelog>
</package>
<package pkgid="98d5e69a1a86b6cd948f1408d4bf90d8c26771a44868daaa092bce03a42a367a" name="libuser-devel" arch="x86_64">
  <version epoch="0" ver="0.64" rel="11.el10"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 0.64-3" date="1686744000">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.64-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.64-5" date="1692705600">- migrated to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.64-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.64-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.64-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.64-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.64-10" date="1730894400">- rebuild, fix FTBFS (#RHEL-65455)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.64-11" date="1743595200">- create temporary edit files at symlink target location (RHEL-85247)</changelog>
</package>
<package pkgid="ab9d3ed14877accc8e9f6f693e14890c9834a24fde28da8f16da956d11a037f8" name="libutempter" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="15.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.1-9" date="1678622400">- Change the License tag to the SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.1-11" date="1698753600">- Add additional SPDX licenses found by scancode tool</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-12" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-13" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="27143412b26915594e1782444a2ffbff627929812faf712a9edc1093850cef98" name="libutempter-devel" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="15.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.1-9" date="1678622400">- Change the License tag to the SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-10" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.1-11" date="1698753600">- Add additional SPDX licenses found by scancode tool</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-12" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-13" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-14" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.2.1-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dab1cb9f6e8466e8ee0ce0f4b04d8e19b2d25cd308d13125598b4c267f43be02" name="libuuid" arch="x86_64">
  <version epoch="0" ver="2.40.2" rel="18.el10"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-9" date="1736856000">- more(1): make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-10" date="1739448000">- blkid: allow up to 64k erofs block sizes</changelog>
  <changelog author="Frank Liang &lt;xiliang@redhat.com&gt; - 2.40.2-11" date="1745064000">- agetty: fix stdin conversion to tty name</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-12" date="1753790400">- coresched: backport new tool to RHEL-10</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-13" date="1753876800">- lscpu: update table with ARM IDs</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-14" date="1759147200">- lscpu: Add NVIDIA Olympus arm64 core
- libfdisk: improve collision reporting
- libfdisk: (dos) ignore incomplete EBR for non-wholedisk
- wall: always use utmp as fallback</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-15" date="1761220800">- mount: improve --all documentation
- libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
- libblkid: use snprintf() instead of sprintf()</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-16" date="1763553600">- libfdisk: fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-17" date="1765800000">- Fix heap buffer overread in setpwnam() [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-18" date="1768478400">- use sysuser setting for uuidd</changelog>
</package>
<package pkgid="6784fb79e1b5a2a4f084ab9a2d50853b94ed20d7175cc661067cc671db02f418" name="libuuid-devel" arch="x86_64">
  <version epoch="0" ver="2.40.2" rel="18.el10"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-9" date="1736856000">- more(1): make sure we have data on stderr</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-10" date="1739448000">- blkid: allow up to 64k erofs block sizes</changelog>
  <changelog author="Frank Liang &lt;xiliang@redhat.com&gt; - 2.40.2-11" date="1745064000">- agetty: fix stdin conversion to tty name</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-12" date="1753790400">- coresched: backport new tool to RHEL-10</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-13" date="1753876800">- lscpu: update table with ARM IDs</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-14" date="1759147200">- lscpu: Add NVIDIA Olympus arm64 core
- libfdisk: improve collision reporting
- libfdisk: (dos) ignore incomplete EBR for non-wholedisk
- wall: always use utmp as fallback</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-15" date="1761220800">- mount: improve --all documentation
- libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
- libblkid: use snprintf() instead of sprintf()</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-16" date="1763553600">- libfdisk: fix off-by-one in maximum last sector calculation</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-17" date="1765800000">- Fix heap buffer overread in setpwnam() [CVE-2025-14104]</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; - 2.40.2-18" date="1768478400">- use sysuser setting for uuidd</changelog>
</package>
<package pkgid="4ed8f03f7862c35832e5e0ff298e8491cef11e326b280b8d37a5b895fd298b12" name="libuv" arch="x86_64">
  <version epoch="1" ver="1.51.0" rel="1.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.47.0-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.47.0-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1:1.48.0-1" date="1707307200">- Update to libuv 1.48.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.48.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Dita Stehlikova &lt;dstehlik@redhat.com&gt; - 1:1.48.0-3" date="1724760000">- Update gating.yaml - add RHEL gating configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.48.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1:1.49.2-1" date="1738065600">- Update to 1.49.2</changelog>
  <changelog author="Dita Stehlikova &lt;dstehlik@redhat.com&gt; - 1:1.49.2-2" date="1738065601">- add test plan for gating</changelog>
  <changelog author="tjuhasz &lt;tjuhasz@redhat.com&gt; - 1:1.50.0-1" date="1751889600">- Update to version 1.50.0</changelog>
  <changelog author="tjuhasz &lt;tjuhasz@redhat.com&gt; - 1:1.51.0-1" date="1752667200">- Update to version 1.51.0</changelog>
</package>
<package pkgid="eb32340802db7b49802f20584301f5d21a1d982cc5e5e0d8b1da9f5067aa8026" name="libuv" arch="x86_64">
  <version epoch="1" ver="1.52.1" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.48.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Dita Stehlikova &lt;dstehlik@redhat.com&gt; - 1:1.48.0-3" date="1724760000">- Update gating.yaml - add RHEL gating configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.48.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1:1.49.2-1" date="1738065600">- Update to 1.49.2</changelog>
  <changelog author="Dita Stehlikova &lt;dstehlik@redhat.com&gt; - 1:1.49.2-2" date="1738065601">- add test plan for gating</changelog>
  <changelog author="tjuhasz &lt;tjuhasz@redhat.com&gt; - 1:1.50.0-1" date="1751889600">- Update to version 1.50.0</changelog>
  <changelog author="tjuhasz &lt;tjuhasz@redhat.com&gt; - 1:1.51.0-1" date="1752667200">- Update to version 1.51.0</changelog>
  <changelog author="Andrei Radchenko &lt;aradchen@redhat.com&gt; - 1:1.52.1-1" date="1779364800">- Update to version 1.52.1</changelog>
</package>
<package pkgid="5a81cf66a0e68ee624b919a87010190c63ef6385bb1193c9010ecd1ecd3dabe0" name="libuv-devel" arch="x86_64">
  <version epoch="1" ver="1.51.0" rel="1.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.47.0-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.47.0-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1:1.48.0-1" date="1707307200">- Update to libuv 1.48.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.48.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Dita Stehlikova &lt;dstehlik@redhat.com&gt; - 1:1.48.0-3" date="1724760000">- Update gating.yaml - add RHEL gating configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.48.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1:1.49.2-1" date="1738065600">- Update to 1.49.2</changelog>
  <changelog author="Dita Stehlikova &lt;dstehlik@redhat.com&gt; - 1:1.49.2-2" date="1738065601">- add test plan for gating</changelog>
  <changelog author="tjuhasz &lt;tjuhasz@redhat.com&gt; - 1:1.50.0-1" date="1751889600">- Update to version 1.50.0</changelog>
  <changelog author="tjuhasz &lt;tjuhasz@redhat.com&gt; - 1:1.51.0-1" date="1752667200">- Update to version 1.51.0</changelog>
</package>
<package pkgid="6d4aa26372dcb2889ea94deb266f84872c819a8093328d39b7a6ae0b973f30a3" name="libuv-devel" arch="x86_64">
  <version epoch="1" ver="1.52.1" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.48.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Dita Stehlikova &lt;dstehlik@redhat.com&gt; - 1:1.48.0-3" date="1724760000">- Update gating.yaml - add RHEL gating configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.48.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1:1.49.2-1" date="1738065600">- Update to 1.49.2</changelog>
  <changelog author="Dita Stehlikova &lt;dstehlik@redhat.com&gt; - 1:1.49.2-2" date="1738065601">- add test plan for gating</changelog>
  <changelog author="tjuhasz &lt;tjuhasz@redhat.com&gt; - 1:1.50.0-1" date="1751889600">- Update to version 1.50.0</changelog>
  <changelog author="tjuhasz &lt;tjuhasz@redhat.com&gt; - 1:1.51.0-1" date="1752667200">- Update to version 1.51.0</changelog>
  <changelog author="Andrei Radchenko &lt;aradchen@redhat.com&gt; - 1:1.52.1-1" date="1779364800">- Update to version 1.52.1</changelog>
</package>
<package pkgid="c87007251c77294a17dac1597671e6afa64308fa78d5e37e7268b5581508bb75" name="libuv-static" arch="x86_64">
  <version epoch="1" ver="1.51.0" rel="1.el10_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.47.0-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.47.0-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1:1.48.0-1" date="1707307200">- Update to libuv 1.48.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.48.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Dita Stehlikova &lt;dstehlik@redhat.com&gt; - 1:1.48.0-3" date="1724760000">- Update gating.yaml - add RHEL gating configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.48.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1:1.49.2-1" date="1738065600">- Update to 1.49.2</changelog>
  <changelog author="Dita Stehlikova &lt;dstehlik@redhat.com&gt; - 1:1.49.2-2" date="1738065601">- add test plan for gating</changelog>
  <changelog author="tjuhasz &lt;tjuhasz@redhat.com&gt; - 1:1.50.0-1" date="1751889600">- Update to version 1.50.0</changelog>
  <changelog author="tjuhasz &lt;tjuhasz@redhat.com&gt; - 1:1.51.0-1" date="1752667200">- Update to version 1.51.0</changelog>
</package>
<package pkgid="a0ebb5d0f752b97e94b20d5ef819ab85ba05f87583ba8da6f1f6999494b1d49f" name="libuv-static" arch="x86_64">
  <version epoch="1" ver="1.52.1" rel="1.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.48.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Dita Stehlikova &lt;dstehlik@redhat.com&gt; - 1:1.48.0-3" date="1724760000">- Update gating.yaml - add RHEL gating configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.48.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1:1.49.2-1" date="1738065600">- Update to 1.49.2</changelog>
  <changelog author="Dita Stehlikova &lt;dstehlik@redhat.com&gt; - 1:1.49.2-2" date="1738065601">- add test plan for gating</changelog>
  <changelog author="tjuhasz &lt;tjuhasz@redhat.com&gt; - 1:1.50.0-1" date="1751889600">- Update to version 1.50.0</changelog>
  <changelog author="tjuhasz &lt;tjuhasz@redhat.com&gt; - 1:1.51.0-1" date="1752667200">- Update to version 1.51.0</changelog>
  <changelog author="Andrei Radchenko &lt;aradchen@redhat.com&gt; - 1:1.52.1-1" date="1779364800">- Update to version 1.52.1</changelog>
</package>
<package pkgid="7805dcd528d9b7ce3588cf93d3637b7179932fa8e01d43c6f0af8c9b65f9d7a7" name="libv4l" arch="x86_64">
  <version epoch="0" ver="1.26.1" rel="5.el10"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.26.1-1" date="1702468800">- Update to 1.26.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26.1-2" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.26.1-5" date="1765454400">- Rebuilt for CRB inclusion
  Resolves: RHEL-135109</changelog>
</package>
<package pkgid="44e73b971b3064f9d8c431d06835c0d4de7c5287753a6ea7267ba0107656df39" name="libv4l-devel" arch="x86_64">
  <version epoch="0" ver="1.26.1" rel="5.el10"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.26.1-1" date="1702468800">- Update to 1.26.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26.1-2" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.1-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.26.1-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.26.1-5" date="1765454400">- Rebuilt for CRB inclusion
  Resolves: RHEL-135109</changelog>
</package>
<package pkgid="f67bf7e6f714e76d468bc2e92086d8f8fd7383dc2f37036e50b253d48f5fec65" name="libva" arch="x86_64">
  <version epoch="0" ver="2.22.0" rel="2.el10"/>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 2.18.0-1" date="1679400000">- Update to 2.18.0</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 2.19.0-1" date="1688472000">- Update to 2.19.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.19.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 2.20.0-1" date="1694952000">- Update to 2.20.0</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 2.20.0-2" date="1705406400">- Restore support for nvctrl</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.20.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.22.0-1" date="1719921600">- fix typo in license
- update to 2.22.0
Resolves: RHEL-45837</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.22.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e9b9bc4c4c94f0c096064f770d7f68fba411889dc30814749efaf5a460a6bc56" name="libva-devel" arch="x86_64">
  <version epoch="0" ver="2.22.0" rel="2.el10"/>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 2.18.0-1" date="1679400000">- Update to 2.18.0</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 2.19.0-1" date="1688472000">- Update to 2.19.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.19.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 2.20.0-1" date="1694952000">- Update to 2.20.0</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 2.20.0-2" date="1705406400">- Restore support for nvctrl</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.20.0-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.22.0-1" date="1719921600">- fix typo in license
- update to 2.22.0
Resolves: RHEL-45837</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.22.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="93f19e73ecf5875d18c396079faa3b8097cebe33622e199ea7bb61255633918c" name="libvala" arch="x86_64">
  <version epoch="0" ver="0.56.18" rel="1.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.56.14-2" date="1705665600">- Downgrade GCC 14 C type errors to warnings</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.56.14-3" date="1705665601">- Downgrade GCC 14 -Wint-conversion errors to warnings</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.56.14-4" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.56.15-1" date="1709553600">- Update to 0.56.15</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.56.16-1" date="1710504000">- Update to 0.56.16</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.56.17-1" date="1713528000">- Update to 0.56.17</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.56.17-2" date="1717675200">- Address rpminspect findings and also don't require Devhelp for help as it
  won't be in RHEL 10.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.56.17-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.56.17-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 0.56.18-1" date="1760961600">- Update to 0.56.18
  Resolves: RHEL-88019</changelog>
</package>
<package pkgid="30f2ec123f2db5f91a0e4a393159e1200e348ad7c5319fb00fb27b436fceac52" name="libvala-devel" arch="x86_64">
  <version epoch="0" ver="0.56.18" rel="1.el10"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.56.14-2" date="1705665600">- Downgrade GCC 14 C type errors to warnings</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.56.14-3" date="1705665601">- Downgrade GCC 14 -Wint-conversion errors to warnings</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.56.14-4" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.56.15-1" date="1709553600">- Update to 0.56.15</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.56.16-1" date="1710504000">- Update to 0.56.16</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 0.56.17-1" date="1713528000">- Update to 0.56.17</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.56.17-2" date="1717675200">- Address rpminspect findings and also don't require Devhelp for help as it
  won't be in RHEL 10.</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.56.17-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.56.17-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 0.56.18-1" date="1760961600">- Update to 0.56.18
  Resolves: RHEL-88019</changelog>
</package>
<package pkgid="26ffefa099b1d0ce1ac98cd48b1e543165aea0a1ba7d192ae3f59245abb7f461" name="libvdpau" arch="x86_64">
  <version epoch="0" ver="1.5" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt;" date="1697803200">- SPDX migration: license is already SPDX compatible</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="bbcdcadbf6f55ca5edb174a9f5a1bef40cc1b516ae6c5bf758c66ca5c2fc9c8b" name="libvdpau-devel" arch="x86_64">
  <version epoch="0" ver="1.5" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt;" date="1697803200">- SPDX migration: license is already SPDX compatible</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e01159c783f004ec859cd81f8dd3db81db4879b77833f6f1136fc9ed32388d85" name="libvdpau-docs" arch="noarch">
  <version epoch="0" ver="1.5" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt;" date="1697803200">- SPDX migration: license is already SPDX compatible</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b449750aab138fad96caf6b9dcf7e8b89e8d49871dff6259de0bf4d0ae2a5768" name="libvdpau-trace" arch="x86_64">
  <version epoch="0" ver="1.5" rel="8.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt;" date="1697803200">- SPDX migration: license is already SPDX compatible</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="187b53d0490e2a16102f2f4507f6ba29b288be74ebed33062ca96d981592fadb" name="libverto" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dc2183820f5ceb61f325a8fde731f97d1126cdf03f617c0ddf79d8f8ffc4b4b6" name="libverto-devel" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c07b6625db1e21970d8815f2fab1776b3ef3b2a1871a1fbfbf4c8e831d62180c" name="libverto-glib" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5485ab80ae74c89b2f415b70d70fd753aabb841977aaa03b088fad9ba782bc73" name="libverto-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9656149b9abc7a825057a7d1d4c977968d41bc447521a8071c3459ff09bb097f" name="libverto-libev" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f903180397ba7d49b8e019954e73d92d0db077b8dd5f36e57de0058a7a213fab" name="libverto-libev-devel" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="04b5a9f3cac5384019994b58b9d5a8a5ef3b21a32f6204c3c45eef51cd269b5d" name="libverto-libevent" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="dff0c905c10bab0c6dabde21854eba26f7fdaf39fd775cdf006e2922b1b2ce2c" name="libverto-libevent-devel" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.2-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.2-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="e383ce34e507a9b477a6379a24204f338115b2beede76f0f6def2f62e19d3986" name="libvirt" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="260cc901baa2929075be2ba938c6262d7f401ba800c41f20c0570f51d9936f86" name="libvirt" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="4b74bcc01d0bba2ca2255e771aa570d710c68c78c86cad09e1969e0e38b844a4" name="libvirt" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="d65f61df879df75d22cf09fff91d42c6cd3ac455adbc54fbe4641fb488214f11" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="0279c6e9a68e4d93cbc83386ac9da08cf45f12db9f52c4c41300829bc7bc2f7e" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="558d878a40d38e7dc2e53edf7d86a5b1fc4a6ac04f02edea25d46999a845c97f" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="f6edffe499bcc670b85cf153f21ca4f89c242625d6e18e6c403fb2348afd78a1" name="libvirt-client-qemu" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="60d392a7458495c235c15717a1d71b8fe710effc57d7d65b345623a58a9bf4fd" name="libvirt-client-qemu" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="07a19570ac9a4bce58221963b96687a77a0364fdfd97423be82f8e8858500e07" name="libvirt-client-qemu" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="c5d769ec28f2850ae5e1eeeab0e6ce07527804f15cdc565fff673ab430a86682" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="312e16d49ddb360e205f62fed42e6ddadd005e33a6ead96510852b441068fa57" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="f584c76fb306075eed8ef4b01d430dca4968c7978205d696c8467646837e6263" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="fcf9fd1fd2a4d4de8f1b11bd552a865aa1fea7d34e2ec3a30b6fd1c998025397" name="libvirt-daemon-common" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="c3be5fe676db772aa06081112749540169a2e1b9a875f1a782e349015be7d8e1" name="libvirt-daemon-common" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="a8842126787dc3c9bef2e88217ec3bc46b20ad59c402eaa4b5074364b64c5c0e" name="libvirt-daemon-common" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="ced1458498167d974ff19d42575141cfdce21787f7920766c803ba4eccc282a1" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="3b922fc494f582f00cd15ea120b7be45c8f030ec11458b58ec3451b568ec4010" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="9a9a70885265e22630a624d65831338109c139b31937c699347910c66f5af803" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="954ad73d2ebfa8984171c44855194604bc8eb39c9ddb388fb8e31e79e8967b82" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="8487cae9c6a4891caeb439645f46b2ee4a9105960dba2ac0588fdde025cbec00" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="a9a68d7a89e55e69e54222643bebf1115d95819e2c0959b71b5d651337f297d3" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="3ee17f8caf1e35e0ef7bee5cd82f71bd6d16ebcda5aaec45ea49bdc00d7aa7f1" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="d04d14ca4b74c947f08af529acce2ea0bb506c29a40a89ee8158829fa1579c74" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="101fb4d8b1db06d75ef5c723d5ab182193e214137203b3fb128754ada5e2f378" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="f840195c11507eda6197c2820c02ad0e5ddc07bb7355488b6f869cea14439e99" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="8081788be1b43d23b89b9767fb1f77cc62b1b6567429aadcc7cc3f3148bf6ec1" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="b33b9dbb327821e136e668983bfd315340d6efbf6341fb0858b2eeaed06a6c86" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="821d0ba5631d3172f8b71eebd353a4f473e0b52f86e4ba1bc582473389e761bb" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="0fc2516538e4f7b065f934e935bb1949b2c597959df4ec7e34f033274d0e0390" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="5f9f0539c6380e3ff274ede94532fa8de6fb2e1021ac9cbecbfac5cf0636ce8a" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="735f598b83a0a43eb4a1efe33e8749e6fd2c810a44be19dd61c4dc713edb0787" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="8a0785c1193084d7eec138f23b01ee323014e928144177231613d0420581d1bd" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="6dd96bb85b244fc5842dff0f1703447938577dd8ee51a57f83748381627ed400" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="3cedc632e3fd46f445f65de3adfa3d8f3a81968d54be3c279696d01af36b277e" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="69ed8546309ae79601419a1b4b897da8c862eeb67beb143a56c662e374a19d0a" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="93bd50f2d7c2cf037edf7374b21e7d211f2c9dd7148abda80832e5d6a6b42178" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="04b28c57bd8d115db3820452308049b1091237fcd7b36eaa66fa48754f3a3f5d" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="c7e58d3934c4f31eb7f4f59acfb54c87e1a361520cf0245e75b3a89b432d97c8" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="a42c74fba9ce0f8839a07d3040962285658474df5aebed077616cc2d95e4eab7" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="8c366bb01a37fc984a8240d5af41e21566c213f31ace5ce6aaf876c7626ccf1c" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="48a2fd92b6515551979b79ccbda97488a7ce06b6a23d7c88ee111db591a2ab7f" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="4e83b37713478224d1822e6d683420cd3f1299ef4652712f456e068940b96fb2" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="0588be06011fc901417cbcf723883a6577277fff86c3570bada1cdb8403966b0" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="0b5215d5893b807bd421792c3b781bd0801f2d4b1c6871bd72b460a1cf40aef9" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="57948c96dcea39c2258d87f06a0bcdd959756be7e8417b403b16486e3a172024" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="96e247e0144b924fea779fcf20dbcd8df94587e35ea1528bf8e33e1de00f5a6a" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="26408d10b5418bdff975e9a8efc163fa2f47cc7a06baa117697f42ca19d1317c" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="7c095123bd6287e577bfa3f0b1446395c15dd002ddb50490c21001bd5283451d" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="42a76cbad73050f91dce97ac64577442b282a1f2d6d207fe06efe5e6e6520ee8" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="95164b845afb5dce0c053b73b39ac4e08a35497a266d983b50ab226aa89d2af8" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="5a730eaefe9c0538bd0966010402f1f64cd85cca4f26093e177b7286bb0a20e8" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="bed93d4cddabb863f5511c97ea974e02a71d5cf5b21585770f4dd3323c8ac0a5" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="517aa9d520c10a93d31b9258bb352b9a388c0d89520827bbc95b0c8bd167b14b" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="b1a654a89f76b53ee3430f467a45726dcfc3c13b55cb03263b7b9d001532c384" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="3a6e20599896fe37e455c605e78f90355efa4efc3e220f2d261cc79e0b4a48f6" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="95be96aee3fe6a972f17f873eb41c4fa4df86ee106ae9051a85e5ad7b1d7e18a" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="73c2cdd327f514ed4fd1d2a1a2b370057342c7026e4232d4268750dbfab91e81" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="1fdbe91536dfd6021c3e90518fa9f8639a1415bed2e244df33a926db4204a23d" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="72e91bf2ffe9faaaefc9e6d91219a830054268ba5973c3def722dccdd2642bae" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="d1e89c36f5050120c89fd620191137a4ece55cdcc766fa73824f7158c70e14c0" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="13b8b6cb6975a18ae5b1795a76b7a80a820846d0a2d40b66b621ea75a26c471a" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="400d52454bb3d9d09b9bc5da234acd2353819685112d39be9f29419004e694b7" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="4ff7591c465c5e5f46d96a0ad50f78b5dfa48bb60cb6842b26a968915a5dc393" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="fc9e7ac734211a2ac3ffd52d13b5dc6ea3b820d0cfc5fa8dc1ee5767fcc6aea2" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="41b0753434f1b198384a91fbb067f41f7b68dc11dc2521ad10ba8a6611d72609" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="a56d997d0cbede674315fc06d11aebda97eea9d741f1f55bd1e94f15b46f8a47" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="c76bf5ffcb92b94e504b6893f174f3e8492f56432ecfb24bbcbc9f69a87a36f7" name="libvirt-daemon-lock" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="40fb424d5eb3a06803322a8a87680b57cf75794103eff6c3c59fde0f67f4fce5" name="libvirt-daemon-lock" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="cc80b36977043be7d9cfc12fd16e0c413385c91f6406a34a2ba1086a456e85bb" name="libvirt-daemon-lock" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="f2163dd3b2cd2863fb31a39aa5a80615dd3c4792baf05a522567ff6cdfdda009" name="libvirt-daemon-log" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="d92df3e7ee4e68b2d0f1dcb158e98107e87600f430675a886f2ec67524d8f747" name="libvirt-daemon-log" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="a0f2c86640756cab838d5113c7ebfe5b40643d1993830d8f459e14b1f51f593e" name="libvirt-daemon-log" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="8163bdeb6a09bb789f67fdd38a64f1434f865de1440732df404abbf741def607" name="libvirt-daemon-plugin-lockd" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="474d1b820612edaf99621cfdec0661d1298220f8f1e0cf0b47b9804d9b163465" name="libvirt-daemon-plugin-lockd" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="25c238e5529227b1542504220b5313b95c8e2401c8cd57b1bbb9efa8c631bf45" name="libvirt-daemon-plugin-lockd" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="bf1314f4d7769f87e16a07f0874a840b315bb0a75ec06d7a96c9be221ed6a971" name="libvirt-daemon-plugin-sanlock" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="c6027c753817b74674f77b25a776b6514819cbec692c01389e7b97c3a12b67b4" name="libvirt-daemon-plugin-sanlock" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="304bfb6cbbdd46f0db76d5e1b5b2180be87a23a5832b71a79070266fe83fabf4" name="libvirt-daemon-plugin-sanlock" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="2dba59c89a4ae8f8419286898cd25330cecbace1d6a2bb59ed9de71a343ce33b" name="libvirt-daemon-proxy" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="177dc9223ed0233187eb3853e56884cf1a41694eb25973776837f2fe542e8c6d" name="libvirt-daemon-proxy" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="dbf2a0a5559fb13b7fa7b085abf0e34be002f5dae8d79f653c936f42b4adff01" name="libvirt-daemon-proxy" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="cbb7f5cc7383e4e0a15a7c6d2bdf356b6a2b32496ab5474abe8912d991e7cf08" name="libvirt-dbus" arch="x86_64">
  <version epoch="0" ver="1.4.1" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-8" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ladar Levison &lt;ladar@lavabit.com&gt; - 1.4.1-1" date="1698667200">- Update to 1.4.1 release</changelog>
  <changelog author="Pavel Hrdina &lt;phrdina@redhat.com&gt; - 1.4.1-2" date="1699963200">- Synchronize spec file with upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.1-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.1-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="54a3a6acd06b984b17dd080b0e9429dcda40d4caca866d2a033720861a5c656f" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="41133017c21675bbb3d2871574aa2af7a30c1df2a54f0d5d258f276db5af3483" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="63871f41ac0a8a017d6e643904d131a4d5297768d951eacdc300802279576116" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="0d9a5c42fb978cc0fc97b4c907f69591fc119505c76bf8ff1768b7569df47aed" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="20db98fa516fdeadf1edba80912e015f43f54ac9e4757c4b0665603b259b6cc1" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="34d587f9b3625ecffbeb40621fc00792b0c67cbc953f4599263001df3346c4e4" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="4b9ad158f8d24c06f5c8870a9ef8798b4e9f765e5e9b97ff624838c28b026b90" name="libvirt-gconfig" arch="x86_64">
  <version epoch="0" ver="5.0.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 4.0.0-8" date="1674561600">- Fix pointer cast warning</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 5.0.0-1" date="1701345600">- Rebased to 5.0.0 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Hrdina &lt;phrdina@redhat.com&gt; - 5.0.0-6" date="1734350400">- Backport upstream spec file fixes (RHEL-71399)</changelog>
</package>
<package pkgid="8423774719d3467624f9b17ce203121703bb74b25f6113d14ba97ee8708f502e" name="libvirt-gconfig-devel" arch="x86_64">
  <version epoch="0" ver="5.0.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 4.0.0-8" date="1674561600">- Fix pointer cast warning</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 5.0.0-1" date="1701345600">- Rebased to 5.0.0 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Hrdina &lt;phrdina@redhat.com&gt; - 5.0.0-6" date="1734350400">- Backport upstream spec file fixes (RHEL-71399)</changelog>
</package>
<package pkgid="8210b54215d55db1d3024287528ab66beae1fc7d7d4d00930160061069796d50" name="libvirt-glib" arch="x86_64">
  <version epoch="0" ver="5.0.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 4.0.0-8" date="1674561600">- Fix pointer cast warning</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 5.0.0-1" date="1701345600">- Rebased to 5.0.0 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Hrdina &lt;phrdina@redhat.com&gt; - 5.0.0-6" date="1734350400">- Backport upstream spec file fixes (RHEL-71399)</changelog>
</package>
<package pkgid="dfcad5b4cc1c653b4b0b4eb273b0daf90096bd1e57549ffa10a84b12c342317d" name="libvirt-glib-devel" arch="x86_64">
  <version epoch="0" ver="5.0.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 4.0.0-8" date="1674561600">- Fix pointer cast warning</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 5.0.0-1" date="1701345600">- Rebased to 5.0.0 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Hrdina &lt;phrdina@redhat.com&gt; - 5.0.0-6" date="1734350400">- Backport upstream spec file fixes (RHEL-71399)</changelog>
</package>
<package pkgid="95c285d104d7f1f2e9da144df3445c10df06a765da9e45c797113ab5eddd931e" name="libvirt-gobject" arch="x86_64">
  <version epoch="0" ver="5.0.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 4.0.0-8" date="1674561600">- Fix pointer cast warning</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 5.0.0-1" date="1701345600">- Rebased to 5.0.0 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Hrdina &lt;phrdina@redhat.com&gt; - 5.0.0-6" date="1734350400">- Backport upstream spec file fixes (RHEL-71399)</changelog>
</package>
<package pkgid="7bcb0f029989880c3d949bbe03a66e91dc4ca909e3fb5a61f149a858d095173b" name="libvirt-gobject-devel" arch="x86_64">
  <version epoch="0" ver="5.0.0" rel="6.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 4.0.0-8" date="1674561600">- Fix pointer cast warning</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 5.0.0-1" date="1701345600">- Rebased to 5.0.0 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 5.0.0-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Pavel Hrdina &lt;phrdina@redhat.com&gt; - 5.0.0-6" date="1734350400">- Backport upstream spec file fixes (RHEL-71399)</changelog>
</package>
<package pkgid="671001327af2e72a3265a95880871bd91d763a68ebb4a6a7014712c917059c96" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="d4d203d95df06b626d07d14479eacbcf7c8836d9d3c2eda245e97feeb136644f" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="68f9526b9857cd79a12608585c5de7d51a27b443625acc4c17c040bcb4523139" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="8472f4eb71a99491f7d746d60d2dc45cd1cb8a43e494578f430e0112bf7640f3" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="31f8573e26dc6959940b3ac403c817a6fad13dc0f3ead0d2ee04b06b2a3c9601" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="ca1c562a759851150a35b83a18181c02cb0d14f4300714e382c310521fef0428" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="83d19d2dfc7dc8e8e8219b8bf3fff45755bc361b0f20edf81010aa261c03c3f4" name="libvirt-ssh-proxy" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="053b09cc788c632dfc5d7b6efd8b4905dc5629cdfa887b5b1b4d0912d9d25330" name="libvirt-ssh-proxy" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="4f4a052c98734e3b8b288e843eced176bf3bff6c124e39132c2b36336c52a528" name="libvirt-ssh-proxy" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="569e46fa13d90dc1b491636523e160f51d5a7090071a9f2e56b5db1eda2b851e" name="libvirt-wireshark" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.1.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
- esx: Debug URL just before opening with curl (RHEL-138300)
- esx: Abstract all URL-creation code into one function (RHEL-138300)
- esx: Switch to creating URLs using virURIFormat (RHEL-138300)
- esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
- esx: URI encode inventory objects twice (RHEL-140196)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
</package>
<package pkgid="db9ff4b338b21df5b551ff427c1c32bc312dabadef580fa9d966f60dbeac22dd" name="libvirt-wireshark" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.3.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
- qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
- qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
- qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
</package>
<package pkgid="65d9646ff3f185af3cb0e9b0dade5cd3369d0a73304e2418f5de32e917dcc9fd" name="libvirt-wireshark" arch="x86_64">
  <version epoch="0" ver="11.10.0" rel="12.4.el10_2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-143933)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
- qemu: Ignore cmp_legacy CPU flag (RHEL-148494)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
- qemu: Implement support for persistent reservation migration control (RHEL-135115)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-131335)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-131335)
- Introduce support for disk operation latency histogram collection (RHEL-131335)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
- util: Move openning IOMMU device to viriommufd (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
- util: Move openning VFIO device to virpci (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
- qemuxmlconftest: Refactor host device preparation (RHEL-150351)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
- qemu: Save IOMMUFD state into status XML (RHEL-150351)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
- conf: Introduce iommufd enum for domaincaps (RHEL-148135)
- qemu: Fill iommufd domain capability (RHEL-148135)
- tests: properly mock VFIO and IOMMU checks (RHEL-148135)
- iommufd: fix FD leak in case of error (RHEL-150351)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- qemu_firmware: Drop support for kernel descriptors (RHEL-82645)
- qemu_firmware: Drop 'nvram' local variable (RHEL-82645)
- qemu_firmware: Move format=raw compat exception (RHEL-82645)
- qemu_firmware: Move copying of nvram.format to loader.format (RHEL-82645)
- tests: Add firmware-manual-efi-rw-nvram (RHEL-82645)
- domain_validate: Reject NVRAM with read/write firmware (RHEL-82645)
- tests: Add firmware-auto-bios-rw (RHEL-82645)
- tests: Add firmware-manual-bios-rw (RHEL-82645)
- domain_validate: Reject read/write ROMs (RHEL-82645)
- tests: Add firmware-auto-efi-format-loader-qcow2-rom (RHEL-82645)
- domain_validate: Reject ROMs with format other than raw (RHEL-82645)
- qemu_firmware: Ignore stateless/combined when NVRAM is configured (RHEL-82645)
- qemu_firmware: Drop fallback for absent nvramTemplateFormat (RHEL-82645)
- schemas: Allow templateFormat without template path (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-format (RHEL-82645)
- tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-loader-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path (RHEL-82645)
- tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 (RHEL-82645)
- tests: Add firmware-auto-efi-format-mismatch-nvramtemplate (RHEL-82645)
- qemu_firmware: Introduce qemuFirmwareFillDomainCustom() (RHEL-82645)
- qemu_firmware: Set templateFormat for custom paths (RHEL-82645)
- qemu_firmware: Simplify handling of legacy paths (RHEL-82645)
- qemu_firmware: Refactor setting NVRAM format (RHEL-82645)
- qemu_firmware: Prefer template format to loader format (RHEL-82645)
- qemu_firmware: Retain user-specified NVRAM format (RHEL-82645)
- qemu_firmware: Take templateFormat into account when matching (RHEL-82645)
- qemu_firmware: Take NVRAM format into account when matching (RHEL-82645)
- qemu_firmware: Remove NVRAM to loader format copy hack (RHEL-82645)
- tests: Add firmware-manual-efi-sev-snp (RHEL-82645)
- tests: Add firmware-manual-efi-tdx (RHEL-82645)
- qemu_firmware: ROM firmware is always in raw format (RHEL-82645)
- qemu_firmware: Don't skip autoselection for ROM (RHEL-82645)
- qemu_firmware: Allow matching both UEFI and BIOS for ROM loader (RHEL-82645)
- schema: Add firmwareFeatures element for domaincaps (RHEL-82645)
- conf: Add firmwareFeatures element for domaincaps (RHEL-82645)
- qemu: Fill in firmwareFeature element for domaincaps (RHEL-82645)
- docs: Document firmwareFeature element for domaincaps (RHEL-82645)
- docs: Rename "BIOS bootloader" section to "guest firmware" (RHEL-82645)
- docs: Improvement related to firmware selection (RHEL-82645)
- qemu_firmware: Only set format for custom loader if path is present (RHEL-82645)
- conf: Move type=rom default for loader to drivers (RHEL-82645)
- tests: Rename custom JSON firmware descriptors (RHEL-82645)
- schema: Introduce osnvram define (RHEL-82645)
- conf: Parse and format varstore element (RHEL-82645)
- conf: Update validation to consider varstore element (RHEL-82645)
- qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS (RHEL-82645)
- qemu: Validate presence of uefi-vars device (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-manual-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-q35 (RHEL-82645)
- tests: Add firmware-auto-efi-varstore-aarch64 (RHEL-82645)
- tests: Add firmware-auto-efi-enrolled-keys-aarch64 (RHEL-82645)
- qemu_firmware: Parse host-uefi-vars firmware feature (RHEL-82645)
- qemu_firmware: Split sanity check (RHEL-82645)
- qemu_firmware: Consider host-uefi-vars feature in sanity check (RHEL-82645)
- qemu_firmware: Support extended syntax for ROM firmware descriptors (RHEL-82645)
- qemu_firmware: Report NVRAM template path for ROMs (RHEL-82645)
- conf: Include varstore element in domcaps (RHEL-82645)
- qemu: Fill in varstore element in domcaps (RHEL-82645)
- qemu_firmware: Use of NVRAM implies stateful firmware (RHEL-82645)
- qemu_firmware: Allow matching stateful ROMs (RHEL-82645)
- qemu_firmware: Fill in varstore information (RHEL-82645)
- qemu: Introduce varstoreDir (RHEL-82645)
- qemu_firmware: Generate varstore path when necessary (RHEL-82645)
- qemu: Introduce qemuPrepareNVRAMFileCommon() (RHEL-82645)
- qemu: Create and delete varstore file (RHEL-82645)
- security: Mark ROMs as read only when using AppArmor (RHEL-82645)
- security: Handle varstore file (RHEL-82645)
- tests: Add firmware descriptors for uefi-vars builds (RHEL-82645)
- qemu_command: Use uefi-vars device where appropriate (RHEL-82645)
- include: Mention varstore where applicable (RHEL-82645)
- virsh: Update for varstore handling (RHEL-82645)
- domain_conf: initialize network hostdev private data (RHEL-151916)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- test: Default to ROM type for loader (RHEL-82645)
- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151916)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el10_2" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-153576)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-153576)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el10_2" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el10_2" date="1779192000">- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.4.el10_2" date="1781265600">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt</changelog>
</package>
<package pkgid="189c40e6e30ae6378fb641bb682b78bd16805be3aa1d54f2191f5a09fea89911" name="libvma" arch="x86_64">
  <version epoch="0" ver="9.8.80" rel="1.el10"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 9.8.51-1" date="1714392000">- Update to upstream release 9.8.51
- Resolves: RHEL-24810</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.8.51-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.8.51-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mohammad Heib &lt;mheib@redhat.com&gt; - 9.8.60-1" date="1732104000">- Update to upstream release 9.8.60.
  Resolves: RHEL-24810</changelog>
  <changelog author="Mohammad Heib &lt;mheib@redhat.com&gt; - 9.8.60-2" date="1736164800">- Add support for kernel 6.10.
  Resolves: RHEL-24810</changelog>
  <changelog author="Mohammad Heib &lt;mheib@redhat.com&gt; - 9.8.60-3" date="1736856000">- Fix a small memory leak and adjusted the code style. 
  Resolves: RHEL-24810</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 9.8.71-1" date="1750334400">- Update to upstream release 9.8.71.
- Resolves: RHEL-94484</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 9.8.80-1" date="1770206400">- Update to upstream release 9.8.80
- Resolves: RHEL-98258</changelog>
</package>
<package pkgid="a061e2dd3059c4014b9d0461fdeece0e403558960b101757cd47a7d041014da3" name="libvma-devel" arch="x86_64">
  <version epoch="0" ver="9.8.80" rel="1.el10"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 9.8.51-1" date="1714392000">- Update to upstream release 9.8.51
- Resolves: RHEL-24810</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.8.51-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.8.51-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mohammad Heib &lt;mheib@redhat.com&gt; - 9.8.60-1" date="1732104000">- Update to upstream release 9.8.60.
  Resolves: RHEL-24810</changelog>
  <changelog author="Mohammad Heib &lt;mheib@redhat.com&gt; - 9.8.60-2" date="1736164800">- Add support for kernel 6.10.
  Resolves: RHEL-24810</changelog>
  <changelog author="Mohammad Heib &lt;mheib@redhat.com&gt; - 9.8.60-3" date="1736856000">- Fix a small memory leak and adjusted the code style. 
  Resolves: RHEL-24810</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 9.8.71-1" date="1750334400">- Update to upstream release 9.8.71.
- Resolves: RHEL-94484</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 9.8.80-1" date="1770206400">- Update to upstream release 9.8.80
- Resolves: RHEL-98258</changelog>
</package>
<package pkgid="4d7e69e5828f1c411eb7afb9867226975dd794058a9f358da80cef7ebb6fe19a" name="libvma-utils" arch="x86_64">
  <version epoch="0" ver="9.8.80" rel="1.el10"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 9.8.51-1" date="1714392000">- Update to upstream release 9.8.51
- Resolves: RHEL-24810</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.8.51-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9.8.51-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mohammad Heib &lt;mheib@redhat.com&gt; - 9.8.60-1" date="1732104000">- Update to upstream release 9.8.60.
  Resolves: RHEL-24810</changelog>
  <changelog author="Mohammad Heib &lt;mheib@redhat.com&gt; - 9.8.60-2" date="1736164800">- Add support for kernel 6.10.
  Resolves: RHEL-24810</changelog>
  <changelog author="Mohammad Heib &lt;mheib@redhat.com&gt; - 9.8.60-3" date="1736856000">- Fix a small memory leak and adjusted the code style. 
  Resolves: RHEL-24810</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 9.8.71-1" date="1750334400">- Update to upstream release 9.8.71.
- Resolves: RHEL-94484</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 9.8.80-1" date="1770206400">- Update to upstream release 9.8.80
- Resolves: RHEL-98258</changelog>
</package>
<package pkgid="011cd6f6d515a259f745d86c6819c17163a3248571f8b632f0d1dd2ad8a7e2a3" name="libvoikko" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="8.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 4.3.1-6" date="1669809600">- Migrate license tag to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3.1-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Ville-Pekka Vainio &lt;vpvainio@iki.fi&gt; - 4.3.2-1" date="1680350400">- New upstream release
- Update C++ standard from C++11 to C++14
- Compilation fixes for recent versions of GCC
- Small fixes to Finnish grammar checker</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.3.2-2" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3.2-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3.2-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3.2-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pooja Yadav &lt;poyadav@redhat.com&gt; - 4.3.2-6" date="1714478400">- adding gating.yaml configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3.2-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3.2-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="3a74aa0202981601cae4c70bd8142596be5194cffde07bb09eef0dbc62b4668e" name="libvoikko-devel" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="8.el10"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 4.3.1-6" date="1669809600">- Migrate license tag to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3.1-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Ville-Pekka Vainio &lt;vpvainio@iki.fi&gt; - 4.3.2-1" date="1680350400">- New upstream release
- Update C++ standard from C++11 to C++14
- Compilation fixes for recent versions of GCC
- Small fixes to Finnish grammar checker</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.3.2-2" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3.2-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3.2-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3.2-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Pooja Yadav &lt;poyadav@redhat.com&gt; - 4.3.2-6" date="1714478400">- adding gating.yaml configuration</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3.2-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3.2-8" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="ecd1d0e1d82600e6ed857ef3983e09bcd1f74bef86022529d4b685b7a439c1b1" name="libvorbis" arch="x86_64">
  <version epoch="1" ver="1.3.7" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.3.7-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.3.7-8" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.3.7-9" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.3.7-10" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.3.7-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.3.7-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="77f2f6383d71e3ee887380cb3989b75e9cdb2570524bd43671d11365a9b93cb0" name="libvorbis-devel" arch="x86_64">
  <version epoch="1" ver="1.3.7" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.3.7-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.3.7-8" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.3.7-9" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.3.7-10" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.3.7-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.3.7-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f943ca89e754d509dbef50f96d8e31b60de320d294a989920a1d414d9ce6b6bc" name="libvorbis-devel-docs" arch="noarch">
  <version epoch="1" ver="1.3.7" rel="12.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.3.7-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.3.7-8" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.3.7-9" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.3.7-10" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.3.7-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:1.3.7-12" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a107612c583733c311dfc043adb228e6b8c8f80e8ca5f0a0455b509ec013d5c1" name="libvpx" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="6.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tulio Magno Quites Machado Filho &lt;tuliom@redhat.com&gt; - 1.14.0-3" date="1720180800">- Replace yasm with nasm
  Resolves: RHEL-45221</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.14.1-1" date="1720180801">- Upgrade to 1.14.1
  Resolves: RHEL-40644</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.14.1-3" date="1748952000">- Add patch for double free
  Resolves: RHEL-93904</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.14.1-4" date="1748952001">- Bump version for rebuild
  Resolves: RHEL-93904</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.14.1-5" date="1749816000">- Bump version for rebuild
  Resolves: RHEL-93904</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.14.1-6" date="1772712000">- Add patch for superindex full
  Resolves: RHEL-150332</changelog>
</package>
<package pkgid="fb4189a71b653be47f076e01be0ccc2b28e80f76753278a08f95afde315db401" name="libvpx-devel" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="6.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tulio Magno Quites Machado Filho &lt;tuliom@redhat.com&gt; - 1.14.0-3" date="1720180800">- Replace yasm with nasm
  Resolves: RHEL-45221</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.14.1-1" date="1720180801">- Upgrade to 1.14.1
  Resolves: RHEL-40644</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.14.1-3" date="1748952000">- Add patch for double free
  Resolves: RHEL-93904</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.14.1-4" date="1748952001">- Bump version for rebuild
  Resolves: RHEL-93904</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.14.1-5" date="1749816000">- Bump version for rebuild
  Resolves: RHEL-93904</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.14.1-6" date="1772712000">- Add patch for superindex full
  Resolves: RHEL-150332</changelog>
</package>
<package pkgid="757ecec60742c1696935df7d704b9df6f2e7c03a259e166f06dbe2ac41a87e67" name="libvpx-utils" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="6.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tulio Magno Quites Machado Filho &lt;tuliom@redhat.com&gt; - 1.14.0-3" date="1720180800">- Replace yasm with nasm
  Resolves: RHEL-45221</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.14.1-1" date="1720180801">- Upgrade to 1.14.1
  Resolves: RHEL-40644</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.14.1-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.14.1-3" date="1748952000">- Add patch for double free
  Resolves: RHEL-93904</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.14.1-4" date="1748952001">- Bump version for rebuild
  Resolves: RHEL-93904</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.14.1-5" date="1749816000">- Bump version for rebuild
  Resolves: RHEL-93904</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.14.1-6" date="1772712000">- Add patch for superindex full
  Resolves: RHEL-150332</changelog>
</package>
<package pkgid="48b0373bfeed8d84db65e725b2c0f7e245523d84a899b10ad746e54fa276dfb2" name="libwacom" arch="x86_64">
  <version epoch="0" ver="2.14.0" rel="4.el10_1"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.10.0-1" date="1707307200">- libwacom 2.10.0</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 2.12.0-1" date="1717675200">- libwacom 2.12</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 2.12.1-1" date="1718193600">- libwacom 2.12.1</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.12.2-1" date="1718971200">- libwacom 2.12.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.14-1" date="1734350400">- libwacom 2.14 (RHEL-70830)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.14.0-2" date="1753185600">- Add Wacom Intuos Pro 3rd Gen and newest Cintiqs (RHEL-101873)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.14.0-3" date="1755691200">- Rearrange the button leaders for the Intuos Pro 3rd Gen (RHEL-101873)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.14.0-4" date="1762344000">- Rearrange the dial leaders for the  Intuos Pro 3rd Gen (RHEL-122812)</changelog>
</package>
<package pkgid="db1345967952909adc381850c3fcdb87c794797ab6f3c1f8976c869725f45439" name="libwacom-data" arch="noarch">
  <version epoch="0" ver="2.14.0" rel="4.el10_1"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.10.0-1" date="1707307200">- libwacom 2.10.0</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 2.12.0-1" date="1717675200">- libwacom 2.12</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 2.12.1-1" date="1718193600">- libwacom 2.12.1</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.12.2-1" date="1718971200">- libwacom 2.12.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.14-1" date="1734350400">- libwacom 2.14 (RHEL-70830)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.14.0-2" date="1753185600">- Add Wacom Intuos Pro 3rd Gen and newest Cintiqs (RHEL-101873)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.14.0-3" date="1755691200">- Rearrange the button leaders for the Intuos Pro 3rd Gen (RHEL-101873)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.14.0-4" date="1762344000">- Rearrange the dial leaders for the  Intuos Pro 3rd Gen (RHEL-122812)</changelog>
</package>
<package pkgid="0f4bca990db511d824cb7ff7a4cdf9c9bae8f8d1236679c8148c61c77a6aac75" name="libwacom-devel" arch="x86_64">
  <version epoch="0" ver="2.14.0" rel="4.el10_1"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.10.0-1" date="1707307200">- libwacom 2.10.0</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 2.12.0-1" date="1717675200">- libwacom 2.12</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 2.12.1-1" date="1718193600">- libwacom 2.12.1</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.12.2-1" date="1718971200">- libwacom 2.12.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.14-1" date="1734350400">- libwacom 2.14 (RHEL-70830)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.14.0-2" date="1753185600">- Add Wacom Intuos Pro 3rd Gen and newest Cintiqs (RHEL-101873)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.14.0-3" date="1755691200">- Rearrange the button leaders for the Intuos Pro 3rd Gen (RHEL-101873)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.14.0-4" date="1762344000">- Rearrange the dial leaders for the  Intuos Pro 3rd Gen (RHEL-122812)</changelog>
</package>
<package pkgid="b680831759c8ddab5fe041135564cbe49896a22513a6588a16c1410097ad7185" name="libwacom-utils" arch="x86_64">
  <version epoch="0" ver="2.14.0" rel="4.el10_1"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.10.0-1" date="1707307200">- libwacom 2.10.0</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 2.12.0-1" date="1717675200">- libwacom 2.12</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 2.12.1-1" date="1718193600">- libwacom 2.12.1</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.12.2-1" date="1718971200">- libwacom 2.12.2</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.14-1" date="1734350400">- libwacom 2.14 (RHEL-70830)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.14.0-2" date="1753185600">- Add Wacom Intuos Pro 3rd Gen and newest Cintiqs (RHEL-101873)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.14.0-3" date="1755691200">- Rearrange the button leaders for the Intuos Pro 3rd Gen (RHEL-101873)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 2.14.0-4" date="1762344000">- Rearrange the dial leaders for the  Intuos Pro 3rd Gen (RHEL-122812)</changelog>
</package>
<package pkgid="c9a22b343a77d0564223c14906b789edc30d070833c9375db2c893a9cc0797cb" name="libwayland-client" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.0-3" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.22.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.23.0-1" date="1719576000">- Update to 1.23.0 (RHEL-45197)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.23.1-1" date="1747137600">- Update to 1.23.1
  Resolves: RHEL-86834</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 1.24.0-1" date="1762344000">- Rebase to 1.24.0
  Resolves: RHEL-107614</changelog>
</package>
<package pkgid="1b462ddd1bb620e38d855137bb1a9f4c2b842031ba912a276708a350f681d62a" name="libwayland-cursor" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.0-3" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.22.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.23.0-1" date="1719576000">- Update to 1.23.0 (RHEL-45197)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.23.1-1" date="1747137600">- Update to 1.23.1
  Resolves: RHEL-86834</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 1.24.0-1" date="1762344000">- Rebase to 1.24.0
  Resolves: RHEL-107614</changelog>
</package>
<package pkgid="47c32b5afb50cba4e2c341587eeff9147a00f9175cba6a7b9fa3fd74943afd6a" name="libwayland-egl" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.0-3" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.22.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.23.0-1" date="1719576000">- Update to 1.23.0 (RHEL-45197)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.23.1-1" date="1747137600">- Update to 1.23.1
  Resolves: RHEL-86834</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 1.24.0-1" date="1762344000">- Rebase to 1.24.0
  Resolves: RHEL-107614</changelog>
</package>
<package pkgid="ad24c8515cf8925ebacb01fea42bd2a3df5641d7854ba022c2cfd377370fbdb9" name="libwayland-server" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.0-3" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.22.0-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.23.0-1" date="1719576000">- Update to 1.23.0 (RHEL-45197)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.23.0-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.23.1-1" date="1747137600">- Update to 1.23.1
  Resolves: RHEL-86834</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 1.24.0-1" date="1762344000">- Rebase to 1.24.0
  Resolves: RHEL-107614</changelog>
</package>
<package pkgid="5692fb38a65fb3bbd60eb587a61ab90227811908a6819678530d7997a1eada64" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="107.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-100" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114545 - Update to version 4.23.4
- resolves: RHEL-132338 - Fix Time Machine backup
- resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-101" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-132975</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
</package>
<package pkgid="715256a9dd8c2ac386c6bf95ea90ed3108ecacef3aac415055e0e72cc5927a81" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="109.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-108" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-109" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="aa8154c0e1f144029821034297734deb8186c4a062ab4b60ca872c5014f606a5" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="107.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-100" date="1765800000">- Update to version 4.23.4
- resolves: RHEL-114545 - Update to version 4.23.4
- resolves: RHEL-132338 - Fix Time Machine backup
- resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.4-101" date="1766059200">- Remove libldb dependency to samba-common-libs
- resolves: RHEL-132975</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
</package>
<package pkgid="25009ddcb9b02e535611f26d3a5dbb5f13208ccd4971837ef2750d19da10146e" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.23.5" rel="109.el10_2"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-100" date="1769169600">- Update to version 4.23.5
- resolves: RHEL-138263 - Fix winbind group resolution
- resolves: RHEL-141012 - Fix winbind crash</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-101" date="1769515200">- Fix winbind memory leak seen with long living rpcd_* workers
- resolves: RHEL-144479</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-102" date="1769515201">- Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache'
- resolves: RHEL-144586</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-103" date="1770811200">- Fix samba-bgqd to load [printers] share
- resolves: RHEL-53167</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-104" date="1770811201">- Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf
- resolves: RHEL-147417</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-105" date="1771502400">- Fix regression with --use-kerberos=desired for smbclient
- resolves: RHEL-150820</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-106" date="1776772800">- Fix samba automount triggering for more file systems
- resolves: RHEL-137446</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-107" date="1776772801">- Fix 'net ads join' AD replication race with multiple DCs
- resolves: RHEL-169668</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-108" date="1779192000">- Security release for CVE-2026-1933 CVE-2026-2340  CVE-2026-3012
  CVE-2026-4480 CVE-2026-40170 CVE-2026-4408
- resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba:
  various flaws
- resolves: RHEL-161644 - CVE-2026-4480 - Fix Samba printing
- resolves: RHEL-170595 - CVE-2026-40170 - Update bundled ngtcp2
- resolves: RHEL-166871 - Add stack protection with FORTIFY_SOURCE</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 0:4.23.5-109" date="1779364800">- Bump build number</changelog>
</package>
<package pkgid="f5e7130af09ba0966575a30cc1cf31574fc10ecb9139bf22943150c1dd8bb64c" name="libwebp" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.3.2-6" date="1722513600">- Disable libwebp-java on RHEL</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.3.2-7" date="1723204800">- Fixed rpm dependency</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.2-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.3.2-9" date="1732190400">- Backport the move to SPDX license format</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.3.2-10" date="1769083200">- Updated License (RHEL-105872)</changelog>
</package>
<package pkgid="0eae8523dcc8ef77d0218f692f9069d13c598007ecac02c41bc01fed2a9fc7ed" name="libwebp-devel" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.3.2-6" date="1722513600">- Disable libwebp-java on RHEL</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.3.2-7" date="1723204800">- Fixed rpm dependency</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.2-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.3.2-9" date="1732190400">- Backport the move to SPDX license format</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.3.2-10" date="1769083200">- Updated License (RHEL-105872)</changelog>
</package>
<package pkgid="c292d1dfb64cb9a6ff739d3cfb5e39c3b91948573dca8657be0dcfafb07c2edd" name="libwebp-tools" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.2-5" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.3.2-6" date="1722513600">- Disable libwebp-java on RHEL</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.3.2-7" date="1723204800">- Fixed rpm dependency</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.2-8" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.3.2-9" date="1732190400">- Backport the move to SPDX license format</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.3.2-10" date="1769083200">- Updated License (RHEL-105872)</changelog>
</package>
<package pkgid="d360e63b3e0e87874923719f9169234e86a14a36e5b499f11b01f1e754014f96" name="libwinpr" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.7" date="1783771200">- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.8" date="1785844800">- Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624,
  CVE-2026-67289, CVE-2026-67299, CVE-2026-68580)
  Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983,
  Resolves: RHEL-223604</changelog>
  <changelog author="RHEL Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.9" date="1786968000">- Backport several CVE fixes (CVE-2026-67298, CVE-2026-73242)
  Resolves: RHEL-224050, RHEL-238931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.10" date="1787659200">- Backport several CVE fixes (CVE-2026-55194, CVE-2026-63633, CVE-2026-63652,
  CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297,
  CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241)
  Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534
  Resolves: RHEL-236056, RHEL-227734, RHEL-225225, RHEL-225097, RHEL-224250
  Resolves: RHEL-224185</changelog>
</package>
<package pkgid="d59105eff976986b2e529971bd07eb02de49b59ebd34f9eefa198213e1aad97c" name="libwinpr" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.5"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-7" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-140099</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-8" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
  Resolves: RHEL-142334, RHEL-142318</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-9" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
</package>
<package pkgid="b493150d21b2acc6b694b09c00d9a8149208ab239d1d6152e0b3e8e4dbcc1e26" name="libwinpr" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.6"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-8" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
  Resolves: RHEL-142334, RHEL-142318</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-9" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
</package>
<package pkgid="5ba32456e6a003d51331b895e2961cc0f6d9952da79aabf2d4a865e535978092" name="libwinpr" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.7"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-9" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.7" date="1783771200">- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327</changelog>
</package>
<package pkgid="944653fe74757c4deeafde28efb16b1125788b4f88854f83f9a5fbaa2a24e9b9" name="libwinpr" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.8"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.7" date="1783771200">- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.8" date="1785844800">- Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624,
  CVE-2026-67289, CVE-2026-67299, CVE-2026-68580)
  Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983,
  Resolves: RHEL-223604</changelog>
</package>
<package pkgid="1c475ba5df745863ee7cf23abb1e550888229a51425a90b8f1b9acd43b8bc7eb" name="libwinpr-devel" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.7" date="1783771200">- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.8" date="1785844800">- Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624,
  CVE-2026-67289, CVE-2026-67299, CVE-2026-68580)
  Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983,
  Resolves: RHEL-223604</changelog>
  <changelog author="RHEL Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.9" date="1786968000">- Backport several CVE fixes (CVE-2026-67298, CVE-2026-73242)
  Resolves: RHEL-224050, RHEL-238931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.10" date="1787659200">- Backport several CVE fixes (CVE-2026-55194, CVE-2026-63633, CVE-2026-63652,
  CVE-2026-67288, CVE-2026-67291, CVE-2026-67296, CVE-2026-67297,
  CVE-2026-67301, CVE-2026-67304, CVE-2026-69159, CVE-2026-73241)
  Resolves: RHEL-245652, RHEL-245635, RHEL-245599, RHEL-245539, RHEL-238534
  Resolves: RHEL-236056, RHEL-227734, RHEL-225225, RHEL-225097, RHEL-224250
  Resolves: RHEL-224185</changelog>
</package>
<package pkgid="6f77c1c7c80f975850c3fa4d869528740aca15dc4288351129a7da4a2cf5f734" name="libwinpr-devel" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.5"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-7" date="1768564800">- Try next DNS entry on connect failure
  Resolves: RHEL-140099</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-8" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
  Resolves: RHEL-142334, RHEL-142318</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-9" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
</package>
<package pkgid="a949bf4dff680bad8dc58f232f6413473e8c8052d55ef47ada04709a7b7260d6" name="libwinpr-devel" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.6"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-8" date="1769515200">- Backport several CVE fixes
  Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
  Resolves: RHEL-142334, RHEL-142318</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-9" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
</package>
<package pkgid="d52dde990436c279003ed5002da6da243e2795a56f3ef8514c65e6dc7b81381e" name="libwinpr-devel" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.7"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-9" date="1771329600">- Backport several CVE fixes
  Resolves: RHEL-147913, RHEL-148817, RHEL-148861, RHEL-148977, RHEL-148894</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.7" date="1783771200">- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327</changelog>
</package>
<package pkgid="819688145fed24681c1d60724b64eb6483c1835f94663ff35c9d9af8f7042919" name="libwinpr-devel" arch="x86_64">
  <version epoch="2" ver="3.10.3" rel="12.el10_2.8"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-10" date="1774440000">- Backport several CVE fixes
  Resolves: RHEL-151976, RHEL-152203</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-11" date="1774612800">- Backport several CVE fixes
  Resolves: RHEL-147950, RHEL-147951, RHEL-147966, RHEL-147967, RHEL-147971
  Resolves: RHEL-147997, RHEL-147998, RHEL-148006, RHEL-148007, RHEL-148900
  Resolves: RHEL-148986, RHEL-148989, RHEL-149053, RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12" date="1774958400">- Fix use of nsc_process_message
- Increase timeout for TestSynchCritical
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.1" date="1775736000">- Rebuilt for errata
  Resolves: RHEL-155980</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.2" date="1775822400">- Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
- Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
  Resolves: RHEL-162947, RHEL-162963</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.4" date="1777464000">- Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
- Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
- Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
- Add DSP format checks (CVE-2026-31884)
- Fix DSP array bounds checks (CVE-2026-31883)
- Fix DSP array bounds checks (CVE-2026-31885)
- Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
- Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
- Use winpr_aligned_calloc in persistent cache (CVE-2026-33982)
  Resolves: RHEL-159804, RHEL-159660, RHEL-161034, RHEL-161469
  Resolves: RHEL-161505, RHEL-161072, RHEL-163654, RHEL-168462, RHEL-162931</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.5" date="1777982400">- Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)
  Resolves: RHEL-159848</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:3.10.3-12.6" date="1782734400">- Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,
  CVE-2026-44422, CVE-2026-45700)
  Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.7" date="1783771200">- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.10.3-12.8" date="1785844800">- Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624,
  CVE-2026-67289, CVE-2026-67299, CVE-2026-68580)
  Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983,
  Resolves: RHEL-223604</changelog>
</package>
<package pkgid="e1224e0b088a157ba0922f89cf7f593eccf54fc28bded5811f824662a4da2307" name="libwinpr2" arch="x86_64">
  <version epoch="0" ver="2.11.5" rel="1.el10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.1-1" date="1693915200">- Update to 2.11.1.</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.1-2" date="1695816000">- Update to 2.11.2.</changelog>
  <changelog author="John Wiele &lt;jwiele@redhat.com&gt; - 2:2.11.2-2" date="1696852800">- Enable optional build with OpenCL support.</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.2-3" date="1698235200">- Disable FFmpeg support (#2242028).</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.4-1" date="1705060800">- Update to 2.11.4.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2.11.4-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 2.11.4-3" date="1706097600">- Split out as a compatibility package</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 2.11.4-4" date="1706270400">- Fix dependency in libs subpackage</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 2.11.4-5" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.5-1" date="1706788800">- Update to 2.11.5.</changelog>
</package>
<package pkgid="ecbb75e86134d18e391727d001b9e1015108357c01748788232063d87ba6fa87" name="libwinpr2-devel" arch="x86_64">
  <version epoch="0" ver="2.11.5" rel="1.el10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.1-1" date="1693915200">- Update to 2.11.1.</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.1-2" date="1695816000">- Update to 2.11.2.</changelog>
  <changelog author="John Wiele &lt;jwiele@redhat.com&gt; - 2:2.11.2-2" date="1696852800">- Enable optional build with OpenCL support.</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.2-3" date="1698235200">- Disable FFmpeg support (#2242028).</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.4-1" date="1705060800">- Update to 2.11.4.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2.11.4-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 2.11.4-3" date="1706097600">- Split out as a compatibility package</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 2.11.4-4" date="1706270400">- Fix dependency in libs subpackage</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 2.11.4-5" date="1706702400">- Rebuild for ICU 74</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2:2.11.5-1" date="1706788800">- Update to 2.11.5.</changelog>
</package>
<package pkgid="5cda0d842c9daf8d574685d99f7d4776b662dfbc13eec7141c5c6a45f75aef80" name="libwnck3" arch="x86_64">
  <version epoch="0" ver="43.0" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 43.0-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 43.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Wolfgang Ulbrich &lt;fedora@raveit.de&gt; - 43.0-6" date="1700568000">- fix rhbz (#2242944)
- disable Revert-pager-do-not-change-workspace-size-from-size patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 43.0-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 43.0-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 43.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 43.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="19572aa30a6d4bca2a2438d72ed49ce98b882eaf27c831800f09129abe11a2a1" name="libwnck3-devel" arch="x86_64">
  <version epoch="0" ver="43.0" rel="10.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 43.0-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 43.0-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Wolfgang Ulbrich &lt;fedora@raveit.de&gt; - 43.0-6" date="1700568000">- fix rhbz (#2242944)
- disable Revert-pager-do-not-change-workspace-size-from-size patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 43.0-7" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 43.0-8" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 43.0-9" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 43.0-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f2cbcbc059e530191603a41c11e017103ed05632a3c592d0930d35007405a805" name="libwsman-devel" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="3.el10"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.7.2-6" date="1715256000">- Update license tags in subpackages to SPDX format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.2-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.2-8" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.7.2-10" date="1752494400">- Support added for post-quantum cryptography
  Resolves: RHEL-93091
- Remove deprecated path from systemd service file
  Resolves: RHEL-101169</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.7.2-11" date="1760443200">- Update OpenSSL certificates set up
  Resolves: RHEL-113443</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.8.1-1" date="1761220800">- Update to openwsman-2.8.1
  Resolves: RHEL-99191</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.8.1-2" date="1769601600">- Fix bogus 'sscg' arguments
  Related: RHEL-113443</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.8.1-3" date="1770638400">- Modify RPM verification of ssleay.cnf
  Related: RHEL-113443</changelog>
</package>
<package pkgid="51fcc03862fd3cdda759c7b262b49252e04efac58e10cec307c3dc5ea0a9ee44" name="libwsman1" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="3.el10"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.7.2-6" date="1715256000">- Update license tags in subpackages to SPDX format</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.2-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.2-8" date="1723118400">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.7.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.7.2-10" date="1752494400">- Support added for post-quantum cryptography
  Resolves: RHEL-93091
- Remove deprecated path from systemd service file
  Resolves: RHEL-101169</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.7.2-11" date="1760443200">- Update OpenSSL certificates set up
  Resolves: RHEL-113443</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.8.1-1" date="1761220800">- Update to openwsman-2.8.1
  Resolves: RHEL-99191</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.8.1-2" date="1769601600">- Fix bogus 'sscg' arguments
  Related: RHEL-113443</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.8.1-3" date="1770638400">- Modify RPM verification of ssleay.cnf
  Related: RHEL-113443</changelog>
</package>
<package pkgid="1a77b992964cbfc03cb4119280614d71ffa18e4fd6a18ac68d44fc11d4383830" name="libxcb" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.1-11" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.1-12" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.13.1-13" date="1694088000">- SPDX Migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.16-1" date="1696507200">- libxcb 1.16</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.16-2" date="1696593600">- Add missing README.md and libxcb-dbe</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.17.0-1" date="1714478400">- libxcb 1.17.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="f8721ea5d26bebedf4deef0d1c58da288cdc8e87729fe2a01c09ec3d0f0ef17a" name="libxcb-devel" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.1-11" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.1-12" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.13.1-13" date="1694088000">- SPDX Migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.16-1" date="1696507200">- libxcb 1.16</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.16-2" date="1696593600">- Add missing README.md and libxcb-dbe</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.17.0-1" date="1714478400">- libxcb 1.17.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="8eb840e986be1c10604167dedfcd29d53667a73cc2c1649ec723fb045014abb9" name="libxcb-doc" arch="noarch">
  <version epoch="0" ver="1.17.0" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.1-11" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.1-12" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.13.1-13" date="1694088000">- SPDX Migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.16-1" date="1696507200">- libxcb 1.16</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.16-2" date="1696593600">- Add missing README.md and libxcb-dbe</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.17.0-1" date="1714478400">- libxcb 1.17.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.17.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="06bb13ba608b57582b3dfc453645ec547d99b5fba934b4732c6c05b630b3f88b" name="libxcrypt" arch="x86_64">
  <version epoch="0" ver="4.4.36" rel="10.el10"/>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.36-1" date="1688558400">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.36-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.4.36-3" date="1702987200">- Fix C compatibility issue in the configure script</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 4.4.36-4" date="1702987201">- Remove -compat package from Fedora ELN / RHEL 10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.36-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.36-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 4.4.36-7" date="1720008000">- Added back -compat package for RHEL 10 (bootstrap)</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 4.4.36-8" date="1720094400">- Bumped version not to clash with previous bad build.</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 4.4.36-9" date="1720094401">+ libxcrypt-4.4.36-9
- Added back -compat package for RHEL 10 (final)
- CI and gating for RHEL 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.36-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="1768c1674d2f13ed2527f3c5cf1703d5adf94e0f77f7bb7fea0f471ec6821359" name="libxcrypt-compat" arch="x86_64">
  <version epoch="0" ver="4.4.36" rel="10.el10"/>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.36-1" date="1688558400">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.36-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.4.36-3" date="1702987200">- Fix C compatibility issue in the configure script</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 4.4.36-4" date="1702987201">- Remove -compat package from Fedora ELN / RHEL 10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.36-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.36-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 4.4.36-7" date="1720008000">- Added back -compat package for RHEL 10 (bootstrap)</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 4.4.36-8" date="1720094400">- Bumped version not to clash with previous bad build.</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 4.4.36-9" date="1720094401">+ libxcrypt-4.4.36-9
- Added back -compat package for RHEL 10 (final)
- CI and gating for RHEL 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.36-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="64f4e2d62dcaca2e4dd382851916869966cee313d062bcc09f6beacb3e90ceb6" name="libxcrypt-devel" arch="x86_64">
  <version epoch="0" ver="4.4.36" rel="10.el10"/>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.36-1" date="1688558400">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.36-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.4.36-3" date="1702987200">- Fix C compatibility issue in the configure script</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 4.4.36-4" date="1702987201">- Remove -compat package from Fedora ELN / RHEL 10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.36-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.36-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 4.4.36-7" date="1720008000">- Added back -compat package for RHEL 10 (bootstrap)</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 4.4.36-8" date="1720094400">- Bumped version not to clash with previous bad build.</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 4.4.36-9" date="1720094401">+ libxcrypt-4.4.36-9
- Added back -compat package for RHEL 10 (final)
- CI and gating for RHEL 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.36-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ed04c54d4f69bc3fe06115af757e6155bf5340357f48738b5f3bb82125c26d15" name="libxcrypt-static" arch="x86_64">
  <version epoch="0" ver="4.4.36" rel="10.el10"/>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 4.4.36-1" date="1688558400">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.36-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.4.36-3" date="1702987200">- Fix C compatibility issue in the configure script</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 4.4.36-4" date="1702987201">- Remove -compat package from Fedora ELN / RHEL 10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.36-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.36-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 4.4.36-7" date="1720008000">- Added back -compat package for RHEL 10 (bootstrap)</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 4.4.36-8" date="1720094400">- Bumped version not to clash with previous bad build.</changelog>
  <changelog author="Stanislav Zidek &lt;szidek@redhat.com&gt; - 4.4.36-9" date="1720094401">+ libxcrypt-4.4.36-9
- Added back -compat package for RHEL 10 (final)
- CI and gating for RHEL 10</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.4.36-10" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="aaddfeab5e0952a582a983b22f8aa8690357cdad1ddc7bd883566bdb90c8a98d" name="libxcvt" arch="x86_64">
  <version epoch="0" ver="0.1.2" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.2-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 0.1.2-8" date="1719835200">- Fix explicit package version requirement (RHEL-45635).</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fc283abc553355a2ca05a4f314c0eb816984bc3f80187708ec4cc446775197f2" name="libxcvt-devel" arch="x86_64">
  <version epoch="0" ver="0.1.2" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.2-7" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 0.1.2-8" date="1719835200">- Fix explicit package version requirement (RHEL-45635).</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.1.2-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="2af5048e6801ad7360de8a704a13a47bb3de6e48dbc2cec2fef644841ed291ad" name="libxdp" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.5.0-1" date="1736424000">- Upstream version bump</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.5.1-1" date="1736856000">- Upstream version bump</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.5.3-1" date="1741348800">- Upstream version bump</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.5.5-1" date="1749038400">- Upstream version bump
- Fix build with Clang 20</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.5.7-1" date="1759492800">- Upstream version bump
- Add annocheck exceptions for BPF objects (Felix)
- Re-enable debug builds (Felix)
- Add libcap-ng-devel to BuildDepends</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.6.0-1" date="1767787200">- Upstream version bump
- Drop upstreamed patch</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.6.2-1" date="1771502400">- Upstream version bump</changelog>
</package>
<package pkgid="02da4e495b23dea0617af7b13fca39edbb29e7a7f2a544db48881daa77caa94e" name="libxdp-devel" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.5.0-1" date="1736424000">- Upstream version bump</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.5.1-1" date="1736856000">- Upstream version bump</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.5.3-1" date="1741348800">- Upstream version bump</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.5.5-1" date="1749038400">- Upstream version bump
- Fix build with Clang 20</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.5.7-1" date="1759492800">- Upstream version bump
- Add annocheck exceptions for BPF objects (Felix)
- Re-enable debug builds (Felix)
- Add libcap-ng-devel to BuildDepends</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.6.0-1" date="1767787200">- Upstream version bump
- Drop upstreamed patch</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.6.2-1" date="1771502400">- Upstream version bump</changelog>
</package>
<package pkgid="d913bf93dd85d0c76e796bbea309786afdf5f5d9fa70f54e25c4a82020735122" name="libxdp-static" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="1.el10"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.2-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.4.2-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.5.0-1" date="1736424000">- Upstream version bump</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.5.1-1" date="1736856000">- Upstream version bump</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.5.3-1" date="1741348800">- Upstream version bump</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.5.5-1" date="1749038400">- Upstream version bump
- Fix build with Clang 20</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.5.7-1" date="1759492800">- Upstream version bump
- Add annocheck exceptions for BPF objects (Felix)
- Re-enable debug builds (Felix)
- Add libcap-ng-devel to BuildDepends</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.6.0-1" date="1767787200">- Upstream version bump
- Drop upstreamed patch</changelog>
  <changelog author="Toke H&#xF8;iland-J&#xF8;rgensen &lt;toke@redhat.com&gt; 1.6.2-1" date="1771502400">- Upstream version bump</changelog>
</package>
<package pkgid="325d6b2fe75668634aa33bb6e4b7db634f9e6591c4b345b7d43b2cc273d4d412" name="libxkbcommon" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="4.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.5.0-1" date="1672833600">- libxbkcommon 1.5.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt;" date="1693915200">- SPDX migration: update to SPDX license identifiers</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.6.0-1" date="1696852800">- libxkbcommon 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.7.0-2" date="1720699200">- libxkbcommon 1.7.0
- Split the x11-utils into their own subpackage with the right requires</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.7.0-3" date="1721044800">- Explicitly Require libxkbcommon in x11-utils for rpminspect</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="4d14bfa1adddc7d4b47584b9d390dca0d08c8ed85f7b7040974a27ca58d8bdfa" name="libxkbcommon-devel" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="4.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.5.0-1" date="1672833600">- libxbkcommon 1.5.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt;" date="1693915200">- SPDX migration: update to SPDX license identifiers</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.6.0-1" date="1696852800">- libxkbcommon 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.7.0-2" date="1720699200">- libxkbcommon 1.7.0
- Split the x11-utils into their own subpackage with the right requires</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.7.0-3" date="1721044800">- Explicitly Require libxkbcommon in x11-utils for rpminspect</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6c6e551b0ea44437bb4ebaf2bf178c8852a19acfe8317fa1675342c50f63bc47" name="libxkbcommon-utils" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="4.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.5.0-1" date="1672833600">- libxbkcommon 1.5.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt;" date="1693915200">- SPDX migration: update to SPDX license identifiers</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.6.0-1" date="1696852800">- libxkbcommon 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.7.0-2" date="1720699200">- libxkbcommon 1.7.0
- Split the x11-utils into their own subpackage with the right requires</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.7.0-3" date="1721044800">- Explicitly Require libxkbcommon in x11-utils for rpminspect</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a905eef63d889042e1daae1d748b79e2feae95b109df2371f0ae650d96f2b852" name="libxkbcommon-x11" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="4.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.5.0-1" date="1672833600">- libxbkcommon 1.5.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt;" date="1693915200">- SPDX migration: update to SPDX license identifiers</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.6.0-1" date="1696852800">- libxkbcommon 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.7.0-2" date="1720699200">- libxkbcommon 1.7.0
- Split the x11-utils into their own subpackage with the right requires</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.7.0-3" date="1721044800">- Explicitly Require libxkbcommon in x11-utils for rpminspect</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="b1cfd81988e005ee8c55bb298999c39a54952723a2bd1b7e872f63ff84b9940d" name="libxkbcommon-x11-devel" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="4.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.5.0-1" date="1672833600">- libxbkcommon 1.5.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt;" date="1693915200">- SPDX migration: update to SPDX license identifiers</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.6.0-1" date="1696852800">- libxkbcommon 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.7.0-2" date="1720699200">- libxkbcommon 1.7.0
- Split the x11-utils into their own subpackage with the right requires</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.7.0-3" date="1721044800">- Explicitly Require libxkbcommon in x11-utils for rpminspect</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="033d2f3c6d6b2ebcc4e0febf6cf6bf85eda0fcdcfd368cb4695eb3410649bc6c" name="libxkbcommon-x11-utils" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="4.el10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.5.0-1" date="1672833600">- libxbkcommon 1.5.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt;" date="1693915200">- SPDX migration: update to SPDX license identifiers</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.6.0-1" date="1696852800">- libxkbcommon 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.6.0-3" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.7.0-2" date="1720699200">- libxkbcommon 1.7.0
- Split the x11-utils into their own subpackage with the right requires</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.7.0-3" date="1721044800">- Explicitly Require libxkbcommon in x11-utils for rpminspect</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.7.0-4" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="425a7a09e15a4be734120fcfb7f06963aacfa7fd95fbefb5294568f4a70976be" name="libxkbfile" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="3.el10"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.1.1-1" date="1667563200">- libxkbfile 1.1.1-1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.1.1-4" date="1694001600">- SPDX migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.2-1" date="1696507200">- libxkbfile 1.1.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.3-1" date="1707134400">- libxkbfile 1.1.3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0b9734036a0848bd7633cea92ec27309bafb838de951be9eeed377972812e247" name="libxkbfile-devel" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="3.el10"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.1.1-1" date="1667563200">- libxkbfile 1.1.1-1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; - 1.1.1-4" date="1694001600">- SPDX migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.2-1" date="1696507200">- libxkbfile 1.1.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.3-1" date="1707134400">- libxkbfile 1.1.3</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.3-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="74b781b44ac1c17e87c051ed0f53d47662d26fa0995a37cdfc5d9e4daeb816c3" name="libxml2" arch="x86_64">
  <version epoch="0" ver="2.12.5" rel="10.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.12.5-1" date="1707134400">- Update to 2.12.5 (#2262648)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.5-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.5-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.12.5-4" date="1735041600">- Fix CVE-2024-40896 (RHEL-72060)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-5" date="1740398400">- Fix CVE-2024-56171 (RHEL-80119)
- Fix CVE-2025-24928 (RHEL-80134)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-6" date="1750075200">- Fix CVE-2025-6021 (RHEL-96495)
- Fix CVE-2025-49794 (RHEL-96395)
- Fix CVE-2025-49795 (RHEL-96408)
- Fix CVE-2025-49796 (RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-7" date="1751889600">- Refresh patches from upstream (RHEL-96395, RHEL-96408 and RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-8" date="1753099200">- Fix CVE-2025-7425 (RHEL-102794)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-9" date="1754395200">- Fix CVE-2025-32415 (RHEL-100174)
- Fix CVE-2025-32414 (RHEL-99861)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10" date="1769428800">- Fix xmllint error code (RHEL-126768)</changelog>
</package>
<package pkgid="82228203aadd442098ce141eecedb3ee82424e0abfbee70671a7ff0d481bd635" name="libxml2" arch="x86_64">
  <version epoch="0" ver="2.12.5" rel="10.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.5-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.5-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.12.5-4" date="1735041600">- Fix CVE-2024-40896 (RHEL-72060)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-5" date="1740398400">- Fix CVE-2024-56171 (RHEL-80119)
- Fix CVE-2025-24928 (RHEL-80134)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-6" date="1750075200">- Fix CVE-2025-6021 (RHEL-96495)
- Fix CVE-2025-49794 (RHEL-96395)
- Fix CVE-2025-49795 (RHEL-96408)
- Fix CVE-2025-49796 (RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-7" date="1751889600">- Refresh patches from upstream (RHEL-96395, RHEL-96408 and RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-8" date="1753099200">- Fix CVE-2025-7425 (RHEL-102794)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-9" date="1754395200">- Fix CVE-2025-32415 (RHEL-100174)
- Fix CVE-2025-32414 (RHEL-99861)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10" date="1769428800">- Fix xmllint error code (RHEL-126768)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177890)</changelog>
</package>
<package pkgid="57e7d98c70dc36b09e6dd0c7f2e601d86277c28880af94809d98dc0715af5919" name="libxml2" arch="x86_64">
  <version epoch="0" ver="2.12.5" rel="10.el10_2.2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.5-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.12.5-4" date="1735041600">- Fix CVE-2024-40896 (RHEL-72060)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-5" date="1740398400">- Fix CVE-2024-56171 (RHEL-80119)
- Fix CVE-2025-24928 (RHEL-80134)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-6" date="1750075200">- Fix CVE-2025-6021 (RHEL-96495)
- Fix CVE-2025-49794 (RHEL-96395)
- Fix CVE-2025-49795 (RHEL-96408)
- Fix CVE-2025-49796 (RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-7" date="1751889600">- Refresh patches from upstream (RHEL-96395, RHEL-96408 and RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-8" date="1753099200">- Fix CVE-2025-7425 (RHEL-102794)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-9" date="1754395200">- Fix CVE-2025-32415 (RHEL-100174)
- Fix CVE-2025-32414 (RHEL-99861)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10" date="1769428800">- Fix xmllint error code (RHEL-126768)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177890)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182007)</changelog>
</package>
<package pkgid="51349b21629755c1d17f9be2115d1bfca9d9d8bbef3b2ff5e11ad01eac3fdc16" name="libxml2" arch="x86_64">
  <version epoch="0" ver="2.12.5" rel="10.el10_2.3"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.12.5-4" date="1735041600">- Fix CVE-2024-40896 (RHEL-72060)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-5" date="1740398400">- Fix CVE-2024-56171 (RHEL-80119)
- Fix CVE-2025-24928 (RHEL-80134)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-6" date="1750075200">- Fix CVE-2025-6021 (RHEL-96495)
- Fix CVE-2025-49794 (RHEL-96395)
- Fix CVE-2025-49795 (RHEL-96408)
- Fix CVE-2025-49796 (RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-7" date="1751889600">- Refresh patches from upstream (RHEL-96395, RHEL-96408 and RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-8" date="1753099200">- Fix CVE-2025-7425 (RHEL-102794)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-9" date="1754395200">- Fix CVE-2025-32415 (RHEL-100174)
- Fix CVE-2025-32414 (RHEL-99861)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10" date="1769428800">- Fix xmllint error code (RHEL-126768)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177890)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182007)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.12.5-10.3" date="1784980800">- Fix CVE-2026-11979 (RHEL-215571)</changelog>
</package>
<package pkgid="7c7f5c956e58e5b1e67c0cdaddc946cdec47bd8e2923962dfa4e914356987076" name="libxml2-devel" arch="x86_64">
  <version epoch="0" ver="2.12.5" rel="10.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.12.5-1" date="1707134400">- Update to 2.12.5 (#2262648)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.5-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.5-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.12.5-4" date="1735041600">- Fix CVE-2024-40896 (RHEL-72060)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-5" date="1740398400">- Fix CVE-2024-56171 (RHEL-80119)
- Fix CVE-2025-24928 (RHEL-80134)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-6" date="1750075200">- Fix CVE-2025-6021 (RHEL-96495)
- Fix CVE-2025-49794 (RHEL-96395)
- Fix CVE-2025-49795 (RHEL-96408)
- Fix CVE-2025-49796 (RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-7" date="1751889600">- Refresh patches from upstream (RHEL-96395, RHEL-96408 and RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-8" date="1753099200">- Fix CVE-2025-7425 (RHEL-102794)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-9" date="1754395200">- Fix CVE-2025-32415 (RHEL-100174)
- Fix CVE-2025-32414 (RHEL-99861)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10" date="1769428800">- Fix xmllint error code (RHEL-126768)</changelog>
</package>
<package pkgid="359795485f313be28907ff95b0f4feaa302eacb3be5053b1f4bbcb488f35edb3" name="libxml2-devel" arch="x86_64">
  <version epoch="0" ver="2.12.5" rel="10.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.5-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.5-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.12.5-4" date="1735041600">- Fix CVE-2024-40896 (RHEL-72060)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-5" date="1740398400">- Fix CVE-2024-56171 (RHEL-80119)
- Fix CVE-2025-24928 (RHEL-80134)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-6" date="1750075200">- Fix CVE-2025-6021 (RHEL-96495)
- Fix CVE-2025-49794 (RHEL-96395)
- Fix CVE-2025-49795 (RHEL-96408)
- Fix CVE-2025-49796 (RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-7" date="1751889600">- Refresh patches from upstream (RHEL-96395, RHEL-96408 and RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-8" date="1753099200">- Fix CVE-2025-7425 (RHEL-102794)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-9" date="1754395200">- Fix CVE-2025-32415 (RHEL-100174)
- Fix CVE-2025-32414 (RHEL-99861)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10" date="1769428800">- Fix xmllint error code (RHEL-126768)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177890)</changelog>
</package>
<package pkgid="271b4ff16df94e22300fb9048af0d8e079a7d175d34aa166bf3c260ae52dc4a0" name="libxml2-devel" arch="x86_64">
  <version epoch="0" ver="2.12.5" rel="10.el10_2.2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.5-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.12.5-4" date="1735041600">- Fix CVE-2024-40896 (RHEL-72060)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-5" date="1740398400">- Fix CVE-2024-56171 (RHEL-80119)
- Fix CVE-2025-24928 (RHEL-80134)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-6" date="1750075200">- Fix CVE-2025-6021 (RHEL-96495)
- Fix CVE-2025-49794 (RHEL-96395)
- Fix CVE-2025-49795 (RHEL-96408)
- Fix CVE-2025-49796 (RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-7" date="1751889600">- Refresh patches from upstream (RHEL-96395, RHEL-96408 and RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-8" date="1753099200">- Fix CVE-2025-7425 (RHEL-102794)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-9" date="1754395200">- Fix CVE-2025-32415 (RHEL-100174)
- Fix CVE-2025-32414 (RHEL-99861)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10" date="1769428800">- Fix xmllint error code (RHEL-126768)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177890)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182007)</changelog>
</package>
<package pkgid="09b1e7097f149575ec6b021d6a927de267fd5502ec08f57a6634d586c47869f0" name="libxml2-devel" arch="x86_64">
  <version epoch="0" ver="2.12.5" rel="10.el10_2.3"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.12.5-4" date="1735041600">- Fix CVE-2024-40896 (RHEL-72060)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-5" date="1740398400">- Fix CVE-2024-56171 (RHEL-80119)
- Fix CVE-2025-24928 (RHEL-80134)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-6" date="1750075200">- Fix CVE-2025-6021 (RHEL-96495)
- Fix CVE-2025-49794 (RHEL-96395)
- Fix CVE-2025-49795 (RHEL-96408)
- Fix CVE-2025-49796 (RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-7" date="1751889600">- Refresh patches from upstream (RHEL-96395, RHEL-96408 and RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-8" date="1753099200">- Fix CVE-2025-7425 (RHEL-102794)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-9" date="1754395200">- Fix CVE-2025-32415 (RHEL-100174)
- Fix CVE-2025-32414 (RHEL-99861)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10" date="1769428800">- Fix xmllint error code (RHEL-126768)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177890)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182007)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.12.5-10.3" date="1784980800">- Fix CVE-2026-11979 (RHEL-215571)</changelog>
</package>
<package pkgid="b3c680478c714105299836ebda61715b53c925d7ed43f0c6388b542c7d741723" name="libxml2-static" arch="x86_64">
  <version epoch="0" ver="2.12.5" rel="10.el10"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.12.5-1" date="1707134400">- Update to 2.12.5 (#2262648)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.5-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.5-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.12.5-4" date="1735041600">- Fix CVE-2024-40896 (RHEL-72060)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-5" date="1740398400">- Fix CVE-2024-56171 (RHEL-80119)
- Fix CVE-2025-24928 (RHEL-80134)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-6" date="1750075200">- Fix CVE-2025-6021 (RHEL-96495)
- Fix CVE-2025-49794 (RHEL-96395)
- Fix CVE-2025-49795 (RHEL-96408)
- Fix CVE-2025-49796 (RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-7" date="1751889600">- Refresh patches from upstream (RHEL-96395, RHEL-96408 and RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-8" date="1753099200">- Fix CVE-2025-7425 (RHEL-102794)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-9" date="1754395200">- Fix CVE-2025-32415 (RHEL-100174)
- Fix CVE-2025-32414 (RHEL-99861)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10" date="1769428800">- Fix xmllint error code (RHEL-126768)</changelog>
</package>
<package pkgid="8972ed07d35706d0a7d54b55f43aa2ac91675cf3da714ba7277ffbbd9aab620b" name="libxml2-static" arch="x86_64">
  <version epoch="0" ver="2.12.5" rel="10.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.5-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.5-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.12.5-4" date="1735041600">- Fix CVE-2024-40896 (RHEL-72060)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-5" date="1740398400">- Fix CVE-2024-56171 (RHEL-80119)
- Fix CVE-2025-24928 (RHEL-80134)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-6" date="1750075200">- Fix CVE-2025-6021 (RHEL-96495)
- Fix CVE-2025-49794 (RHEL-96395)
- Fix CVE-2025-49795 (RHEL-96408)
- Fix CVE-2025-49796 (RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-7" date="1751889600">- Refresh patches from upstream (RHEL-96395, RHEL-96408 and RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-8" date="1753099200">- Fix CVE-2025-7425 (RHEL-102794)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-9" date="1754395200">- Fix CVE-2025-32415 (RHEL-100174)
- Fix CVE-2025-32414 (RHEL-99861)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10" date="1769428800">- Fix xmllint error code (RHEL-126768)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177890)</changelog>
</package>
<package pkgid="3a9e0a3ca9e0b69ea4812ef86576dc20fcf60d067bcf001140674923473ea9b1" name="libxml2-static" arch="x86_64">
  <version epoch="0" ver="2.12.5" rel="10.el10_2.2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.12.5-3" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.12.5-4" date="1735041600">- Fix CVE-2024-40896 (RHEL-72060)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-5" date="1740398400">- Fix CVE-2024-56171 (RHEL-80119)
- Fix CVE-2025-24928 (RHEL-80134)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-6" date="1750075200">- Fix CVE-2025-6021 (RHEL-96495)
- Fix CVE-2025-49794 (RHEL-96395)
- Fix CVE-2025-49795 (RHEL-96408)
- Fix CVE-2025-49796 (RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-7" date="1751889600">- Refresh patches from upstream (RHEL-96395, RHEL-96408 and RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-8" date="1753099200">- Fix CVE-2025-7425 (RHEL-102794)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-9" date="1754395200">- Fix CVE-2025-32415 (RHEL-100174)
- Fix CVE-2025-32414 (RHEL-99861)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10" date="1769428800">- Fix xmllint error code (RHEL-126768)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177890)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182007)</changelog>
</package>
<package pkgid="3f73bc53a3e72ebc201b9247ffc32af857db75258d593326c3783af51dff3e7a" name="libxml2-static" arch="x86_64">
  <version epoch="0" ver="2.12.5" rel="10.el10_2.3"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.12.5-4" date="1735041600">- Fix CVE-2024-40896 (RHEL-72060)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-5" date="1740398400">- Fix CVE-2024-56171 (RHEL-80119)
- Fix CVE-2025-24928 (RHEL-80134)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-6" date="1750075200">- Fix CVE-2025-6021 (RHEL-96495)
- Fix CVE-2025-49794 (RHEL-96395)
- Fix CVE-2025-49795 (RHEL-96408)
- Fix CVE-2025-49796 (RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-7" date="1751889600">- Refresh patches from upstream (RHEL-96395, RHEL-96408 and RHEL-96421)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-8" date="1753099200">- Fix CVE-2025-7425 (RHEL-102794)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-9" date="1754395200">- Fix CVE-2025-32415 (RHEL-100174)
- Fix CVE-2025-32414 (RHEL-99861)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10" date="1769428800">- Fix xmllint error code (RHEL-126768)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177890)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.12.5-10.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182007)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.12.5-10.3" date="1784980800">- Fix CVE-2026-11979 (RHEL-215571)</changelog>
</package>
<package pkgid="84e4047c9898da503f4bc2094c8d29cc8b0be0fb3b378f74ecb9cddabc75f8c6" name="libxmlb" arch="x86_64">
  <version epoch="0" ver="0.3.24" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.15-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.15-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.3.15-4" date="1714651200">- Add gating.yaml via API</changelog>
  <changelog author="Lumir Balhar &lt;lbalhar@redhat.com&gt; - 0.3.15-5" date="1718625600">- Remove build dependency on libstemmer-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.15-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.15-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.3.23-1" date="1754568000">- New upstream release</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.3.23-2" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.3.24-1" date="1768305600">- New upstream release</changelog>
</package>
<package pkgid="92dd69ac463b75a86edaf02bbf75de267b279813ef5637026bd98f0af977af5d" name="libxmlb-devel" arch="x86_64">
  <version epoch="0" ver="0.3.24" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.15-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.15-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.3.15-4" date="1714651200">- Add gating.yaml via API</changelog>
  <changelog author="Lumir Balhar &lt;lbalhar@redhat.com&gt; - 0.3.15-5" date="1718625600">- Remove build dependency on libstemmer-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.15-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.15-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.3.23-1" date="1754568000">- New upstream release</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.3.23-2" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.3.24-1" date="1768305600">- New upstream release</changelog>
</package>
<package pkgid="adbfec921859732748b0f2cd1bce4b47a7690ec3e6aaf41c5d2f8ba30f71e16c" name="libxmlb-tests" arch="x86_64">
  <version epoch="0" ver="0.3.24" rel="1.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.15-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.15-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.3.15-4" date="1714651200">- Add gating.yaml via API</changelog>
  <changelog author="Lumir Balhar &lt;lbalhar@redhat.com&gt; - 0.3.15-5" date="1718625600">- Remove build dependency on libstemmer-devel</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.15-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.3.15-7" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.3.23-1" date="1754568000">- New upstream release</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 0.3.23-2" date="1758024000">- Sync the content of main.fmf from rhel9 to rhel10</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 0.3.24-1" date="1768305600">- New upstream release</changelog>
</package>
<package pkgid="af6c5596a7d0315d38c0b0e857932d8092be8c0839a482d135aff9656cf6dd0b" name="libxshmfence" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.3-14" date="1694088000">- SPDX Migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.3.2-1" date="1696507200">- libxshmfence 1.3.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="d6fa6260e2a6d3e54da272ffae8a2e5b7306508faef5ce3b2b7a0c4374adab7a" name="libxshmfence-devel" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.3-14" date="1694088000">- SPDX Migration</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.3.2-1" date="1696507200">- libxshmfence 1.3.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.2-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.3.2-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="11eb318e83ae7202172df78ed38ee4957730bd141ca02c62e46febed45110edc" name="libxslt" arch="x86_64">
  <version epoch="0" ver="1.1.39" rel="8.el10_0"/>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.1.39-1" date="1700136000">- 1.1.39</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.39-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.39-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.39-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.1.39-5" date="1722945600">- Only build python support on Fedora</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.39-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.1.39-7" date="1743768000">- Fix CVE-2024-55549 (RHEL-83503)
- Fix CVE-2025-24855 (RHEL-83489)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.1.39-8" date="1753876800">- Fix CVE-2025-7424 (RHEL-102746)</changelog>
</package>
<package pkgid="9f067ff7bd1ac912dd885c2c6c1cb593c78fcbece3650354b0ca771f04ff5cb4" name="libxslt" arch="x86_64">
  <version epoch="0" ver="1.1.39" rel="8.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.39-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.1.39-5" date="1722945600">- Only build python support on Fedora</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.39-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.1.39-7" date="1743768000">- Fix CVE-2024-55549 (RHEL-83503)
- Fix CVE-2025-24855 (RHEL-83489)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.1.39-8" date="1753876800">- Fix CVE-2025-7424 (RHEL-102746)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.1.39-8.1" date="1779192000">- Fix CVE-2025-10911 (RHEL-171996)</changelog>
</package>
<package pkgid="db39ac132eb9ef1988ccc6808cddd86b0c5fbbd051e17b4e056f8229b105a80e" name="libxslt-devel" arch="x86_64">
  <version epoch="0" ver="1.1.39" rel="8.el10_0"/>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.1.39-1" date="1700136000">- 1.1.39</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.39-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.39-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.39-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.1.39-5" date="1722945600">- Only build python support on Fedora</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.39-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.1.39-7" date="1743768000">- Fix CVE-2024-55549 (RHEL-83503)
- Fix CVE-2025-24855 (RHEL-83489)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.1.39-8" date="1753876800">- Fix CVE-2025-7424 (RHEL-102746)</changelog>
</package>
<package pkgid="5c045f374534fc374585273f837c0cb6f03f656aa2519e4652f644cec2508a73" name="libxslt-devel" arch="x86_64">
  <version epoch="0" ver="1.1.39" rel="8.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.39-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.1.39-5" date="1722945600">- Only build python support on Fedora</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.39-6" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.1.39-7" date="1743768000">- Fix CVE-2024-55549 (RHEL-83503)
- Fix CVE-2025-24855 (RHEL-83489)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.1.39-8" date="1753876800">- Fix CVE-2025-7424 (RHEL-102746)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.1.39-8.1" date="1779192000">- Fix CVE-2025-10911 (RHEL-171996)</changelog>
</package>
<package pkgid="5f3d1104e87f4ced2b1b5809a212797033d6456f10ec4cec29a1f01a8f7d2f09" name="libyaml" arch="x86_64">
  <version epoch="0" ver="0.2.5" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.5-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 0.2.5-10" date="1684324800">- Review the license tag according to the SPDX standard, declare the docs license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.5-11" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.2.5-12" date="1690372800">- Add MinGW packages.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.5-13" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.5-14" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.5-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.5-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="0041e2432bd5959104fd2185415c63814397945e28912d039a6c255d61e9c276" name="libyaml-devel" arch="x86_64">
  <version epoch="0" ver="0.2.5" rel="16.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.5-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 0.2.5-10" date="1684324800">- Review the license tag according to the SPDX standard, declare the docs license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.5-11" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.2.5-12" date="1690372800">- Add MinGW packages.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.5-13" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.5-14" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.5-15" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.2.5-16" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="5deab8f221cb3e132c2d79db15ec1efbc15613c5bbda15ad2ca3c0baa31c9297" name="libyang" arch="x86_64">
  <version epoch="0" ver="2.1.148" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.80-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.80-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2.1.80-5" date="1709380800">- Properly check valgrind arches</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.80-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-1" date="1724328000">- New version 2.1.148</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.148-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-3" date="1762344000">- Resolves: RHEL-119430 - Move libyang-devel to CRB</changelog>
</package>
<package pkgid="e73a0d5d8cf81b73fc044bcd9d6abaceb7da006847163bcebe6097736b6e7d8a" name="libyang" arch="x86_64">
  <version epoch="0" ver="2.1.148" rel="4.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.80-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-1" date="1724328000">- New version 2.1.148</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.148-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-3" date="1762344000">- Resolves: RHEL-119430 - Move libyang-devel to CRB</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-4" date="1779710400">- DoS or arbitrary code execution via maliciously crafted LYB binary blob
- Resolves: RHEL-177026 - CVE-2026-44673</changelog>
</package>
<package pkgid="c12abc9ba32c1cadcb1c763b74583507243fc767eeab85940a2fcf1a5b994943" name="libyang-devel" arch="x86_64">
  <version epoch="0" ver="2.1.148" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.80-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.80-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2.1.80-5" date="1709380800">- Properly check valgrind arches</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.80-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-1" date="1724328000">- New version 2.1.148</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.148-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-3" date="1762344000">- Resolves: RHEL-119430 - Move libyang-devel to CRB</changelog>
</package>
<package pkgid="d266824a3e6d7a8673111f0672e85fb579ac8d2b937a4f6529213e5e4acb4087" name="libyang-devel" arch="x86_64">
  <version epoch="0" ver="2.1.148" rel="4.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.80-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-1" date="1724328000">- New version 2.1.148</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.148-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-3" date="1762344000">- Resolves: RHEL-119430 - Move libyang-devel to CRB</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-4" date="1779710400">- DoS or arbitrary code execution via maliciously crafted LYB binary blob
- Resolves: RHEL-177026 - CVE-2026-44673</changelog>
</package>
<package pkgid="a1b822d8dfd6a41dd97f4afb13cef5c5226121cb9251818bea3279894291dd60" name="libyang-devel-doc" arch="x86_64">
  <version epoch="0" ver="2.1.148" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.80-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.80-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2.1.80-5" date="1709380800">- Properly check valgrind arches</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.80-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-1" date="1724328000">- New version 2.1.148</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.148-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-3" date="1762344000">- Resolves: RHEL-119430 - Move libyang-devel to CRB</changelog>
</package>
<package pkgid="1a4ef330245d738db9a843ed78bbaa2222385b594d81d7b9fecaf78578727a63" name="libyang-devel-doc" arch="x86_64">
  <version epoch="0" ver="2.1.148" rel="4.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.80-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-1" date="1724328000">- New version 2.1.148</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.148-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-3" date="1762344000">- Resolves: RHEL-119430 - Move libyang-devel to CRB</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-4" date="1779710400">- DoS or arbitrary code execution via maliciously crafted LYB binary blob
- Resolves: RHEL-177026 - CVE-2026-44673</changelog>
</package>
<package pkgid="958b97d29e4fe065bb71fdcf79bea3e2b4e8152ceb1d7e3c2a5a23e4c68e31ba" name="libyang-tools" arch="x86_64">
  <version epoch="0" ver="2.1.148" rel="3.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.80-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.80-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="David Abdurachmanov &lt;davidlt@rivosinc.com&gt; - 2.1.80-5" date="1709380800">- Properly check valgrind arches</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.80-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-1" date="1724328000">- New version 2.1.148</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.148-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-3" date="1762344000">- Resolves: RHEL-119430 - Move libyang-devel to CRB</changelog>
</package>
<package pkgid="fc292af7dec15739c4160263e5df213b0cc2570fa59ec92b1400bacee046ebdd" name="libyang-tools" arch="x86_64">
  <version epoch="0" ver="2.1.148" rel="4.el10_2"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.80-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-1" date="1724328000">- New version 2.1.148</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.1.148-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-3" date="1762344000">- Resolves: RHEL-119430 - Move libyang-devel to CRB</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.1.148-4" date="1779710400">- DoS or arbitrary code execution via maliciously crafted LYB binary blob
- Resolves: RHEL-177026 - CVE-2026-44673</changelog>
</package>
<package pkgid="40fab72da2e570a893ae0ddab33eb338b835dd34a8ab2efa38d9e2152cff0baa" name="libzhuyin" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="9.el10"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.0-1" date="1672833600">- Update to 2.8.0
- bug fixes for ARMv7</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.1-1" date="1673870400">- Update to 2.8.1
- bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.1-3" date="1684497600">- Migrate to SPDX license</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.8.1-5" date="1692792000">- Switch to use Kyoto Cabinet</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.1-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.8.1-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="408de3267d6e805b1b61d8868dd0ba7546bfa52003f6f485cbe320fe7c3d58db" name="libzip" arch="x86_64">
  <version epoch="0" ver="1.10.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.2-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.10.0-1" date="1688990400">- update to 1.10.0
- use python3-nihtest instead of perl for tests</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.10.1-1" date="1692792000">- update to 1.10.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="ee77abb7b6314535a83d7b29cccdc44b480a706052e2728b4ae7956f431701ca" name="libzip-devel" arch="x86_64">
  <version epoch="0" ver="1.10.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.2-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.10.0-1" date="1688990400">- update to 1.10.0
- use python3-nihtest instead of perl for tests</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.10.1-1" date="1692792000">- update to 1.10.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="a7faeca35902ea03045fb386a612aa20744df4c69de9302f3e8e5bfc90ae4fb9" name="libzip-tools" arch="x86_64">
  <version epoch="0" ver="1.10.1" rel="5.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.2-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.10.0-1" date="1688990400">- update to 1.10.0
- use python3-nihtest instead of perl for tests</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.10.1-1" date="1692792000">- update to 1.10.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.1-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.10.1-5" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="74c6db2baf7c9f95b345830a9154102efc8ebae05656b33628c4a6f28769e41c" name="libzstd" arch="x86_64">
  <version epoch="0" ver="1.5.5" rel="9.el10"/>
  <changelog author="P&#xE1;draig Brady &lt;P@draigBrady.com&gt; - 1.5.4-1" date="1676289600">- Latest upstream</changelog>
  <changelog author="P&#xE1;draig Brady &lt;P@draigBrady.com&gt; - 1.5.5-1" date="1680696000">- Latest upstream</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1.5.5-2" date="1681387200">- migrate to SPDX license format</changelog>
  <changelog author="Ji&#x159;&#xED; Ku&#x10D;era &lt;jkucera@redhat.com&gt; - 1.5.5-3" date="1687435200">- Drop gtest on RHEL (c9s backport)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.5-4" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.5-5" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.5-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5.5-7" date="1721649600">- Add the gating test from rhel-9
Related: RHEL-50092</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5.5-8" date="1721736000">- Backport the patch that enables BTI on aarch64
Related: RHEL-50092</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.5-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="c1c68409915088e4baa2659e4ff3746ad6d618bf05e36faf61edb26af4e57b1b" name="libzstd-devel" arch="x86_64">
  <version epoch="0" ver="1.5.5" rel="9.el10"/>
  <changelog author="P&#xE1;draig Brady &lt;P@draigBrady.com&gt; - 1.5.4-1" date="1676289600">- Latest upstream</changelog>
  <changelog author="P&#xE1;draig Brady &lt;P@draigBrady.com&gt; - 1.5.5-1" date="1680696000">- Latest upstream</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1.5.5-2" date="1681387200">- migrate to SPDX license format</changelog>
  <changelog author="Ji&#x159;&#xED; Ku&#x10D;era &lt;jkucera@redhat.com&gt; - 1.5.5-3" date="1687435200">- Drop gtest on RHEL (c9s backport)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.5-4" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.5-5" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.5-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5.5-7" date="1721649600">- Add the gating test from rhel-9
Related: RHEL-50092</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5.5-8" date="1721736000">- Backport the patch that enables BTI on aarch64
Related: RHEL-50092</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.5-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="9edfff4e722b5d8e98a06a3dac55c3a02a8cc98611da3bf07f4caa89605f702b" name="libzstd-static" arch="x86_64">
  <version epoch="0" ver="1.5.5" rel="9.el10"/>
  <changelog author="P&#xE1;draig Brady &lt;P@draigBrady.com&gt; - 1.5.4-1" date="1676289600">- Latest upstream</changelog>
  <changelog author="P&#xE1;draig Brady &lt;P@draigBrady.com&gt; - 1.5.5-1" date="1680696000">- Latest upstream</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1.5.5-2" date="1681387200">- migrate to SPDX license format</changelog>
  <changelog author="Ji&#x159;&#xED; Ku&#x10D;era &lt;jkucera@redhat.com&gt; - 1.5.5-3" date="1687435200">- Drop gtest on RHEL (c9s backport)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.5-4" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.5-5" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.5-6" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5.5-7" date="1721649600">- Add the gating test from rhel-9
Related: RHEL-50092</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5.5-8" date="1721736000">- Backport the patch that enables BTI on aarch64
Related: RHEL-50092</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.5.5-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="fd9b16167ea6a7d9ad9cc03deb531a1c5950848eee9db419379fb5d9506e7006" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20260411" rel="19.5.el10_1"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-19.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128447)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128447</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-19.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-140094)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-140094</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-19.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145532)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145532</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260311-19.4" date="1773230400">- Update linux-firmware to latest upstream (RHEL-154362)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-154362</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260411-19.5" date="1775908800">- Update linux-firmware to latest upstream (RHEL-164389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
Resolves: RHEL-164389</changelog>
</package>
<package pkgid="35a7cd7896ba96804c48241cd66e84c81274ac4ec563a4fa7b9adb8032a7cc80" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20260609" rel="23.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250212-14" date="1740484800">- accel: ivpu: Update firmware for NPU (RHEL-38586)
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
</package>
<package pkgid="f9d59c419ebd4a3441ad91a511e0a09f259984ded100dcd9e6a9d781792a99e1" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20260707" rel="23.1.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream ()
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
</package>
<package pkgid="ad8043abe88d843bd74d031c950b4ad8fdc140cc7a58b94bca97dc513ad57d8e" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20260804" rel="23.2.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream (RHEL-188389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260804-23.2" date="1785844800">- Update linux-firmware to latest upstream (RHEL-214057)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- linux-firmware: Add firmware binary files for new HP project (Messi)
- qcom: Add gpu firmwares for Eliza chipset
- cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
- rtw89: 8922d: add fw 0.35.113.2
- qcom: venus-5.4: fix vp9 decoder assertion failure
- qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
- qcom: Update qdsp6sw firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- intel_vpu: Update NPU firmware
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: Add firmware for new soundwire projects
- rtw88: add firmware v41.0.0 for RTL8723B
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add ADSP firmware for hawi platform
- powervr: add firmware for Imagination Technologies BXM-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform
Resolves: RHEL-214057</changelog>
</package>
<package pkgid="543d6b64dc80c677cd85973340e8ed5d6daa507524989e50877d6db59ea991b4" name="linux-firmware-whence" arch="noarch">
  <version epoch="0" ver="20260411" rel="19.5.el10_1"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-19.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128447)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128447</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-19.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-140094)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-140094</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-19.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145532)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145532</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260311-19.4" date="1773230400">- Update linux-firmware to latest upstream (RHEL-154362)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-154362</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260411-19.5" date="1775908800">- Update linux-firmware to latest upstream (RHEL-164389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
Resolves: RHEL-164389</changelog>
</package>
<package pkgid="bc4f8cc44c7d2363a270c405a43a3858ac7e6f8c6496c1b7c0a84098361be2f0" name="linux-firmware-whence" arch="noarch">
  <version epoch="0" ver="20260609" rel="23.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250212-14" date="1740484800">- accel: ivpu: Update firmware for NPU (RHEL-38586)
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
</package>
<package pkgid="f524a5e629b0bbec9feef5dd36f271ca1eebce0d2d5bf4b32a8357a2490d2fd6" name="linux-firmware-whence" arch="noarch">
  <version epoch="0" ver="20260707" rel="23.1.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream ()
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
</package>
<package pkgid="f139cf019d1f979b8f5b1338bbe92454ac6821608785f41266ac5b08adfb5304" name="linux-firmware-whence" arch="noarch">
  <version epoch="0" ver="20260804" rel="23.2.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-20" date="1762862400">- Fix random hangs of Dell Pro Max laptops when on battery power (RHEL-117675)
- AMDGPU: Update firmware for Strix Halo (RHEL-104078)
- AMDGPU: Add firmware for Gorgon Point (RHEL-107606)
- Update linux-firmware to latest upstream
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-117675, RHEL-104078, RHEL-107606</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-21" date="1767787200">- Update linux-firmware to latest upstream (RHEL-119866)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
Resolves: RHEL-119866</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-22" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145527)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145527</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260609-23" date="1781006400">- Update linux-firmware to latest upstream (RHEL-179828)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669
- qcom: Update DSP firmware for qcs8300 platform
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: Update DMCUB fw for DCN314
- amdgpu: revert yellow carp VCN firmware
- amdgpu: revert vangogh VCN firmware
- amdgpu: revert sienna cichlid VCN firmware
- amdgpu: revert navy flounder VCN firmware
- amdgpu: revert dimgrey cavefish VCN firmware
- amdgpu: revert beige_goby VCN firmware
- qcom: update CDSP firmware for x1e80100 platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop
- linux-firmware: Add RCA firmware files for tas257x projects
- intel_vpu: Update NPU firmware
- cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop
- QCA: Add BCS calibration binary for QCC2072
- QCA: Update Bluetooth firmware for QCC2072 UART interface
- amdgpu: DMCUB updates for various ASICs
- rtl_nic: add firmware rtl8261c.bin for RTL8261c
- cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops
- i915: Xe3LPD DMC v2.36
- i915: Xe3LPD_3002 DMC v2.31
- i915: Xe3p_LPD DMC v2.37
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- qcom: Add gpu firmwares for Shikra chipset
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- rtw89: 8852b: update fw to v0.29.29.18
- rtw89: 8852bt: update fw to v0.29.122.2
- amdgpu: Update gc 11.0.1 microcode
- ASoC: tas2783: Add Firmware files for tas2783A projects
- linux-firmware: add firmware for MT7927 WiFi device
- Add HP ISH firmware for Intel Panther Lake systems
- ti: Add PCM6240 firmware with multiple audio profiles support
- qcom: add CDSP firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- qcom: update ADSP firmware for x1e80100 platform
- lt*_fw.bin: move to Lontium subdir
- qcom: Add cdsp1r.jsn for sa8775p platform
- amdgpu: rembrandt DMCUB v4.0.74.0
- linux-firmware: Add firmware for Lontium LT9611C
- xe: Update GUC to v70.65.0 for LNL, BMG, PTL
- amdgpu: update SMU 14.0.3 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update green sardine firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 4.4.4 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update SDMA 4.4.5 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update VPE 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update renoir firmware
- amdgpu: update aldebaran firmware
- rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU
- amdgpu: DMCUB updates for various ASICs
- Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems.
- qcom: update ADSP firmware for x1e80100 platform
- linux-firmware:Add firmware for Lontium LT7911EXC bridge
- qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too
- qcom: Update CDSP firmware for Kaanapali platform
- qcom: vpu: add Gen2 firmware binary for Agatti
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Update ADSP firmware for Glymur platform
- mediatek MT7925: update bluetooth firmware to 20260414153243
- linux-firmware: update firmware for MT7925 WiFi device
- Revert "linux-firmware: Update firmware file for Intel Quasar core"
- qcom: Add gpdspr.jsn for qcs8300 platform
- ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1
- ath12k: QCC2072 hw1.0: add board-2.bin
- ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1
- ath12k: IPQ5424 hw1.0: add board-2.bin
- qcom: Update ADSP firmware for Kaanapali platform
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d)
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666
- amdgpu: DMCUB updates for DCN36
- linux-firmware: Update AMD cpu microcode
- powervr: update Imagination Rogue firmware images
- qcom: Update ADSP firmware for Kaanapali platform
- i915: Xe3LPD DMC v2.34
- i915: Xe3LPD_3002 DMC v2.29
- qcom: Update ADSP firmware for QCM6490 platform
- firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0
- mediatek: vpu: drop old sym link
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-179828</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260707-23.1" date="1783425600">- Update linux-firmware to latest upstream (RHEL-188389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Release GuC firmware for NVL-S
- cirrus: cs35l56: Update firmware for the ASUS UX5406SA
- qcom: vpu: add Gen2 firmware binary for Purwa
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
- iwlwifi: add Bz/Sc FW for core24.60-33 release
- iwlwifi: Add Hr/Gf firmware for core24.60-33 release
- iwlwifi: update ty/So/Ma firmwares for core24.60-33 release
- iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release
- cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
- docs: address feedback on LICENSE-CRITERIA.md
- Adjust statement on existing firmware
- docs: add LICENSE-CRITERIA.md as project licensing policy
- ueagle-atm: sadly drop unlicensed files
- linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware for new projects
- rtw89: 8852a: add TX power track R34
- linux-firmware: Update AMD SEV firmware
- nxp: add firmware for IW61x WiFi device
- mediatek MT7922: update bluetooth firmware to 20260605203811
- mediatek MT7925: update bluetooth firmware to 20260605184935
- linux-firmware: update firmware for MT7925 WiFi device
- linux-firmware: update firmware for MT7922 WiFi device
- amdgpu: DMCUB updates for various ASICs
- qcom: add LPAICP firmware for shikra platform
- qcom: Add qdsp6sw firmware for shikra platform
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7996
- linux-firmware: update firmware for MT7992
- linux-firmware: update firmware for MT7990
- qcom: Update ADSP firmware for Kaanapali platform
- qcom: update ADSP firmware for glymur platform
- qcom: update CDSP firmware for glymur platform
- QCA: Add bluetooth firmware nvm files for USI/NFA725B
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- qcom: update ADSP firmware for qcs615 platform
- cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
- rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6
- realtek: rt1321: Update the patch code to v1.10
- amdgpu: DMCUB updates for various ASICs
- QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184
- qcom: update CDSP firmware for shikra platform
- qcom: Update ADSP firmware for Glymur platform
- Remove any files with unknown licenses
- AGENTS.md, README: address second round of MR review
- README: document AI assisted contribution convention
- AGENTS.md: clarify areas raised in MR review
- Add AGENTS.md for AI coding agents
- LICENSES: update GPL-2.0 text and references
- LICENSES: rename GPL-3 to GPL-3.0-only
- LICENSES: rename Apache-2 to Apache-2.0
- Move firmware licenses to a LICENSES/ directory
- qcom: update ADSP firmware for sm8750 platform
Resolves: RHEL-188389</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260804-23.2" date="1785844800">- Update linux-firmware to latest upstream (RHEL-214057)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- linux-firmware: Add firmware binary files for new HP project (Messi)
- qcom: Add gpu firmwares for Eliza chipset
- cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
- rtw89: 8922d: add fw 0.35.113.2
- qcom: venus-5.4: fix vp9 decoder assertion failure
- qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
- qcom: Update qdsp6sw firmware for shikra platform
- amdgpu: DMCUB updates for various ASICs
- intel_vpu: Update NPU firmware
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: Add firmware for new soundwire projects
- rtw88: add firmware v41.0.0 for RTL8723B
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Scorpius core
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add ADSP firmware for hawi platform
- powervr: add firmware for Imagination Technologies BXM-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform
Resolves: RHEL-214057</changelog>
</package>
<package pkgid="9204d198833c5eb40d3ea02c9ea7c0570bd63a7574c4bdd5c86a4cba6e4f12e4" name="linuxdoc-tools" arch="x86_64">
  <version epoch="0" ver="0.9.82" rel="9.el10"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.72-15" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 0.9.82-1" date="1675598400">- New version 0.9.82</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.9.82-2" date="1681387200">- Port sgmls non-autoconf configure script to C99</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.82-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Ondrej Sloup &lt;osloup@redhat.com&gt; - 0.9.82-4" date="1698062400">- Update license tag to the SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.82-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 0.9.82-6" date="1705838401">- Silent miscompilation with GCC 14 due to C89 compatibility issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.82-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.82-8" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 0.9.82-9" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
</package>
<package pkgid="6950bc7bd129e7a4d8e3a25aa404c79b9ad88e705f3d46605355cab34e19a503" name="linuxptp" arch="x86_64">
  <version epoch="0" ver="4.4" rel="8.el10"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.3-1" date="1724068800">- update to 4.3 (RHEL-54718)
- add holdover support to ts2phc (RHEL-54716)
- rework NMEA delay patch to fix PPS edge rejection (RHEL-54719)
- fix ts2phc to reset NMEA parser after RMC message (RHEL-54724)
- fix ts2phc to correctly handle leap seconds (RHEL-54721)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-1" date="1733227200">- update to 4.4 (RHEL-58210)
- fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055)
- support static sink clocks in phc2sys automatic mode (RHEL-69145)
- don't require -O option without -a and -w in phc2sys (RHEL-69699)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-2" date="1738238400">- update selinux policy (RHEL-76786)
- harden systemd services (RHEL-76760)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-3" date="1747224000">- add experimental option for external PPS in ts2phc automatic mode
  (RHEL-89605)
- add command to set external grandmaster properties (RHEL-91310)
- refresh link status on faults (RHEL-89811)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-4" date="1748433600">- fix unicast server to recover after port fault (RHEL-93497)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-5" date="1758628800">- handle missing pulses in ts2phc (RHEL-112344)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-6" date="1765281600">- add support for dropping root privileges (disabled by default) (RHEL-12183)
- create linuxptp user and /run/ptp directory</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-7" date="1765454400">- add missing build requirement on lipcap-devel</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-8" date="1770033600">- create reverse compatibility symlink to /var/run/ptp4l (RHEL-145071)</changelog>
</package>
<package pkgid="02845d418bc331ee1193453d87533a3446c8ccdaf7488798f210f0194ce632c9" name="linuxptp" arch="x86_64">
  <version epoch="0" ver="4.4" rel="8.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-1" date="1733227200">- update to 4.4 (RHEL-58210)
- fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055)
- support static sink clocks in phc2sys automatic mode (RHEL-69145)
- don't require -O option without -a and -w in phc2sys (RHEL-69699)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-2" date="1738238400">- update selinux policy (RHEL-76786)
- harden systemd services (RHEL-76760)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-3" date="1747224000">- add experimental option for external PPS in ts2phc automatic mode
  (RHEL-89605)
- add command to set external grandmaster properties (RHEL-91310)
- refresh link status on faults (RHEL-89811)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-4" date="1748433600">- fix unicast server to recover after port fault (RHEL-93497)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-5" date="1758628800">- handle missing pulses in ts2phc (RHEL-112344)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-6" date="1765281600">- add support for dropping root privileges (disabled by default) (RHEL-12183)
- create linuxptp user and /run/ptp directory</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-7" date="1765454400">- add missing build requirement on lipcap-devel</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-8" date="1770033600">- create reverse compatibility symlink to /var/run/ptp4l (RHEL-145071)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-8.el10_2.1" date="1782907200">- fix phc2sys service to allow clocks specified by interface (RHEL-191400)
- fix high CPU usage by ptp4l when link is down (RHEL-191401)
- fix phc2sys to not get stuck in static mode (RHEL-185752)</changelog>
</package>
<package pkgid="b236569546ed1f810470aeb88a9d2837f6b2857ff94ab2b6b914f65fbb512316" name="linuxptp-selinux" arch="noarch">
  <version epoch="0" ver="4.4" rel="8.el10"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.3-1" date="1724068800">- update to 4.3 (RHEL-54718)
- add holdover support to ts2phc (RHEL-54716)
- rework NMEA delay patch to fix PPS edge rejection (RHEL-54719)
- fix ts2phc to reset NMEA parser after RMC message (RHEL-54724)
- fix ts2phc to correctly handle leap seconds (RHEL-54721)</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-1" date="1733227200">- update to 4.4 (RHEL-58210)
- fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055)
- support static sink clocks in phc2sys automatic mode (RHEL-69145)
- don't require -O option without -a and -w in phc2sys (RHEL-69699)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-2" date="1738238400">- update selinux policy (RHEL-76786)
- harden systemd services (RHEL-76760)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-3" date="1747224000">- add experimental option for external PPS in ts2phc automatic mode
  (RHEL-89605)
- add command to set external grandmaster properties (RHEL-91310)
- refresh link status on faults (RHEL-89811)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-4" date="1748433600">- fix unicast server to recover after port fault (RHEL-93497)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-5" date="1758628800">- handle missing pulses in ts2phc (RHEL-112344)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-6" date="1765281600">- add support for dropping root privileges (disabled by default) (RHEL-12183)
- create linuxptp user and /run/ptp directory</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-7" date="1765454400">- add missing build requirement on lipcap-devel</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-8" date="1770033600">- create reverse compatibility symlink to /var/run/ptp4l (RHEL-145071)</changelog>
</package>
<package pkgid="0d7cc191fd80501e83acd6acd6a67458366054fe4ad0069cef5640b2c76e733a" name="linuxptp-selinux" arch="noarch">
  <version epoch="0" ver="4.4" rel="8.el10_2.1"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 4.3-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-1" date="1733227200">- update to 4.4 (RHEL-58210)
- fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055)
- support static sink clocks in phc2sys automatic mode (RHEL-69145)
- don't require -O option without -a and -w in phc2sys (RHEL-69699)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-2" date="1738238400">- update selinux policy (RHEL-76786)
- harden systemd services (RHEL-76760)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-3" date="1747224000">- add experimental option for external PPS in ts2phc automatic mode
  (RHEL-89605)
- add command to set external grandmaster properties (RHEL-91310)
- refresh link status on faults (RHEL-89811)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-4" date="1748433600">- fix unicast server to recover after port fault (RHEL-93497)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-5" date="1758628800">- handle missing pulses in ts2phc (RHEL-112344)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-6" date="1765281600">- add support for dropping root privileges (disabled by default) (RHEL-12183)
- create linuxptp user and /run/ptp directory</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-7" date="1765454400">- add missing build requirement on lipcap-devel</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-8" date="1770033600">- create reverse compatibility symlink to /var/run/ptp4l (RHEL-145071)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.4-8.el10_2.1" date="1782907200">- fix phc2sys service to allow clocks specified by interface (RHEL-191400)
- fix high CPU usage by ptp4l when link is down (RHEL-191401)
- fix phc2sys to not get stuck in static mode (RHEL-185752)</changelog>
</package>
<package pkgid="32ef36b716b481536474c020801a1c8b6ae4ae8e158ded60cac8b837af6f8fbc" name="liquidio-firmware" arch="noarch">
  <version epoch="0" ver="20260411" rel="19.5.el10_1"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250521-16" date="1747828800">- accel: NPU: Update linux-firmware to include firmware for device (RHEL-85120)
- Add amdnpu linux firmware folder (RHEL-77950)
- Introduce new PMF TA (RHEL-86837)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-85120, RHEL-77950, RHEL-86837</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-17" date="1749038400">- 1.3.41.0 DDP firmware does not support QS silicon E825C nics (RHEL-92555)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
Resolves: RHEL-92555</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250708-18" date="1751976000">- nvidia-gpu-firmware was missing firmware/nvidia/ad10{3,4,6,7} directories (RHEL-95393)
- Resume after suspend-to-ram did not restore screen on some AMD GPUs (RHEL-100947)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Add fan_control v203.0.0.0 for BMG
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95393, RHEL-100947</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-19" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108921)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
Resolves: RHEL-108921</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-19.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128447)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128447</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-19.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-140094)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-140094</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-19.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145532)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145532</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260311-19.4" date="1773230400">- Update linux-firmware to latest upstream (RHEL-154362)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS615 platform
- Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025
- mediatek MT7922: update bluetooth firmware to 20260224103448
- linux-firmware: update firmware for MT7922 WiFi device
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops
- linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069
- qcom: Update CDSP firmware for QCM6490 platform
- linux-firmware: add firmware for Lontium LT8713SX DP hub
- linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build
- qcom: update ADSP, CDSP firmware for sm8750  platform
- qcom: update ADSP dtb.mbn for glymur platform
- qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106
-  QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update vangogh firmware
- amdgpu: update navy flounder firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update SDMA 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update navi12 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- linux-firmware:Renaming the file back for HP EliteBook X Flip G1i
- amdnpu: Restore old NPU firmware for compatibility
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware
- linux-firmware: update firmware for MT7902 BT device
- linux-firmware: update firmware for MT7902 WiFi device
- qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink
- amdgpu: DMCUB updates for various ASICs
- qcom: Update DSP firmware for qcs8300 platform
- cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements
- rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements
- rtw89: 8852bt: add regd and diag_mac and update txpwr to R09
- rtw89: 8852b: update txpwr element to R43
- rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements
- Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2"
- xe: Update GUC to v70.58.0 for LNL, BMG, PTL
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6390 hw2.0: update board-2.bin
- qcom: Add gpu firmwares for Glymur chipset
- amdgpu: DMCUB updates for various ASICs
- qcom: vpu: add video firmware for Glymur
- qcom: add QUPv3 firmware for x1e80100 platform
- Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants
- Bluetooth: Add symbolic links for Intel Solar firmware variants
- Bluetooth: Add symbolic links for Intel Pulsar firmware variants
- Bluetooth: Add symbolic links for Intel AX201 firmware variants
- ath10k: WCN3990 hw1.0: update board-2.bin
- qcom: add ADSP, CDSP firmware for glymur platform
- ASoC: tas2783: Add Firmware files for tas2783A
- linux-firmware: Update firmware file for Intel Solar core
- mediatek MT7921: update bluetooth firmware to 20251223091725
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673
- ath12k: WCN7850 hw2.0: update board-2.bin
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- WHENCE: Correct 2 trailing whitespaces
- linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- linux-firmware: Add Dell ISH firmware for Intel panther lake systems
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
- rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- ice: update DDP LAG package to 1.3.2.0
- cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware
- rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
- rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC
- Update firmware for NPU PHX, STX and STX HALO
- qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
- qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-154362</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260411-19.5" date="1775908800">- Update linux-firmware to latest upstream (RHEL-164389)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: Revert Yellow Carp DMUB fw to 0x4000045
- linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build
- qcom: consolidate audioreach-tplg firmwares into one location in WHENCE
- WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems
- intel_vpu: Update NPU firmware
- Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673"
- nvidia: add acr/bl symlink for booting GSP-RM on GA100
- qcom: add QUPv3 firmware for shikra
- xe: Update GUC to v70.60.0 for LNL, BMG, PTL
- qcom: update ADSP firmware for sm8750 platform
- qcom: update CDSP firmware for glymur platform
- cirrus: cs35l41: Add support for new HP laptops
- cirrus: cs35l41: Add support for new ASUS laptops
- cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg
- WHENCE: Move Dell remoteproc firmware to correct section
- qcom: vpu: add video firmware for SM8450
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- iwlwifi: add Bz/Sc FW for core103-40 release
- iwlwifi: Add Hr/Gf firmware for core103-40 release
- iwlwifi: update ty/So/Ma firmwares for core103-40 release
- amdgpu: DMCUB updates for various ASICs
- xe: Update PTL GSC to v105.0.2.1397
- linux-firmware: add firmware for Moxa mux50u devices
- rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78
- ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- linux-firmware: update firmware for qat_4xxx devices
- linux-firmware: update firmware for qat_402xx devices
- linux-firmware: update firmware for qat_420xx devices
- linux-firmware: update firmware for an8811hb 2.5G ethernet phy
- linux-firmware: qcom: Add FW blobs for DELL XPS13 9345
- amdgpu: DMCUB updates for various ASICs
- cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops
- cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops
- linux-firmware: Add firmware file for Intel BlazarIW
- linux-firmware: Add firmware file for Intel BlazarIGfp2 core
- iwlwifi: add Bz/Wh FW for core102-56 release
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
- mediatek MT7921: update bluetooth firmware to 20260224111243
- mediatek MT7920: update bluetooth firmware to 20260224111231
- Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11)
- linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform
- linux-firmware: update firmware for MT7920 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
- linux-firmware: Update firmware file for Intel Quasar core
- Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- intel_vpu: Update NPU firmware
Resolves: RHEL-164389</changelog>
</package>
<package pkgid="3d16051f2c08a00ba2182b41e211fa59e71af11335b631c1df4818b8838a4140" name="liquidio-firmware" arch="noarch">
  <version epoch="0" ver="20260609" rel="23.el10_2"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250212-14" date="1740484800">- accel: ivpu: Update firmware for NPU (RHEL-38586)
Resolves: RHEL-38586</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-15" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38586)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 